Missing a step?

Help
21

@Leavii

What's in this file?

/etc/apache2/sites-available/jmcs.conf

Also...

Don't mind us bantering. We're both regulars around here.

:wink:

3 Likes
22

Ok so you have been able to get a cert!
But you must have used certonly though :frowning:
Please show:
cat /etc/letsencrypt/renewal/jackiesmcs.com.conf

3 Likes
23

Yes!
The name of the sever is truly irrelevant.
It can (and should be) something like: "Server19-Rack42"
It should NEVER be used by the web service.

3 Likes
24

And STILL learning! - LOL

4 Likes
25

I was thinking of the vHost ServerName. Guess that message just means the global ServerName.

3 Likes
26

Always, my friend. :grin:

3 Likes
27

@griffin
/etc/apache2/sites-available/jmcs.conf contains:

<VirtualHost *:80>
    ServerName jackiesmcs.com
    ServerAlias jackiesmcs.com
    ServerAdmin webmaster@localhost
    DocumentRoot /var/www/jmcs
    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined

    <Directory /var/www/jmcs/>
            AllowOverride All
    </Directory>

RewriteEngine on
RewriteCond %{SERVER_NAME} =jackiesmcs.com
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>

@rg305
cat /etc/letsencrypt/renewal/jackiesmcs.com/conf outputs:

# renew_before_expiry = 30 days
version = 1.11.0
archive_dir = /etc/letsencrypt/archive/jackiesmcs.com
cert = /etc/letsencrypt/live/jackiesmcs.com/cert.pem
privkey = /etc/letsencrypt/live/jackiesmcs.com/privkey.pem
chain = /etc/letsencrypt/live/jackiesmcs.com/chain.pem
fullchain = /etc/letsencrypt/live/jackiesmcs.com/fullchain.pem

# Options used in the renewal process
[renewalparams]
account = bd0cd1f0ec15f52f8521fd236a263e6d
authenticator = apache
installer = apache
manual_public_ip_logging_ok = None
server = https://acme-v02.api.letsencrypt.org/directory
3 Likes
28

hmm...
Well then something has gone awry!

3 Likes
29

Make that www.jackiesmcs.com

Get rid of this:

3 Likes
30

My name is: JOE
My alias is: JOE

Not much of an alias!

3 Likes
31

@griffin

Corrected to www.jackiesmcs.com and restarted apache2.service.

Thanks for all the help by the way :smiley:

4 Likes
32

Make sure when you're reloading to use:

apachectl -k graceful

3 Likes
33

We need to force an install - so that a matching TLS enabled site is created.
Or we could do it by hand - but why?

3 Likes
34

Was using systemctl restart apache2.service :open_mouth:

4 Likes
35

That should work as well.
[many ways to skin cats!]

3 Likes
36

I had www. in their at some point, but removed it. Not 100% sure why just never went back :frowning:

4 Likes
37

Removed this as well and restarted service.

3 Likes
38

How about we delete the current (one named) cert.
And start over
Go for the two named cert and a real installation

? ? ?

3 Likes
39

Considering that you don't have an A or CNAME record in your DNS for www.jackiesmcs.com, it's rather a moot point.

3 Likes
40

I do have an A record in DNS at domains.google.com

3 Likes