Certificate gets renewed but still shows expired in the site

Help
41

OK then there must be an upstream system that is proxying to your server.
That system is:

  • Proxying external HTTP access to your HTTP service
  • Proxying external HTTPS access to your HTTP service

So that in both cases you will always reply with "go to HTTPS".
And then it just loops because even HTTPS request will receive the "go to HTTPS" reply.

You site is not secure.
The TLS termination is being done before you get the connection requests.

42

To PROVE this.
Change it back to however you think it works.
then after that
Change the listen 443 to any unused number like listen 9999;
And see if your site is still accessible from the internet securely.
If so, then someone else is providing HTTPS (not you).

43

Is it not good to have SSL in proxy, should I use SSL from the instance server where the site is hosted and remove SSL from proxy ?

Or use SSL in both

44

I don't understand the question.
Do you have more than one server?
[one server and one proxy?]

45

Yes this all problem was because i was installing and renewing SSL in the instance server which i was given but SSL was also installed in proxy so it doesn't renew

Now they renew in proxy and i removed SSL code from this server

1 Like
46

If you "trust" the proxy, you could change it to:

  • Proxying external HTTP access to your HTTP service
  • Proxying external HTTPS access to your HTTPS service

Then both could use the cert.

47

They have control over both server so no problem for trust
I am just given the SSH access to work on the instance server.

Running SSL only in proxy is fine yes i may not have to worry i guess

1 Like
48

If you want to redirect HTTP to HTTPS (which you should), then
either:

  • Proxying external HTTP access to your HTTP service [this allows your server to redirect]
  • Proxying external HTTPS access to your HTTPS service [change this]

OR

  • Have the proxy do the redirection from HTTP to HTTPS (not in your server).

and then, once you are satisfied, please mark this topic a solved.

1 Like
49

Yes the proxy server is redirecting the http to https

I am now ok

  • The expiry issue due to the proxy server also has SSL installed so certificate was fetched from there
  • TOO_MANY_REDIRECT when SSL installed issue due to both servers redirect http to https
  • warning of conflicting server name is due to multiple listen to the same port, it was added to fix the second issue

Thank you for your support

1 Like
50

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.