I have problem with connecting site

[MrMezoPl]

Hello, Im new and I wanted to make ssl certificate on my site. I have vm with ubuntu 18.04x apache php and mysql. I started creating certificate from this tut https://certbot.eff.org/lets-encrypt/ubuntubionic-apache.

When my certificate was done i tried coneccting my site via domain (tropique.net) but it says too many redirects I dont know what i do wrong so i tried to uninstall certbot certificates and all folders etc but now I cant still connect my site becouse i have this error ERR_SSL_VERSION_OR_CIPHER_MISMATCH

I have domains on cloudflare and i can connect normally by ipv4 addres.
Sorry im new in these things.

[griffin]

Welcome to the Let’s Encrypt Community

Let’s see what we can do for you…

[griffin]

It sounds like the configuration changes that occurred when running certbot may have conflicted with your existing configuration. Uninstalling certbot won’t remove the certificates or configuration changes. I recommend reinstalling certbot and acquiring a new certificate to get things back to an operable point. Then we’ll see how we can get you moving.

What you’re experiencing isn’t entirely uncommon. certbot is pretty smart about trying to enable https and redirect from http to https, but often individual configurations are too complicated for it to manage.

I can see at https://crt.sh/?q=tropique.net that you did manage to successfully acquire a certificate yesterday, so that aspect is good at least.

[MrMezoPl]

I tried to install certbot now but got this error

[griffin]

It seems that the root certificates are missing…

[griffin]

Try this if you would, please:

sudo apt-get install -y ca-certificates

[MrMezoPl]

Yes I also tried it before but nothing changes

[griffin]

Still the same error then. Hmm…

[_az]

Hi @MrMezoPl,

Could you share what kind of hosting environment you are using? Specifically what host you got your VPS from?

[griffin]

Thanks @_az. I’m a bit out of my depth here.

My next suggestion based on my research was going to be:

sudo snap install core

[MrMezoPl]

I using digital cloud droplet

@griffin still same

[griffin]

You got the same error from that too?

[MrMezoPl]

yeah same error like previous

[_az]

Thanks! That should just work on an Ubuntu Bionic DO droplet, so I think something has probably gone wrong with the CA certs directory.

sudo find /etc/ssl/certs | wc -l
sudo update-ca-certificates
sudo find /etc/ssl/certs | wc -l

[griffin]

@_az

I concur. I think he might have removed a bit extra.

@MrMezoPl

i tried to uninstall certbot certificates and all folders etc

[MrMezoPl]

It says that cant find this file. Btw I can show you it on anydesk if it would help you.

[_az]

Which of the 3 commands produced that error message? Could you post another screenshot showing all 3 commands?

[MrMezoPl]

Yes of course, here you are

[griffin]

Out of curiosity: did you remove the entire etc folder and its subfolders?

[MrMezoPl]

No, After deleting certificates and removing certbot i deleted everything named ssl letsencrypt. I have etc folder