Https issues - The connection was reset

[cpharveyjr]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: innovationdrones.com

I ran this command: https:innovationdrones.com

It produced this output: The connection was reset. ERR_CONNECTION_RESET

Hide details

My web server is (include version): Depian 9.13

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: Google Cloud

I can login root: yes

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 1.18.0

I installed the lets encrypt ssl cert and the installations went well but I get an error message when I run https://innovationdrones.com. Http://innovationdrones.com work fine.

Thanks

[griffin]

Welcome to the Let's Encrypt Community, Chuck

Looks like port 443 could be getting blocked by a firewall or router.

What is the output of:

sudo apachectl -S

For reference:
https://crt.sh/?q=innovationdrones.com

[cpharveyjr]

@griffin

sudo apachectl -S

VirtualHost configuration:
*:80 innovationdrones-vm-vm.us-central1-f.c.innovation-drones.internal (/etc/apache2/sites-enabled/000-default.conf:1)
ServerRoot: "/etc/apache2"
Main DocumentRoot: "/var/www/html"
Main ErrorLog: "/var/log/apache2/error.log"
Mutex proxy: using_defaults
Mutex default: dir="/var/run/apache2/" mechanism=default
Mutex mpm-accept: using_defaults
Mutex watchdog-callback: using_defaults
Mutex rewrite-map: using_defaults
PidFile: "/var/run/apache2/apache2.pid"
Define: DUMP_VHOSTS
Define: DUMP_RUN_CFG
User: name="www-data" id=33
Group: name="www-data" id=33

[griffin]

You have no port 443 vHost.

[griffin]

What are the outputs of:

sudo cat /etc/apache2/sites-enabled/000-default.conf
sudo ls -lRa /etc/apache2

Please put 3 backticks above and below each output, like this:

```
output
```

[cpharveyjr]

sudo cat /etc/apache2/sites-enabled/000-default.conf

output:

<VirtualHost *:80>
        # The ServerName directive sets the request scheme, hostname and port that
        # the server uses to identify itself. This is used when creating
        # redirection URLs. In the context of virtual hosts, the ServerName
        # specifies what hostname must appear in the request's Host: header to
        # match this virtual host. For the default virtual host (this file) this
        # value is not decisive as it is used as a last resort host regardless.
        # However, you must set it for any further virtual host explicitly.
        #ServerName www.example.com

        ServerAdmin webmaster@localhost
        DocumentRoot /var/www/html

        # Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
        # error, crit, alert, emerg.
        # It is also possible to configure the loglevel for particular
        # modules, e.g.
        #LogLevel info ssl:warn

        ErrorLog ${APACHE_LOG_DIR}/error.log
        CustomLog ${APACHE_LOG_DIR}/access.log combined

        # For most configuration files from conf-available/, which are
        # enabled or disabled at a global level, it is possible to
        # include a line for only one particular virtual host. For example the
        # following line enables the CGI configuration for this host only
        # after it has been globally disabled with "a2disconf".
        #Include conf-available/serve-cgi-bin.conf
RewriteEngine on
RewriteCond %{SERVER_NAME} =innovationdrones.com [OR]
RewriteCond %{SERVER_NAME} =www.innovationdrones.com
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>

sudo ls -lRa /etc/apache2

output:

/etc/apache2/mods-enabled:

total 8
drwxr-xr-x 2 root root 4096 Aug 26 22:04 .
drwxr-xr-x 8 root root 4096 Aug 26 22:05 ..
lrwxrwxrwx 1 root root   36 Aug  8 15:54 access_compat.load -> ../mods-available/access_compat.load
lrwxrwxrwx 1 root root   28 Aug  8 15:54 alias.conf -> ../mods-available/alias.conf
lrwxrwxrwx 1 root root   28 Aug  8 15:54 alias.load -> ../mods-available/alias.load
lrwxrwxrwx 1 root root   33 Aug  8 15:54 auth_basic.load -> ../mods-available/auth_basic.load
lrwxrwxrwx 1 root root   33 Aug  8 15:54 authn_core.load -> ../mods-available/authn_core.load
lrwxrwxrwx 1 root root   33 Aug  8 15:54 authn_file.load -> ../mods-available/authn_file.load
lrwxrwxrwx 1 root root   33 Aug  8 15:54 authz_core.load -> ../mods-available/authz_core.load
lrwxrwxrwx 1 root root   33 Aug  8 15:54 authz_host.load -> ../mods-available/authz_host.load
lrwxrwxrwx 1 root root   33 Aug  8 15:54 authz_user.load -> ../mods-available/authz_user.load
lrwxrwxrwx 1 root root   32 Aug  8 15:54 autoindex.conf -> ../mods-available/autoindex.conf
lrwxrwxrwx 1 root root   32 Aug  8 15:54 autoindex.load -> ../mods-available/autoindex.load
lrwxrwxrwx 1 root root   30 Aug  8 15:54 deflate.conf -> ../mods-available/deflate.conf
lrwxrwxrwx 1 root root   30 Aug  8 15:54 deflate.load -> ../mods-available/deflate.load
lrwxrwxrwx 1 root root   26 Aug  8 15:54 dir.conf -> ../mods-available/dir.conf
lrwxrwxrwx 1 root root   26 Aug  8 15:54 dir.load -> ../mods-available/dir.load
lrwxrwxrwx 1 root root   26 Aug  8 15:54 env.load -> ../mods-available/env.load
lrwxrwxrwx 1 root root   29 Aug  8 15:54 filter.load -> ../mods-available/filter.load
lrwxrwxrwx 1 root root   27 Aug  8 15:54 mime.conf -> ../mods-available/mime.conf
lrwxrwxrwx 1 root root   27 Aug  8 15:54 mime.load -> ../mods-available/mime.load
lrwxrwxrwx 1 root root   34 Aug  8 15:55 mpm_prefork.conf -> ../mods-available/mpm_prefork.conf
lrwxrwxrwx 1 root root   34 Aug  8 15:55 mpm_prefork.load -> ../mods-available/mpm_prefork.load
lrwxrwxrwx 1 root root   34 Aug  8 15:54 negotiation.conf -> ../mods-available/negotiation.conf
lrwxrwxrwx 1 root root   34 Aug  8 15:54 negotiation.load -> ../mods-available/negotiation.load
lrwxrwxrwx 1 root root   29 Aug  8 15:55 php7.4.conf -> ../mods-available/php7.4.conf
lrwxrwxrwx 1 root root   29 Aug  8 15:55 php7.4.load -> ../mods-available/php7.4.load
lrwxrwxrwx 1 root root   28 Aug  8 15:55 proxy.conf -> ../mods-available/proxy.conf
lrwxrwxrwx 1 root root   33 Aug  8 15:55 proxy_fcgi.load -> ../mods-available/proxy_fcgi.load
lrwxrwxrwx 1 root root   28 Aug  8 15:55 proxy.load -> ../mods-available/proxy.load
lrwxrwxrwx 1 root root   33 Aug  8 15:54 reqtimeout.conf -> ../mods-available/reqtimeout.conf
lrwxrwxrwx 1 root root   33 Aug  8 15:54 reqtimeout.load -> ../mods-available/reqtimeout.load
lrwxrwxrwx 1 root root   30 Aug  8 15:55 rewrite.load -> ../mods-available/rewrite.load
lrwxrwxrwx 1 root root   31 Aug  8 15:54 setenvif.conf -> ../mods-available/setenvif.conf
lrwxrwxrwx 1 root root   31 Aug  8 15:54 setenvif.load -> ../mods-available/setenvif.load
lrwxrwxrwx 1 root root   36 Aug 26 22:04 socache_shmcb.load -> ../mods-available/socache_shmcb.load
lrwxrwxrwx 1 root root   26 Aug 26 22:04 ssl.conf -> ../mods-available/ssl.conf
lrwxrwxrwx 1 root root   26 Aug 26 22:04 ssl.load -> ../mods-available/ssl.load
lrwxrwxrwx 1 root root   29 Aug  8 15:54 status.conf -> ../mods-available/status.conf
lrwxrwxrwx 1 root root   29 Aug  8 15:54 status.load -> ../mods-available/status.load

/etc/apache2/sites-available:

total 28
drwxr-xr-x 2 root root 4096 Aug 26 22:05 .
drwxr-xr-x 8 root root 4096 Aug 26 22:05 ..
-rw-r--r-- 1 root root 1528 Aug 26 22:05 000-default.conf
-rw-r--r-- 1 root root 1593 Aug 26 22:05 000-default-le-ssl.conf
-rw-r--r-- 1 root root 6338 Jun 16  2019 default-ssl.conf
-rw-r--r-- 1 root root   82 Aug  8 15:55 wordpress.conf

/etc/apache2/sites-enabled:

total 8
drwxr-xr-x 2 root root 4096 Aug 26 22:04 .
drwxr-xr-x 8 root root 4096 Aug 26 22:05 ..
lrwxrwxrwx 1 root root   35 Aug  8 15:54 000-default.conf -> ../sites-available/000-default.conf
lrwxrwxrwx 1 root root   52 Aug 26 22:04 000-default-le-ssl.conf -> /etc/apache2/sites-available/000-default-le-ssl.conf
lrwxrwxrwx 1 root root   33 Aug  8 15:55 wordpress.conf -> ../sites-available/wordpress.conf

[griffin]

Please edit your post to add the three backticks like I mentioned. Otherwise a chunk of your configuration is missing due to the community site treating it as HTML.

I'm not a leader, so I can't do it for you.

[cpharveyjr]

I will do that but did the commands you sent me fix the issue. https://innovationdrones.com is working but it is slow.

[griffin]

I wanted to fix your vHosts first then run certbot.

[griffin]

Check your two WordPress URLs while you're at it:

Changing The Site URL

Make certain that they both begin with https.

[griffin]

Change this line in both /etc/apache2/sites-enabled/000-default.conf and /etc/apache2/sites-enabled/000-default-le-ssl.conf:

#ServerName www.example.com

to these two lines:

ServerName innovationdrones.com
ServerAlias www.innovationdrones.com

Then run this:

sudo apachectl -k graceful

[griffin]

Heya @rg305!

Things are progressing beautifully here.

[griffin]

I'm suspecting the WordPress backend configuration to be the final piece.

[rg305]

@griffin, I see that.
I went ahead and added the ``` where they seemed fitting.

[griffin]

Awesome! That helps much!

[rg305]

This doesn't add up:

@cpharveyjr

/etc/apache2/sites-enabled:

total 8
drwxr-xr-x 2 root root 4096 Aug 26 22:04 .
drwxr-xr-x 8 root root 4096 Aug 26 22:05 ..
lrwxrwxrwx 1 root root   35 Aug  8 15:54 000-default.conf -> ../sites-available/000-default.conf
lrwxrwxrwx 1 root root   52 Aug 26 22:04 000-default-le-ssl.conf -> /etc/apache2/sites-available/000-default-le-ssl.conf
lrwxrwxrwx 1 root root   33 Aug  8 15:55 wordpress.conf -> ../sites-available/wordpress.conf

and:

@cpharveyjr

VirtualHost configuration:
*:80 innovationdrones-vm-vm.us-central1-f.c.innovation-drones.internal (/etc/apache2/sites-enabled/000-default.conf:1)
ServerRoot: "/etc/apache2"

[griffin]

That's because he has no ServerName in his vHost.

This is the VM host name:

@cpharveyjr

innovationdrones-vm-vm.us-central1-f.c.innovation-drones.internal

[cpharveyjr]

So I need to add a Server Name

[griffin]

I think this configuration file might have some proxy directives/configuration in it:

@cpharveyjr

lrwxrwxrwx 1 root root 33 Aug 8 15:55 wordpress.conf -> ../sites-available/wordpress.conf

[griffin]

Yep. I mentioned that here:

Https issues - The connection was reset

C…