I was reading this forum and got the idea to run “sudo certbot renew --allow-subset-of-names”
I get “The following certs are not due for renewal yet:
/etc/letsencrypt/live/intks.net/fullchain.pem(skipped)
/etc/letsencrypt/live/intks.net-001/fullchain.pen (skipped)
/etc/letsencrypt/live/www.intks.net/fullchain.pen (skipped)
No renewals were attempted.”
I know I ran the wrong code but at least it shows me that intks.net is there but it is not working like the www.intks.net is.
Can anyone give me some insight on what is going on?
OK.
The certificate is only valid for www.intks.net, not for intks.net.
You have to specify both domain names (intks.net, www.intks.net) upon issuance to include both names into one certificate.
Looking at https://crt.sh/?q=%intks.net, one can see that three certificates were issued two days ago. The first included both names, the subsequent ones have been issued for intks.net and www.intks.net seperatly.
Did you also reconfigure your webserver to point to the correct certificate? That was the first part of @bytecamp’s response and is really important. You then have to reload the webserver to read in that certificate.
No I didn’t, I was looking for a quick fix, and not going through the tutorial I did a few days ago. Can you tell me how to point to that cert, or should I read the tutorial?
OK, I give up… So what needs to change for it to listen to 443 AGAIN? Didn’t think deleting two “obsolete” certs would change what ports the server is listening to. Obviously, I was wrong. I came in here asking for help, and the attitude is that I should already know this stuff. However, if I already knew this why would I be here?
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Error while running apache2ctl configtest.
Action 'configtest' failed.
The Apache error log may have more information.
AH00526: Syntax error on line 30 of /etc/apache2/sites-enabled/000-default-le-ssl.conf:
SSLCertificateFile: file '/etc/letsencrypt/live/www.intks.net/fullchain.pem' does not exist or is empty
The apache plugin is not working; there may be problems with your existing configuration.
The error was: MisconfigurationError("Error while running apache2ctl configtest.\nAction 'configtest' failed.\nThe Apache error log may have more information.\n\nAH00526: Syntax error on line 30 of /etc/apache2/sites-enabled/000-default-le-ssl.conf:\nSSLCertificateFile: file '/etc/letsencrypt/live/www.intks.net/fullchain.pem' does not exist or is empty\n",)
AH00526: Syntax error on line 30 of /etc/apache2/sites-enabled/000-default-le-ssl.conf:
SSLCertificateFile: file '/etc/letsencrypt/live/www.intks.net/fullchain.pem' does not exist or is empty
Action 'restart' failed.
The Apache error log may have more information.
# The ServerName directive sets the request scheme, hostname and port that
# the server uses to identify itself. This is used when creating
# redirection URLs. In the context of virtual hosts, the ServerName
# specifies what hostname must appear in the request's Host: header to
# match this virtual host. For the default virtual host (this file) this
# value is not decisive as it is used as a last resort host regardless.
# However, you must set it for any further virtual host explicitly.
#ServerName www.example.com
ServerAdmin webmaster@localhost
DocumentRoot /var/www/html
# Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
# error, crit, alert, emerg.
# It is also possible to configure the loglevel for particular
# modules, e.g.
#LogLevel info ssl:warn
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
# For most configuration files from conf-available/, which are
# enabled or disabled at a global level, it is possible to
# include a line for only one particular virtual host. For example the
# following line enables the CGI configuration for this host only
# after it has been globally disabled with "a2disconf".
#Include conf-available/serve-cgi-bin.conf
SSLCertificateFile /etc/letsencrypt/live/www.intks.net/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/www.intks.net/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf
ServerName intks.net
ServerAlias www.intks.net
AH00526: Syntax error on line 30 of /etc/apache2/sites-enabled/000-default-le-ssl.conf:
SSLCertificateFile: file '/etc/letsencrypt/live/intks.net/fullchain.pem' does not exist or is empty
Action 'restart' failed.
The Apache error log may have more information.