LetsEncrypt Cert with EC2 Bitnami

Help
42

Great news!

I was able to complete the force SSL and I can verify the certificate is active using the following link (https://www.ssllabs.com/ssltest/analyze.html?d=baim.tv)

However, when I try to access the website using the URL: https://www.baim.tv I get an error and the WordPress URL Settings is greyed out and I cannot change to https.

How do I correct this/

Thanks

wp_url
wp_url.jpeg1086×319 35.7 KB

43

The trouble is that www.baim.tv doesn’t exist at all in your DNS zone. You’ll need to create it in DNS as a first step.

1 Like
44

Hi Schoen,

I am not sure where you are referring the DNS Zone be added. If you are referring to AWS is there as I was able to access the cite prior to forcing https. Could you please be more detailed or specific?

Thanks,

B.

45

I don’t know how your DNS is handled, but there is literally no such name as www.baim.tv right now. This is independent of the existence of a certificate; nobody can find it on the Internet using any kind of software for any purpose because your DNS servers don’t agree that the name exists at all!

It does look like AWS is responsible for your DNS records.

2 Likes
46

Hello,

As far as I can see, it looks like the record is there. What am I missing?

image
28069030-7AB6-41CE-8AC8-956D95F162FC.jpg1242×2208 141 KB

Thanks!

47

Those all refer to baim.tv, not www.baim.tv.

1 Like
48

Oh ok! So do I need to add them both or do I change the one to add www?

49

If you want people to be able to access the service regardless of which name they type in, you need to add both.

1 Like
50

Oh, ok, this is new for me, so thank you for your patience. I have added another DNS record. Is this correct now?

dns02
dns02.jpeg1196×718 116 KB

51

Yes, but apparently your nameserver doesn’t know about it yet for some reason. Did you commit this change?

1 Like
52

that last line is unnecessary and is causing the problem:
compare:
http://dnsviz.net/d/www.baim.tv/dnssec/
with:
http://dnsviz.net/d/baim.tv/dnssec/

3 Likes
53

As far as I know I did. How can I check?

54

Hi,

Not sure what you mean.

55

the last line in your dns02.jpeg file is the problem
the NS entry for www.baim.tv

1 Like
56

ok, i deleted it.does this look correct now?

dns03
dns03.jpeg1202×516 82.1 KB

57

the picture looks good
but it hasn’t yet propagated out to all the DNS servers: http://dnsviz.net/d/www.baim.tv/dnssec/

1 Like
58

ok, so do we just wait now and see?

59

It looks like it should be fine now…
try and try again

1 Like
60

I’m getting security errors when i try to access the website.

web_errors
web_errors.jpeg2880×1624 246 KB

61

the certificate is only for "baim.tv"
SSL Server Test: www.baim.tv (Powered by Qualys SSL Labs)
you need to get a new cert for both names:
baim.tv
www.baim.tv

if that is the last command you ran, then just add the www at the end
like:
./certbot-auto certonly --webroot -w /home/bitnami/htdocs/ -d baim.tv -d www.baim.tv

NOTE: using "certonly" requires some additional manual step(s) to use the new cert.
I would rather use the apache plugin, if that works.

1 Like