Certbot manual works fine, but hosting provider says cert is invalid

@petercooperjr, on re-read, I do see "personal computer" in the first post...
But I don't see "server".
So...
There is no real evidence that the PC isn't the one doing the web serving.
[we see MACs doing that here all the time]
Again, I take nothing for granted and very little has been made [crystal] clear [to me].

I suppose this is expected when the original questions are deleted and only what information seems relevant to them is provided.

2 Likes

Problem solved!

I used the following command line on my separate computer:

sudo certbot certonly --manual --cert-name translite.com.br -d translite.com.br -d www.translite.com.br --agree-tos --preferred-challenges http --server https://acme-v02.api.letsencrypt.org/directory --register-unsafely-without-email --key-type rsa --rsa-key-size 2048

RSA key type as suggested by @petercooperjr and 2048 key size because I noticed all my previous certs had this lenght.

As usual, certbot gave me these files:

cert.pem
chain.pem
fullchain.pem
privkey.pem

But instead of just handing these files to the hosting provider (site5.com) support staff, I decided to try and do it myself.

On cPanel, under 'SSL/TLS', I found three boxes: "Certificate: (CRT)", "Private Key (KEY)" and "Certificate Authority Bundle: (CABUNDLE)".

I looked up and found out that privkey.pem is actually my KEY, cert.pem is the CRT and chain.pem is the CA-BUNDLE. I opened each pem file in a text editor and copied/pasted into the respective text box (except for the CA-BUNDLE, which was auto-filled and I decided not to mess with it).

Thank you all and specially @petercooperjr for the valuable advice!

4 Likes

Oh my.. :man_facepalming:

I support the notion above..

Hosting providers anno 2023 should have free Let's Encrypt certificates enabled for their customers by default without the customer having anything to do with it. Please reconsider your choice of hosting provider.

3 Likes

If you can run PHP scripts and your system has cpanel access, you might benefit from using CertSage instead of manually running Certbot on your personal computer.

It's a PHP program that you can upload, and just go to the page to handle getting the certificate and installing into cPanel. You'll still have to do it manually every couple months, but it might be slightly easier for you. (Though on the other hand, if you have a process that works for you already, I could understand not wanting to mess with it.)

7 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.