Hi,
after some troubles, I finally get a grade A for http requests, but there is something else I have to fix since I still cannot renew the certificates (again the “connection refused” error)
I have tried to modify some configuration files (general apache2, sites-enabled, .htaccess), I have fixed some errors.
I also put a file in .well-known/acme-challenge directory in order to verify if it was reachable via a web browser (you can find it here: http://integrasrl.cloud/.well-known/acme-challenge/test ), but I cannot understand how to fix it for certbot.
With the checking site you suggested to me, I can see the following errors:
B https://integrasrl.cloud/ 79.10.35.238 - 302 - Missing HSTS-Header
B https://integrasrl.cloud/login - 200 - Missing HSTS-Header
B https://www.integrasrl.cloud/ 79.10.35.238 - 301 - Missing HSTS-Header
C Error - more then one version with Http-Status 200
F https://www.integrasrl.cloud/ 79.10.35.238 - 301 - http://integrasrl.cloud/ - wrong redirect https - http - never redirect https to http
H fatal error: http result with http-status 200, no encryption
N https://integrasrl.cloud/ 79.10.35.238 - 302 - https://integrasrl.cloud/login - Error - Certificate isn’t trusted, RemoteCertificateChainErrors
N https://integrasrl.cloud/login - 200 - Error - Certificate isn’t trusted, RemoteCertificateChainErrors
N https://www.integrasrl.cloud/ 79.10.35.238 - 301 - http://integrasrl.cloud/ - Error - Certificate isn’t trusted, RemoteCertificateChainErrors
X Fatal error: Nameserver doesn’t support TCP connection: a.nic.cloud: Fatal error (-14). Details: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host. - An existing connection was forcibly closed by the remote host
but I don’t know if they are all involved in my issue.
For example I know that there is a problem with the certificates, since I have to renew them, and also I am not sure I need to try to fix the HSTS errors or the grade F: I do not want to redirect https to http
I would appreciate any help to understand how to go on with the renewal of the certificates
Thank you for your attention