My main domain has SSL and my subdomain dont have SSL

Help
63

yeah how can i fix this ?

64

Since I see:
Server: Apache/2.4.54 (Debian)

I would think we should start troubleshooting that with:
sudo apachectl -t -D DUMP_VHOSTS

2 Likes
65

well i have this

sudo apachectl -t -D DUMP_VHOSTS
VirtualHost configuration:
*:80                   qkqy.c.dedikuoti.lt (/etc/apache2/sites-enabled/000-default.conf:1)
*:443                  is a NameVirtualHost
         default server qkqy.c.dedikuoti.lt (/etc/apache2/sites-enabled/default-ssl.conf:2)
         port 443 namevhost qkqy.c.dedikuoti.lt (/etc/apache2/sites-enabled/default-ssl.conf:2)
         port 443 namevhost lerg.lt (/etc/apache2/sites-enabled/lerg.lt-le-ssl.conf:2)
                 alias www.lerg.lt
         port 443 namevhost lerg.lt (/etc/apache2/sites-enabled/lerg.lt.conf:1)
                 alias www.lerg.lt
         port 443 namevhost vvp.lerg.lt (/etc/apache2/sites-enabled/lergvvp.lt.conf
``
66

Also, you might want to include the IPv6 address in DNS:

curl -Ii [2a02:7b40:50d1:ed2a::1]
HTTP/1.1 400 Bad Request
Date: Tue, 14 Mar 2023 23:45:57 GMT
Server: Apache/2.4.54 (Debian)
Content-Length: 447
Connection: close
Content-Type: text/html; charset=iso-8859-1
2 Likes
67

How can i include ?

68

Well, that's a hot mess!

A. There is only one HTTP [port 80] listener.
B. Two files are serving the same name:port combination [overlap]
C. The vvp name is using HTTPS (without a valid cert for that name)?

3 Likes
69

Where do you set your DNS records?

2 Likes
70

I didn't see any DNS AAAA Records.

image
image1149×742 11.4 KB

71

i have a site where can i add DNS records

72

What i need to set as AAA record?

73

Lookie here:

Name:      qkqy.c.dedikuoti.lt
Addresses: 2a02:7b40:50d1:ed2a::1
           80.209.237.42

If it was included, why would it then need to be added?!?!?! - LOL

1 Like
74

It is NOT required, but since it works, you should use it.
It's four As: "AAAA"

2 Likes
75

Ah, OK; I missed it! :frowning:

76

How can i fix them ?

77

aaaah....
One at a time???

2 Likes
78

Yeah where i should start about fixing those issues?

79

so if i understanding it right i can remove one of those?

port 443 namevhost lerg.lt (/etc/apache2/sites-enabled/lerg.lt-le-ssl.conf:2)
         alias www.lerg.lt

?

80

Yeah cause not sure how can i validate the cert

do i need to have multiple ones?

81

No; But to simplify automation, you should handle all the HTTP ACME challenge requests there.

2 Likes
82

Getting back to this it seems that www.lerg.lt and lerg.lt are fine but vvp.lerg.lt has Certificate name mismatch (Also had to create new acc cause that one reached Posting limit)