# Connection Refused after updating SSL Cert? **URL:** \ **Category:** Help\ **Created:** [February 17, 2021, 6:19pm UTC](https://community.letsencrypt.org/t/connection-refused-after-updating-ssl-cert/145533 "2021-02-17T18:19:11Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![RumZ1337](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rumz1337/32/47400_2.png) [@RumZ1337](https://community.letsencrypt.org/u/RumZ1337)\ **Post date:** [February 17, 2021, 6:19pm UTC](https://community.letsencrypt.org/t/connection-refused-after-updating-ssl-cert/145533/1 "2021-02-17T18:19:11Z")
I use LightSail on AWS to host a very basic website for an organization and I recently went to renew the SSL cert. The SSL cert was renewed fine through this instruction set: [https://lightsail.aws.amazon.com/ls/docs/en\_us/articles/amazon-lightsail-using-lets-encrypt-certificates-with-wordpress#link-the-lets-encrypt-certificate-files-in-the-apache-directory-wordpres](https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-using-lets-encrypt-certificates-with-wordpress#link-the-lets-encrypt-certificate-files-in-the-apache-directory-wordpress) Domain: [mtvfc1.com](http://mtvfc1.com) I basically successfully renewed it and now it seems I am locked out. ---
**Author:** ![Rip](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rip/32/70863_2.png) [@Rip](https://community.letsencrypt.org/u/Rip)\ **Post date:** [February 17, 2021, 6:27pm UTC](https://community.letsencrypt.org/t/connection-refused-after-updating-ssl-cert/145533/2 "2021-02-17T18:27:58Z")
Welcome to the forum @RumZ1337 ```nohighlight PORT STATE SERVICE 80/tcp closed http 443/tcp closed https ``` > [@RumZ1337](#): > > I am locked out Everyone is locked out. Firewall? Router? Provider? Ports 80 and 443 need to be open to start with. ---
**Author:** ![RumZ1337](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rumz1337/32/47400_2.png) [@RumZ1337](https://community.letsencrypt.org/u/RumZ1337)\ **Post date:** [February 17, 2021, 6:29pm UTC](https://community.letsencrypt.org/t/connection-refused-after-updating-ssl-cert/145533/3 "2021-02-17T18:29:47Z")
I don't understand... would they close when I update an SSL Cert? If not, how do I open them? ---
**Author:** ![RumZ1337](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rumz1337/32/47400_2.png) [@RumZ1337](https://community.letsencrypt.org/u/RumZ1337)\ **Post date:** [February 17, 2021, 6:30pm UTC](https://community.letsencrypt.org/t/connection-refused-after-updating-ssl-cert/145533/4 "2021-02-17T18:30:41Z")
To be clear, the website was fully functional until I went to renew the SSL cert. ---
**Author:** ![Rip](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rip/32/70863_2.png) [@Rip](https://community.letsencrypt.org/u/Rip)\ **Post date:** [February 17, 2021, 6:33pm UTC](https://community.letsencrypt.org/t/connection-refused-after-updating-ssl-cert/145533/5 "2021-02-17T18:33:23Z")
To be honest I don't understand either. I don't use AWS or any of the tools you are using so someone else will have to step in to help you resolve the issue. My contribution was to do some initial recon to verify your site (which is not accessible) and to peek at which ports were open. ---
**Author:** ![RumZ1337](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rumz1337/32/47400_2.png) [@RumZ1337](https://community.letsencrypt.org/u/RumZ1337)\ **Post date:** [February 17, 2021, 6:34pm UTC](https://community.letsencrypt.org/t/connection-refused-after-updating-ssl-cert/145533/6 "2021-02-17T18:34:56Z")
Understood, this is all very bizarre. Renewing an SSL completely bricking the website. ---
**Author:** ![RumZ1337](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rumz1337/32/47400_2.png) [@RumZ1337](https://community.letsencrypt.org/u/RumZ1337)\ **Post date:** [February 17, 2021, 6:53pm UTC](https://community.letsencrypt.org/t/connection-refused-after-updating-ssl-cert/145533/7 "2021-02-17T18:53:33Z")
After doing some digging, I found some information about.. starting apche? This was the result. bitnami@ip-1:~ sudo /opt/bitnami/ctlscript.sh start apache AH00526: Syntax error on line 46 of /opt/bitnami/apache2/conf/bitnami/bitnami.conf: SSLCertificateFile: file '/opt/bitnami/apache2/conf/server.crt' does not exist or is empty apache config test fails, aborting Monitored apache bitnami@ip-:~ ---
**Author:** ![RumZ1337](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rumz1337/32/47400_2.png) [@RumZ1337](https://community.letsencrypt.org/u/RumZ1337)\ **Post date:** [February 17, 2021, 7:03pm UTC](https://community.letsencrypt.org/t/connection-refused-after-updating-ssl-cert/145533/8 "2021-02-17T19:03:33Z")
Further along, I found an error saying that server.crt doesn't exist when running this command line: bitnami@ip-:~$ sudo /opt/bitnami/ctlscript.sh start /opt/bitnami/mysql/scripts/ctl.sh : mysql (pid 990) already running /opt/bitnami/php/scripts/ctl.sh : php-fpm (pid 1074) already running AH00526: Syntax error on line 46 of /opt/bitnami/apache2/conf/bitnami/bitnami.conf: SSLCertificateFile: file '/opt/bitnami/apache2/conf/server.crt' does not exist or is empty apache config test fails, aborting ---
**Author:** ![Rip](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rip/32/70863_2.png) [@Rip](https://community.letsencrypt.org/u/Rip)\ **Post date:** [February 17, 2021, 7:13pm UTC](https://community.letsencrypt.org/t/connection-refused-after-updating-ssl-cert/145533/9 "2021-02-17T19:13:19Z")
After scanning the link you provided I think we will need a bunch more information. Most of what is needed are in the form provided when you opened this thread. Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help. My domain is: **I ran this command:** **It produced this output:** My web server is (include version): The operating system my web server runs on is (include version): My hosting provider, if applicable, is: **I can login to a root shell on my machine (yes or no, or I don’t know):** **I’m using a control panel to manage my site (no, or provide the name and version of the control panel):** **The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):** ---
**Author:** ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)\ **Post date:** [February 17, 2021, 10:50pm UTC](https://community.letsencrypt.org/t/connection-refused-after-updating-ssl-cert/145533/10 "2021-02-17T22:50:59Z")
Welcome to the Let's Encrypt Community, Joseph 🙂 > [@RumZ1337](#): > > SSLCertificateFile: file '/opt/bitnami/apache2/conf/server.crt' does not exist or is empty Apache is failing to start because `server.crt` was removed somehow. Replace it with a self-signed (aka snake-oil) certificate then start apache. This should help: > **[GitHub - bitnami/vms: Bitnami VMs](https://github.com/bitnami/vms)** > > Bitnami VMs. Contribute to bitnami/vms development by creating an account on GitHub. ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [March 19, 2021, 10:51pm UTC](https://community.letsencrypt.org/t/connection-refused-after-updating-ssl-cert/145533/11 "2021-03-19T22:51:05Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.