Certificate creation

[panchovilla1970]

My domain is: mcparking.cl

I ran this command:

It produced this output:

My web server is (include version): Hetzner

The operating system my web server runs on is (include version):CentOS 7

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):no

Hi… reading the instructions to create a certificate, I understand that it is as simple as those 3 lines of code?

yum install epel-release
$ sudo yum install certbot-apache
$ sudo certbot --apache

Or what else do we need to do?

Regards

[stevenzhu]

Hi,

That’s meanly what you do.

Thank you

[panchovilla1970]

This configures also the ports? nothing else to do? thanks…

[schoen]

If you have a firewall control panel and/or ufw, you may also have to configure the firewall to open the ports.

However, certbot --apache will normally be able to set up your Apache to listen on port 443 as long as no firewall is blocking it.

[panchovilla1970]

Hi… I installed as mentioned and checked that the port 443/tcp is opened. When I try to enter to https://www.mcparking.cl and https://mcparking.cl the browser says that the connection is not secure and that the certificate is not trusted because it is self-signed. Error code SEC_ERROR_UNKNOW_USER

And if I execrute certbot certificates, it says No certs found.

Finally it says that I have to add a virtual host to port 80.
Any idea?

Thank you

[schoen]

@panchovilla1970

Finally it says that I have to add a virtual host to port 80.
Any idea?

Hi @panchovilla1970,

Certbot's Apache support is normally based on the idea that you already have an HTTP-only Apache virtual host for each domain that you want a certificate for. There are other ways to do it, but that's the baseline assumption. Is that not the case for your configuration?