Installed, no error, but no ssl

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: alberti-style.de

I ran this command: sudo /usr/local/bin/certbot-auto --apache

It produced this output:

    root@vmd38936:/# /usr/local/bin/certbot-auto --apache
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator apache, Installer apache

Which names would you like to activate HTTPS for?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: alberti-style.de
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter 'c' to cancel): 1
Cert not yet due for renewal

You have an existing certificate that has exactly the same domains or certificate name you requested and isn't close to expiry.
(ref: /etc/letsencrypt/renewal/alberti-style.de-0001.conf)

What would you like to do?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: Attempt to reinstall this existing certificate
2: Renew & replace the cert (limit ~5 per 7 days)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 1
Keeping the existing certificate
Deploying Certificate to VirtualHost /etc/apache2/sites-enabled/000-default-le-ssl.conf

Please choose whether or not to redirect HTTP traffic to HTTPS, removing HTTP access.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: No redirect - Make no further changes to the webserver configuration.
2: Redirect - Make all requests redirect to secure HTTPS access. Choose this for
new sites, or if you're confident your site works on HTTPS. You can undo this
change by editing your web server's configuration.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
Enhancement redirect was already set.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Congratulations! You have successfully enabled https://alberti-style.de

You should test your configuration at:
https://www.ssllabs.com/ssltest/analyze.html?d=alberti-style.de
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/alberti-style.de-0001/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/alberti-style.de-0001/privkey.pem
   Your cert will expire on 2019-10-04. To obtain a new or tweaked
   version of this certificate in the future, simply run certbot-auto
   again with the "certonly" option. To non-interactively renew *all*
   of your certificates, run "certbot-auto renew"
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le

i tried: removed it and installed it again

My web server is (include version): Debian 8

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: contabo

I can login to a root shell on my machine (yes or no, or I don’t know): sure

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): 0.35.1

Debug-Log:

2019-07-08 22:43:01,232:DEBUG:certbot.main:certbot version: 0.35.1
2019-07-08 22:43:01,232:DEBUG:certbot.main:Arguments: ['--apache']
2019-07-08 22:43:01,232:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standal$
2019-07-08 22:43:01,606:DEBUG:certbot.log:Root logging level set at 20
2019-07-08 22:43:01,607:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2019-07-08 22:43:01,971:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache
2019-07-08 22:43:05,368:DEBUG:certbot_apache.configurator:Apache version is 2.4.10
2019-07-08 22:43:06,143:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT
Initialized: <certbot_apache.override_debian.DebianConfigurator object at 0x7fc5c87f0390>
Prep: True
2019-07-08 22:43:06,144:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_apache.override_debian.DebianConfigurator object at 0x7fc5c87f0390> and installer <certbot_apache.override_d$
2019-07-08 22:43:06,145:INFO:certbot.plugins.selection:Plugins selected: Authenticator apache, Installer apache
2019-07-08 22:43:06,152:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(body=Registration(status=None, terms_of_service_agreed=None, agreement=None, only_return_existing=None, con$
2019-07-08 22:43:06,153:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2019-07-08 22:43:06,218:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2019-07-08 22:43:06,980:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 658
2019-07-08 22:43:06,981:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Content-Type: application/json
Content-Length: 658
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Mon, 08 Jul 2019 20:43:04 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 08 Jul 2019 20:43:04 GMT
Connection: keep-alive

{
  "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf",
    "website": "https://letsencrypt.org"
  },
  "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
  "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert",
  "x4gUReMJxck": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417"
}
2019-07-08 22:43:21,965:INFO:certbot.renewal:Cert not yet due for renewal
2019-07-08 22:43:35,081:INFO:certbot.main:Keeping the existing certificate
2019-07-08 22:43:35,082:DEBUG:certbot.reporter:Reporting to user: Congratulations! Your certificate and chain have been saved at:
/etc/letsencrypt/live/alberti-style.de-0001/fullchain.pem
Your key file has been saved at:
/etc/letsencrypt/live/alberti-style.de-0001/privkey.pem
Your cert will expire on 2019-10-04. To obtain a new or tweaked version of this certificate in the future, simply run certbot-auto again with the "certonly" option. To non-interactively renew *all$
2019-07-08 22:43:35,272:DEBUG:certbot.reverter:Creating backup of /etc/apache2/sites-enabled/000-default-le-ssl.conf
2019-07-08 22:43:35,624:INFO:certbot_apache.configurator:Deploying Certificate to VirtualHost /etc/apache2/sites-enabled/000-default-le-ssl.conf
2019-07-08 22:43:43,117:WARNING:certbot.client:Enhancement redirect was already set.
2019-07-08 22:43:43,375:DEBUG:certbot.reporter:Reporting to user: If you like Certbot, please consider supporting our work by:

Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
Donating to EFF:                    https://eff.org/donate-le

What does "sudo /usr/local/bin/certbot-auto certificates" show?

And can you paste the contents of /etc/letsencrypt/renewal/alberti-style.de.conf?

https://alberti-style.de/ works for me.

It redirects to https://www.alberti-style.de/, which is using a certificate that only matches alberti-style.de.

The Certificate Transparency logs show that two certificates were recently issued for both the names alberti-style.de and www.alberti-style.de -- one from Let's Encrypt and one from DigiCert Encryption Everywhere.

If you want https://www.alberti-style.de/ to work, and still have one of those certificates, if configure Apache to use it, everything should work.

It looks like there isn't an Apache virtual host with "ServerName www.alberti-style.de" or "ServerAlias www.alberti-style.de".

Thanks for the fast answer!

sudo /usr/local/bin/certbot-auto certificates
root@vmd38936:/var/www/html/wordpress/wp-content/plugins# /usr/local/bin/certbot-auto certificates
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Found the following certs:
  Certificate Name: alberti-style.de-0001
    Domains: alberti-style.de
    Expiry Date: 2019-10-04 17:11:54+00:00 (VALID: 87 days)
    Certificate Path: /etc/letsencrypt/live/alberti-style.de-0001/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/alberti-style.de-0001/privkey.pem
  Certificate Name: alberti-style.de
    Domains: alberti-style.de www.alberti-style.de
    Expiry Date: 2019-10-04 17:10:15+00:00 (VALID: 87 days)
    Certificate Path: /etc/letsencrypt/live/alberti-style.de/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/alberti-style.de/privkey.pem
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

The script works fine on my other vServer.
Unfortunately I don't know how to edit the apache in the correct way manuelly. Is there a way to remove all certificates and the bot, so I have a "seccond chance"?

Here is the /etc/letsencrypt/renewal/alberti-style.de.conf:

# renew_before_expiry = 30 days
version = 0.35.1
archive_dir = /etc/letsencrypt/archive/alberti-style.de
cert = /etc/letsencrypt/live/alberti-style.de/cert.pem
privkey = /etc/letsencrypt/live/alberti-style.de/privkey.pem
chain = /etc/letsencrypt/live/alberti-style.de/chain.pem
fullchain = /etc/letsencrypt/live/alberti-style.de/fullchain.pem

# Options used in the renewal process
[renewalparams]
authenticator = apache
installer = apache
account = 0618f733ef70247d5464ccc1ab93abf3
server = https://acme-v02.api.letsencrypt.org/directory

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.