Can't get certbot to work successfully

Help
21

I can’t see why this is failing…
Let’s try --webroot method.
Since we still have that Alias for /.well-known/acme-challenge/, we really don’t need to be accurate about the actual webroot used.

Try this test:
certbot certonly --webroot -w /var/www/html -d voidcitymc.com --staging

22

Exactly the same error as before

23

Is there anything meaningful in the error.log file?
/var/log/apache2/error.log

25

[Wed Nov 06 01:33:09.168638 2019] [mpm_prefork:not$[Wed Nov 06 01:33:09.168769 2019] [core:notice] [p$[Wed Nov 06 01:39:15.943672 2019] [mpm_prefork:not$AH00558: apache2: Could not reliably determine the$[Wed Nov 06 01:39:16.301235 2019] [mpm_prefork:not$[Wed Nov 06 01:39:16.301351 2019] [core:notice] [p$[Wed Nov 06 01:39:23.235478 2019] [mpm_prefork:not$AH00558: apache2: Could not reliably determine the$[Wed Nov 06 01:39:23.571129 2019] [mpm_prefork:not$[Wed Nov 06 01:39:23.571231 2019] [core:notice] [p$

26

OK lets add back (if you removed them) the long path:
mkdir /ACME-challenges/.well-known/
mkdir /ACME-challenges/.well-known/acme-challenge/

and try:
certbot certonly --webroot -w /ACME-challenges/ -d voidcitymc.com --staging

27

Same error as before

28

OK rem out, or delete, the Alias line added to the /etc/apache2/apache2.conf file.
restart apache
try again:
certbot certonly --webroot -w /ACME-challenges/ -d voidcitymc.com --staging

29

Again it’s same error as before

30

Do you think the issue is with my domain names nameservers?

31

OMG! IMPOSSIBLE!
…

No.
Our test-file worked!

OK WE USE A BIGGER HAMMER!

We go --standalone

32

Not sure at this point

33

It’s a 3 step process (that can be integrated into a single statement - but we’ll do that part later).

Step 1. stop Apache
systemctl stop apache2

Step 2. get cert using temporary certbot webserver
certbot certonly --standalone -d voidcitymc.com --staging

Step 3. restart Apache
systemctl start apache2

34

I got the certificate:)

35

ABOUT TIME!
The downside is webservice stops during that minute (once every 60 days)

Now let’s get a real cert and roll that up into one line and ensure renewals are good to go…

36

Can I use cron for renewals?

37

certbot will handle all that (cron/system) for us

38

Good, when I visit https://voidcitymc.com it doesn’t seem to work though

39

we haven’t installed the cert yet - hold on
plus that was a staging cert - not valid in the real world

40

Ah the —staging argument

41

Next step: Roll those 3 steps into one (real) step:

certbot certonly --standalone -d voidcitymc.com --pre-hook "systemctl stop apache2" --post-hook "systemctl start apache2"