this genered 4 files in /etc/letsencrypt/live/upale.net/
cert.pem chain.pem fullchain.pem privkey.pem
And i modify the apache confg
<VirtualHost *:80>
DocumentRoot /var/www/html/upale/
ServerName mango.upale.net
ServerAlias www.upale.netupale.net
ServerAdmin soporte@upale.net
ProxyPreserveHost On
UseCanonicalName Off
Se adiciona para activar los https
SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/upale.net/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/upale.net/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/upale.net/chain.pem
ErrorLog /var/log/httpd/upaleError.log
CustomLog /var/log/httpd/upaleAccess.log common
When I try to access from the Web browser says:
upale.net uses an invalid security certificate. The certificate is not trusted because it is self-signed. The certificate is only valid for mango.upale.net Error code: SEC_ERROR_UNKNOWN_ISSUER
mango is a name for my server. any idea of my error???
(By the way, if you want to be able to access https://mango.upale.net as well without any SSL warnings, you’ll have to add that as a -d argument to letsencrypt-auto.)
Thanks for the help, helped me to detect that the certificate that
possibly is sent is that is generated for the mail. I have installed in
past zimbra suite. I will carefully review the settings and I will
update
Change it to SSLCertificateFile /etc/letsencrypt/live/your-domain.com/fullchain.pem and SSLCertificateKeyFile /etc/letsencrypt/live/your-domain.com/privkey.pem.
If you’re using Apache 2.2 instead of 2.4, you have to use cert.pem for SSLCertificateFile and pass the chain.pem to the chain file setting instead.