Not able create a proper certificate

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:mahabazaaronline.com

I ran this command:

sudo certbot-auto --apache -d mahabazaaronline.com 

It produced this output:
Plugins selected: Authenticator apache, Installer apache
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for mahabazaaronline.com
Waiting for verification...
Cleaning up challenges
Created an SSL vhost at /etc/apache2/sites-available/mahabazaaronline.com-le-ssl.conf
Deploying Certificate to VirtualHost /etc/apache2/sites-available/mahabazaaronline.com-le-ssl.conf
Enabling available site: /etc/apache2/sites-available/mahabazaaronline.com-le-ssl.conf
Redirecting vhost in /etc/apache2/sites-enabled/mahabazaaronline.com.conf to ssl vhost in /etc/apache2/sites-available/mahabazaaronline.com-le-ssl.conf

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Congratulations! You have successfully enabled https://mahabazaaronline.com
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/mahabazaaronline.com/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/mahabazaaronline.com/privkey.pem
   Your cert will expire on 2021-02-08. To obtain a new or tweaked
   version of this certificate in the future, simply run certbot-auto
   again with the "certonly" option. To non-interactively renew *all*
   of your certificates, run "certbot-auto renew"
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le

My web server is (include version):apache2

The operating system my web server runs on is (include version):2.4.18

My hosting provider, if applicable, is:DO

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot): 1.9.0
I am tring to move my application from one server to a new server. I created certificate and later for couple of minutes http://mahabazaaronline.com worked, then it started giving error 404 page not found on domain url, but worked for all other links of the web site. However, I also felt that it was not able to access www.mahabazaaronline.com. I uninstaled ths certificate and created one more certicate using
sudo certbot-auto --apache -d www.mahabazaaronline.com -d mahabazaaronline.com
I was not able to create certificate. Error is as below
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator apache, Installer apache
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for www.mahabazaaronline.com
Waiting for verification...
Challenge failed for domain www.mahabazaaronline.com
http-01 challenge for www.mahabazaaronline.com
Cleaning up challenges
Some challenges have failed.

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: www.mahabazaaronline.com
   Type:   unauthorized
   Detail: Invalid response from
   https://www.mahabazaaronline.com/.well-known/acme-challenge/dav22-omclrfXnEK78hnWC4DnfNLs0zfvMeQhh2380s
   [34.192.194.170]: "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0
   Strict//EN\"
   \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\">\n<!--[if lt
   IE 7]> "

   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A/AAAA record(s) for that domain
   contain(s) the right IP address.

Now, I have redirected url to the old server and currently mhabazaaronline.com does not point to my new server where new application is built
Please let me know what is going wrong

1 Like
2

Sorry, Kindly note I meant https://mahabazaaronline.com worked temporily , before giving Page not found error on homepage

1 Like
3

Please show the output of:
apachectl -S

2 Likes
4

For some reason, visiting your website overwrites my entire browsing history for my tab.

2 Likes
5
2 Likes
6

BEWARE:

image
hxxp://roi-traffic[.]icu/get.php?key=57ae14f08ba34083309153a81162b2f3
image
iniformarsi[.]tk
image

2 Likes
7

FYI I've edited the top post to quote instances of the website name so people don't accidentally click on it.

3 Likes
8

If you are checking the URL, currently the domain name is pointed to our old server. (We have been sensing some malicious activity in that server. But have not able too verify it), However, the above problem with letsencrypt certicate occured in our new server when we were trying to install a new SSL certificate

3 Likes
9

@sujathaupadhyaaya

Your website is affected by malware.

That's probably the first issue to address. My guess is that you need to update your Magento version. Your PHP version is also very outdated.

You need to disable TLSv1 as well.

2 Likes
10

I guess so. However, the url points to our current server right now. I guess that is the one that has malicious activity issue /Old version of PHP etc.

I was not able to get a proper certificate in a different server. After pointing the domain to new server that hosts new application with upgraded software, there was some problem with the ssl certificate, So I pointed the domain back to old server

2 Likes
11

So is it pointing to the old or the new right now?

2 Likes
12

It would seem that it is pointing to the old server.
Perhaps he could issue a one time cert via DNS to get the new server going.
[and stop the old one from who knows what...]

2 Likes
14

It is pointing to the old one...

2 Likes
15

To run diagnostics properly, we need your domain name to be pointing to the new server. Make sure to "disable" your content if you're worried about insecure access via port 80. I realize that this will take your website down temporarily, which IMO is much better than serving an outdated, infected website.

1 Like
16

Thank you @jsha. That's very helpful!

2 Likes
17

It just displays the configuration. At this point of time, I have disabled the respective .conf file. So there's not much information there.When I put it back I will remember to check that

2 Likes
18

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.