After install the certificates my website is nolonger accessible.
My domain is: www.si-tech.com.hk
I ran this command: Certbot --Apache
It produced this output: long string of text. Basically saying the certs had completed and were installed correctly
My web server is (include version): Apache 2.4.37
The operating system my web server runs on is (include version): Centos 8 (4.18.0-408)
My hosting provider, if applicable, is: self hosted
I can login to a root shell on my machine (yes or no, or I don't know): logon locally
I'm using a control panel to manage my site (no, or provide the name and version of the control panel): No
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): 1.29.0
Thank you for assisting us in helping YOU!
First I need to say I am not fully professional at this. It took me 6 days of try and re-try
Install -wipe and re-install till I got an installation of Centos / apache that was accommodating to certbot, many failures and scanning website to see where I went wrong.
Finally I got a website that certbot actually accepted and let me install the required letsencrypt certificate.
I tested with letsdebug.net to be sure I had nothing that would be wrong.
NOTE the website has been working as a website for the past 3 years.
After I apply the letsencrypt certificates with no errors showing, I completed all the questions about location and user successfully.
Now the website no longer is visible to outside users and I dont know why.
I re-ran the letsdebug.net again after install the certificates and it tells me that my system is not suitable to install the (installed) certificates.
I ran the simulate renew the cert and it ran without error.
I don’t know where to look now.
"si-tech.com.hk has an A (IPv4) record (119.247.79.211) but a request to this address over port 80 did not succeed. Your web server must have at least one working IPv4 or IPv6 address."
&
"A test authorization for si-tech.com.hk to the Let's Encrypt staging service has revealed issues that may prevent any certificate for this domain being issued."
[root@si-tech ~]# apachectl -t -D dump_vhosts
Passing arguments to httpd using apachectl is no longer supported.
You can only start/stop/restart httpd using this script.
If you want to pass extra arguments to httpd, edit the
/etc/sysconfig/httpd config file.
[root@si-tech ~]#
Hi rg305 thanks the fast reply.
something I just tried, if I type thew server IP address from a pc outside the office it shows the website, but the web name www.si-tech.com.hk times out
Hi
[root@si-tech ~]# httpd -T -D DUMP_VHOSTS
VirtualHost configuration:
*:80 www.si-tech.com.hk (/etc/httpd/sites-enabled/si-tech.com.hk.conf:1)
*:443 is a NameVirtualHost
default server 119247079211.ctinets.com (/etc/httpd/conf.d/ssl.conf:40)
port 443 namevhost 119247079211.ctinets.com (/etc/httpd/conf.d/ssl.conf:40)
port 443 namevhost www.si-tech.com.hk (/etc/httpd/sites-available/si-tech.com.hk-le-ssl.conf:2)
alias si-tech.com.hk
[root@si-tech ~]#
Is there a firewall?
Is there any Geo-location / Geo-fencing device?
Is there any program running like fail2ban?
Are there any IP block lists being used?
I can't reach your site via HTTPS.
I can only reach it via HTTP.
curl -Ii https://si-tech.com.hk/
curl: (7) Failed to connect to si-tech.com.hk port 443: Connection timed out
curl -Ii http://si-tech.com.hk/
HTTP/1.1 301 Moved Permanently
Date: Wed, 07 Sep 2022 07:23:26 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
Location: https://si-tech.com.hk/
Content-Type: text/html; charset=iso-8859-1
Is there a firewall? yes
Is there any Geo-location / Geo-fencing device? no
Is there any program running like fail2ban? no
Are there any IP block lists being used? no
