lets-encrypt

Let's encrypt error certificate install error - “Client with the currently selected authenticator does not support any combination of challenges”

纵饮孤独 提交于 2019-12-02 17:07:16
I got this error while renewing let's encrypt certificate: "Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA" How can I fix this? The command I running is like this: ./letsencrypt-auto --apache --renew-by-default -d <domain name> It is because Let’s Encrypt has currently disabled the TLS-SNI-01 challenge due to an identified security issue . The official has provided an workaroud at the Let's Encrypt community website as following: If you’re serving files for that domain out of a directory on that server, you can run the

How do you score A+ with 100 on all categories on SSL Labs test with Let's Encrypt and Nginx?

北城以北 提交于 2019-12-02 15:44:42
I'm trying to score 100 on all categories when testing my SSL certs at www.ssllabs.com However, I am struggling to get A+ and 100 on all scores. Any tips as to what NGINX config I should use? Or how I should generate my Let's Encrypt certs? thx These instructions apply to all certs (including Let's Encrypt certs). However, one or two Let's Encrypt specific tips are given. The NGINX SSL config given below will give you the following SSL Labs scores. You choose: Recommended A+ Certificate 100/100 Protocol Support 95/100 Key Exchange 90/100 Cipher Strength 90/100 Perfect but restrictive A+

How do I use let’s encrypt with gitlab?

末鹿安然 提交于 2019-12-02 14:04:42
I started to look in to ssl certificates when I stumbled upon let's encrypt , and I wanted to use it with gitlab, however being that it is running on a raspberry pi 2 and its running quite perfectly now (so I dont want to mess anything up), he would I go about installing a lets encrypt ssl certificate properly? PS: My installation is omnibus There are 2 ways depending on your infrastructure setup (Raspi, big Cloud server or something in between): If you have an externally accessible Server (means your Gitlab host is callable from the Let´s Encrypt servers, which is needed for Let´s Encrypt´s

How to properly set up HTTPS for OnlyOffice

冷暖自知 提交于 2019-12-02 03:42:30
问题 Following OnlyOffice's help center's instructions leads to the creation of security certificate declared as invalid by browsers, as it is self-signed. The intention is to use OnlyOffice's server on Docker for NextCloud, which runs properly already on another server. Currently, the certificates have been created in the directory suggested by the instructions: /app/onlyoffice/DocumentServer/data/certs# ls dhparam.pem onlyoffice.crt onlyoffice.csr onlyoffice.key I have followed all the given

Rails 5, Heroku with Let's Encrypt SSL - trouble getting setup configured

你离开我真会死。 提交于 2019-12-01 22:41:20
I'm trying to figure out how to use let's encrypt with my rails app on heroku. I've tried several gems which appear to have been designed to help with this process (letsencrypt-plugin)but have removed all of the installation steps those gems recommend because I couldn't get this working. Now, I'm back to trying to make sense of the tutorials set out here: http://collectiveidea.com/blog/archives/2016/01/12/lets-encrypt-with-a-rails-app-on-heroku/ https://medium.com/should-designers-code/how-to-set-up-ssl-with-lets-encrypt-on-heroku-for-free-266c185630db#.h9vjoxboq I'm not getting far. I'm

Rails 5, Heroku with Let's Encrypt SSL - trouble getting setup configured

拈花ヽ惹草 提交于 2019-12-01 21:51:24
问题 I'm trying to figure out how to use let's encrypt with my rails app on heroku. I've tried several gems which appear to have been designed to help with this process (letsencrypt-plugin)but have removed all of the installation steps those gems recommend because I couldn't get this working. Now, I'm back to trying to make sense of the tutorials set out here: http://collectiveidea.com/blog/archives/2016/01/12/lets-encrypt-with-a-rails-app-on-heroku/ https://medium.com/should-designers-code/how-to

Letsencrypt acme-challenge on wordpress or asp.net mvc

时光总嘲笑我的痴心妄想 提交于 2019-11-30 20:51:11
I have been trying without success to generate security certificates for my company using Let's Encrypt. My company uses WordPress 3.9.7 for its main website and I am not allow to upgrade to a newer version since that is handled by a third party company. The website is running on top of Internet Information Services 7.5 on Windows Server 2008 R2. My question is: How can I make wordpress handle http://www.company.com/.well-known/acme-challenge/mftvrU2brecAXB76BsLEqW_SL_srdG3oqTQTzR5KHeA ? I have already created a new empty page and a new template that returns exactly what let's encrypt is

Python SSL requests and Let's Encrypt certs

拥有回忆 提交于 2019-11-30 19:40:48
I'm struggling at the moment to get the requests library to perform a simple GET request to a site of mine with a Let's Encrypt certificate. All's well with the site and I can access it from Chrome just fine. (I'm running OSX El Capitan at the moment). First I tried doing a GET request to the site: >>> import requests >>> requests.get('https://example.com') This gives me: requests.exceptions.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590) I then tried various things, including getting hold of the Let's Encrypt authority certificate , and the following openssl

Convert Certificate and Private Key to .PFX programatically in C#

北慕城南 提交于 2019-11-30 18:53:44
I have a .cer file output from a successful LetsEncrypt certificate request. I have the original Private Key used to create the Certificate Signing Request (CSR) for LetsEncrypt. Now we need to programmatically combine these two files into a PFX bundle for IIS using .NET Since we are trying to to do this programmatically pvk2pfx is not practical, and we would like to avoid openssl if possible. To demonstrate though, we are trying to replicate this function but using CS .NET instead of pvk2pfx: pvk2pfx.exe -pvk Server.pvk -spc Server.cer -pfx Server.pfx I have researched exhaustively and here

Letsencrypt ImportError: No module named interface on amazon linux while renewing

落爺英雄遲暮 提交于 2019-11-30 17:33:05
Today when i tried to renew my certificates using this command I'm facing error /opt/letsencrypt/letsencrypt-auto renew --config /etc/letsencrypt/config.ini --agree-tos && apachectl graceful also tried this command /opt/letsencrypt/letsencrypt-auto renew Error : Traceback (most recent call last): File "/root/.local/share/letsencrypt/bin/letsencrypt", line 7, in <module> from certbot.main import main File "/root/.local/share/letsencrypt/local/lib/python2.7/dist-packages/certbot/main.py", line 12, in <module> import zope.component File "/root/.local/share/letsencrypt/local/lib/python2.7/dist