# Installing letsencrypt certificate on Sonarqube Server?

**URL:** <https://community.sonarsource.com/t/installing-letsencrypt-certificate-on-sonarqube-server/28438>\
**Category:** SonarQube Server / Community Build\
**Tags:** sonarqube\
**Created:** [July 21, 2020, 12:54pm UTC](https://community.sonarsource.com/t/installing-letsencrypt-certificate-on-sonarqube-server/28438 "2020-07-21T12:54:46Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Amarnath\_Jena](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/amarnath_jena/32/13617_2.png) [@Amarnath\_Jena](https://community.sonarsource.com/u/Amarnath_Jena)\
**Post date:** [July 21, 2020, 12:54pm UTC](https://community.sonarsource.com/t/installing-letsencrypt-certificate-on-sonarqube-server/28438/1 "2020-07-21T12:54:46Z")

</div>

Must-share information (formatted with [Markdown](https://commonmark.org/help/)):

- which versions are you using (SonarQube, Scanner, Plugin, and any relevant extension): 7.5
- what are you trying to achieve: I have generated letsencrypt certificate in server but not able to get the web interface of sonarqube on https.
- what have you tried so far to achieve this: I have generated letsencrypt certificate in server.

---

<div class="post-metadata">

**Author:** ![Tobias\_Trabelsi](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/tobias_trabelsi/32/31755_2.png) [@Tobias\_Trabelsi](https://community.sonarsource.com/u/Tobias_Trabelsi)\
**Post date:** [July 21, 2020, 1:07pm UTC](https://community.sonarsource.com/t/installing-letsencrypt-certificate-on-sonarqube-server/28438/2 "2020-07-21T13:07:49Z")

</div>

Hi @Amarnath_Jena ,

welcome to the community 👋  
in order to use TLS you have to configure it on your reverse proxy and not on sonarqube. You can find a guidline [here](https://docs.sonarqube.org/latest/setup/operate-server/#header-5)

hope that helps (:

---

<div class="post-metadata">

**Author:** ![Amarnath\_Jena](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/amarnath_jena/32/13617_2.png) [@Amarnath\_Jena](https://community.sonarsource.com/u/Amarnath_Jena)\
**Post date:** [July 22, 2020, 12:05pm UTC](https://community.sonarsource.com/t/installing-letsencrypt-certificate-on-sonarqube-server/28438/3 "2020-07-22T12:05:14Z")

</div>

user www-data;  
worker\_processes auto;  
pid /run/nginx.pid;  
include /etc/nginx/modules-enabled/\*.conf;

events {  
worker\_connections 768;  
# multi\_accept on;  
}

http {  
server {  
server\_name [sonarqube01.ho.mpgps.co](http://sonarqube01.ho.mpgps.co);  
ssl on;

```
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/sonarqube01.ho.mpgps.co/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/sonarqube01.ho.mpgps.co/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
location / {
   proxy_pass http://10.200.249.24:9000;
   proxy_set_header X-Forwarded-For $remote_addr;
       proxy_set_header X-Forwarded-Proto https;

```

}  
}  
##  
# Basic Settings  
##  
sendfile on;  
tcp\_nopush on;  
tcp\_nodelay on;  
keepalive\_timeout 65;  
types\_hash\_max\_size 2048;  
# server\_tokens off;

```
server_names_hash_bucket_size 64;
# server_name_in_redirect off;

include /etc/nginx/mime.types;
default_type application/octet-stream;

##
# SSL Settings
##

ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
ssl_prefer_server_ciphers on;

##
# Logging Settings
##

access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;

##
# Gzip Settings
##

gzip on;

# gzip_vary on;
# gzip_proxied any;
# gzip_comp_level 6;
# gzip_buffers 16 8k;
# gzip_http_version 1.1;
# gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;

##
# Virtual Host Configs
##

include /etc/nginx/conf.d/*.conf;
include /etc/nginx/sites-enabled/*.*;

server {
if ($host = sonarqube01.ho.mpgps.co) {
    return 301 https://$host$request_uri;
} # managed by Certbot

server_name sonarqube01.ho.mpgps.co;
listen 9090;
return 404; # managed by Certbot

```

}}

#mail {

# # See sample authentication script at:

# # [http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript](http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript)

# 

# # auth\_http localhost/auth.php;

# # pop3\_capabilities “TOP” “USER”;

# # imap\_capabilities “IMAP4rev1” “UIDPLUS”;

# 

# server {

# listen localhost:110;

# protocol pop3;

# proxy on;

# }

# 

# server {

# listen localhost:143;

# protocol imap;

# proxy on;

# }

#}

---

<div class="post-metadata">

**Author:** ![Amarnath\_Jena](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/amarnath_jena/32/13617_2.png) [@Amarnath\_Jena](https://community.sonarsource.com/u/Amarnath_Jena)\
**Post date:** [July 22, 2020, 12:06pm UTC](https://community.sonarsource.com/t/installing-letsencrypt-certificate-on-sonarqube-server/28438/4 "2020-07-22T12:06:29Z")

</div>

above is my nginx config but still sonarqube doesnt respond to 443.

---

<div class="post-metadata">

**Author:** ![Amarnath\_Jena](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/amarnath_jena/32/13617_2.png) [@Amarnath\_Jena](https://community.sonarsource.com/u/Amarnath_Jena)\
**Post date:** [July 22, 2020, 12:10pm UTC](https://community.sonarsource.com/t/installing-letsencrypt-certificate-on-sonarqube-server/28438/5 "2020-07-22T12:10:01Z")

</div>

sorry its working now thanks

---

<div class="post-metadata">

**Author:** ![system](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/system/32/31083_2.png) [@system](https://community.sonarsource.com/u/system)\
**Post date:** [July 29, 2020, 12:10pm UTC](https://community.sonarsource.com/t/installing-letsencrypt-certificate-on-sonarqube-server/28438/6 "2020-07-29T12:10:08Z")

</div>

Closed on July 29, 2020, 12:10pm UTC

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.