Add virtual host for port 80

[aeckhart]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: casper.defiancecityschools.org

I ran this command: sudo certbot --apache

It produced this output:Unable to find a virtual host listening on port 80 which is currently needed for Certbot to prove to the CA that you control your domain. Please add a virtual host for port 80.

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: There is no hosting provider. This is a JamfPro server

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

I am trying to get a SSL cert for our Jamf Pro server and am running into the Virtual Host error. I'm not sure how to configure a virtual host and so far JAMF has been no help. Any help would be appreciated.

[griffin]

Welcome to the Let's Encrypt Community

I'll try to help you out here. While I'm not familiar with Jamf Pro, I am familiar with Apache.

I've noticed that both ports 80 (http) and 443 (https) appear to be closed for casper.defiancecityschools.org. This could be due to the VirtualHost being missing in Apache. My question is though, do you ever actually have an Apache webserver operating over http at all? Put another way, do you ever see a webpage in a browser when you visit casper.defiancecityschools.org? If not, there's another way to use certbot to get a certificate that I can show you.

Try this for me if you would, and let me know the result:

sudo certbot certonly --standalone -d "casper.defiancecityschools.org" --dry-run

[aeckhart]

Griffith,

Thank you for the reply. I've been at this for too many hours and am still have no luck - my strength is not web programing/server maintenance. When I read your post it started thinking that my issue might be a port issue as the actual address necessary to log into the site is casper.defiancecityschools.org:8443. Based on my limited knowledge this makes sense that I am having problems.

And I did run the command that you asked about. Here is the output: --dry-run currently only works with the 'certonly' or 'renew' subcommands ('run')

[griffin]

I forgot to put certonly in the command. Sorry about that. I updated the command in my previous post.

[aeckhart]

Griffin,

Here is the output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log

Plugins selected: Authenticator standalone, Installer None

Account registered.

Simulating a certificate request for casper.defiancecityschools.org

Performing the following challenges:

http-01 challenge for casper.defiancecityschools.org

Cleaning up challenges

Problem binding to port 80: Could not bind to IPv4 or IPv6.

Casper:conf.d administrator$"