Hey community,
Wanted to update cerfiticate but smth went wrong.
My domain is: [https://www.multiland.net ]
After certbot --apache It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Error while running apache2ctl configtest.
Action 'configtest' failed.
The Apache error log may have more information.
AH00526: Syntax error on line 20 of /etc/apache2/sites-enabled/000-default-le-ssl.conf:
SSLCertificateFile: file '/etc/letsencrypt/live/multiland.net/fullchain.pem' does not exist or is empty
The apache plugin is not working; there may be problems with your existing configuration.
The error was: MisconfigurationError("Error while running apache2ctl configtest.\nAction 'configtest' failed.\nThe Apache error log may have more information.\n\nAH00526: Syntax error on line 20 of /etc/apache2/sites-enabled/000-default-le-ssl.conf:\nSSLCertificateFile: file '/etc/letsencrypt/live/multiland.net/fullchain.pem' does not exist or is empty\n")
My web server is (include version): Apache/2.4.41 (Ubuntu)
The operating system my web server runs on is (include version):Ubuntu 20.04
My hosting provider, if applicable, is: DigitalOcean
I can login to a root shell on my machine (yes or no, or I don't know): don't know
I'm using a control panel to manage my site (no, or provide the name and version of the control panel): yes
Yeah, it looks like you deleted your cert but still use them in your Apache server (which now cannot find them so fails to start).
There are several ways to correct this. One is to follow the instructions below to create a self-signed cert and make a temp change to your Apache config. This will allow your Apache server to be (re)started. You should be able to get a new cert then.
But, I think the reason your cert renewal failed is that you no longer have an A record in your DNS for www.multiland.net. In the past you got a cert with both your apex and the www name but you need to restore the missing A record for the www domain name.
I've added A record in DNS for www.multiland.net and started safely deleting certificated but it fails.
Here's a Step 1:
root@wordpress:~# sudo bash -c 'grep -R live/multiland.net /etc/{nginx,httpd,apache2}'
grep: /etc/nginx/modules-enabled/50-mod-stream.conf.removed: No such file or directory
grep: /etc/nginx/modules-enabled/50-mod-http-xslt-filter.conf.removed: No such file or directory
grep: /etc/nginx/modules-enabled/50-mod-mail.conf.removed: No such file or directory
grep: /etc/nginx/modules-enabled/50-mod-http-image-filter.conf.removed: No such file or directory
grep: /etc/httpd: No such file or directory
/etc/apache2/sites-enabled/000-default-le-ssl.conf:SSLCertificateFile /etc/letsencrypt/live/multiland.net/fullchain.pem
/etc/apache2/sites-enabled/000-default-le-ssl.conf:SSLCertificateKeyFile /etc/letsencrypt/live/multiland.net/privkey.pem
Step3:
root@wordpress:~# etc/apache2/sites-available/000-default-le-ssl.conf
-bash: etc/apache2/sites-available/000-default-le-ssl.conf: No such file or directory
root@wordpress:~# etc/apache2/sites-available/multiland.net.conf
-bash: etc/apache2/sites-available/multiland.net.conf: No such file or directory
Yes. You omitted the leading / from before etc/apache2/...
More important, you are supposed to use a text editor to update that file per the instructions
Continuing from the previous example, you would open /etc/apache2/sites-available/000-default-le-ssl.conf in a text editor and modify the two matching lines of text to instead say: (see docs for rest)
@kalimbrajaro, if you're totally unfamiliar with using text editors in a Unix environment, you probably want to use nano for this, because it's the simplest and most self-documenting Unix text editor. There are many other choices, but most of the others require at least a little bit of study or practice to use effectively.
Thanks,
with the last step I have the next results:
root@wordpress:~# sudo certbot delete --cert-name multiland.net
Saving debug log to /var/log/letsencrypt/letsencrypt.log
The following certificate(s) are selected for deletion:
multiland.net
WARNING: Before continuing, ensure that the listed certificates are not being
used by any installed server software (e.g. Apache, nginx, mail servers).
Deleting a certificate that is still being used will cause the server software
to stop working. See https://certbot.org/deleting-certs for information on
deleting certificates safely.
Are you sure you want to delete the above certificate(s)?
(Y)es/(N)o: yes
No certificate found with name multiland.net (expected /etc/letsencrypt/renewal/multiland.net.conf).
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
root@wordpress:~# sudo bash -c 'grep -R live/multiland.net /etc/{nginx,httpd,apache2}'
grep: /etc/nginx/modules-enabled/50-mod-stream.conf.removed: No such file or directory
grep: /etc/nginx/modules-enabled/50-mod-http-xslt-filter.conf.removed: No such file or directory
grep: /etc/nginx/modules-enabled/50-mod-mail.conf.removed: No such file or directory
grep: /etc/nginx/modules-enabled/50-mod-http-image-filter.conf.removed: No such file or directory
grep: /etc/httpd: No such file or directory
WARNING: Before continuing, ensure that the listed certificates are not being
used by any installed server software (e.g. Apache, nginx, mail servers).
Deleting a certificate that is still being used will cause the server software
to stop working. See https://certbot.org/deleting-certs for information on
deleting certificates safely.
Are you sure you want to delete the above certificate(s)?
(Y)es/(N)o: y
No certificate found with name multiland.net (expected /etc/letsencrypt/renewal/multiland.net.conf).
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
root@wordpress:~# apache2ctl configtest
AH00558: apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.1.1. Set the 'ServerName' directive globally to suppress this message
Syntax OK
I think you should disable that file and then delete it: a2dissite 000-default-le-ssl.conf rm /etc/apache2/sites-enabled/000-default-le-ssl.conf rm /etc/apache2/sites-available/000-default-le-ssl.conf
Then let's review the HTTP vhost configuration, with: cat /etc/apache2/sites-enabled/000-default.conf
[before obtaining another cert and creating the HTTPS vhost]
