Problem updating ACME TLS-SNI-01 to alternative validation method

Help
121

Ping 94.103.101.200 answers.
Something went wrong with port 80

122

OK lets help it a bit.
And keep it from having to modify your config.
In each vhost config we need add an alias for the acme-challenge request path.

1 Like
123

Shall I do it kreator.ch-ssl.conf and kreator.ch.conf ?
How do I do it ?

124

Yes.
Please show:
grep -Eri 'listen|virtualh|servern|servera|rewrite' /etc/apache2

1 Like
126

Only needed in kreator.ch.conf file.

With something like:
Alias /.well-known/acme-challenge /etc/letsencrypt/.well-known/acme-challenge

1 Like
127

It shows my conf backups as well

128

OK letā€™s reduce it to:

grep -Ei 'listen|virtualh|servern|servera|rewrite' /etc/apache2/sites-enabled/*.conf

[and delete that long post]

1 Like
129

Here we go

root@vserv2200.swisslink.ch:/root# grep -Ei 'listen|virtualh|servern|servera|rewrite' /etc/apache2/sites-enabled/*.conf
/etc/apache2/sites-enabled/000-default.conf:<VirtualHost *:80>
/etc/apache2/sites-enabled/000-default.conf: # The ServerName directive sets the request scheme, hostname and port that
/etc/apache2/sites-enabled/000-default.conf: # redirection URLs. In the context of virtual hosts, the ServerName
/etc/apache2/sites-enabled/000-default.conf: #ServerName www.example.com
/etc/apache2/sites-enabled/000-default.conf: ServerName kreator.ch
/etc/apache2/sites-enabled/000-default.conf: ServerAlias www.kreator.ch
/etc/apache2/sites-enabled/000-default.conf: ServerAdmin webmaster@localhost
/etc/apache2/sites-enabled/000-default.conf:RewriteEngine on
/etc/apache2/sites-enabled/000-default.conf:RewriteCond %{SERVER_NAME} =www.kreator.ch [OR]
/etc/apache2/sites-enabled/000-default.conf:RewriteCond %{SERVER_NAME} =kreator.ch
/etc/apache2/sites-enabled/000-default.conf:RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
/etc/apache2/sites-enabled/000-default.conf:
/etc/apache2/sites-enabled/default-ssl.conf:
/etc/apache2/sites-enabled/default-ssl.conf: ServerAdmin webmaster@localhost
/etc/apache2/sites-enabled/default-ssl.conf:
/etc/apache2/sites-enabled/kreator.ch-ssl.conf:<VirtualHost *:443>
/etc/apache2/sites-enabled/kreator.ch-ssl.conf: # The ServerName directive sets the request scheme, hostname and port that
/etc/apache2/sites-enabled/kreator.ch-ssl.conf: # redirection URLs. In the context of virtual hosts, the ServerName
/etc/apache2/sites-enabled/kreator.ch-ssl.conf: #ServerName www.example.com
/etc/apache2/sites-enabled/kreator.ch-ssl.conf: ServerAdmin mathias.zajaczkowski@ubik.ch
/etc/apache2/sites-enabled/kreator.ch-ssl.conf: ServerName kreator.ch
/etc/apache2/sites-enabled/kreator.ch-ssl.conf: ServerAlias www.kreator.ch
/etc/apache2/sites-enabled/kreator.ch-ssl.conf:
/etc/apache2/sites-enabled/kreator.ch.conf:<VirtualHost *:80>
/etc/apache2/sites-enabled/kreator.ch.conf: # The ServerName directive sets the request scheme, hostname and port that
/etc/apache2/sites-enabled/kreator.ch.conf: # redirection URLs. In the context of virtual hosts, the ServerName
/etc/apache2/sites-enabled/kreator.ch.conf: #ServerName mathias.kreator.ch
/etc/apache2/sites-enabled/kreator.ch.conf: ServerAdmin mathias.zajaczkowski@ubik.ch
/etc/apache2/sites-enabled/kreator.ch.conf: ServerName www.kreator.ch
/etc/apache2/sites-enabled/kreator.ch.conf: ServerAlias kreator.ch
/etc/apache2/sites-enabled/kreator.ch.conf: RewriteEngine on
/etc/apache2/sites-enabled/kreator.ch.conf: RewriteCond %{SERVER_NAME} =kreator.ch
/etc/apache2/sites-enabled/kreator.ch.conf: RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]
/etc/apache2/sites-enabled/kreator.ch.conf:
root@vserv2200.swisslink.ch:/root#

130

This:
/etc/apache2/sites-enabled/000-default.conf:<VirtualHost *:80>
/etc/apache2/sites-enabled/000-default.conf: ServerName kreator.ch
/etc/apache2/sites-enabled/000-default.conf: ServerAlias www.kreator.ch
/etc/apache2/sites-enabled/000-default.conf:</VirtualHost>

conflicts with this:
/etc/apache2/sites-enabled/kreator.ch.conf:<VirtualHost *:80>
/etc/apache2/sites-enabled/kreator.ch.conf: ServerName www.kreator.ch
/etc/apache2/sites-enabled/kreator.ch.conf: ServerAlias kreator.ch
/etc/apache2/sites-enabled/kreator.ch.conf:</VirtualHost>

Both contain both names.

1 Like
131

Good job.
Can I remove the default one ?

132

Please show this file:
/etc/apache2/sites-enabled/default-ssl.conf

1 Like
133

Compare them both...
Make sure you aren't missing anything and delete one of them.

1 Like
134

I have less or more old copies of it.
Fire. Ok?

135

Line by line.

Be sure you aren't deleting the one that has any lines you need (and that aren't in the other file).
[I don't expect that to be the case; but just to be sure]

1 Like
136

Default is gone.
I do not really need mathias.kreator neither.
Fire ?

137

Unrelated.
So sure.

1 Like
138

This file is "involved" (included) but I'm not sure why?

1 Like
139

Is not there any more.
Restarted appache,
However https://kreator.ch/ refuses to connect.

140

I can kill mathias.kreator* in sites-available too. Just in case

141

Files in sites-available arenā€™t included.
Only files in sites-enabled.
[which can be links to files in sites-enabled - and usually are]
[So whatā€™s ā€œavailableā€ can be more than whatā€™s ā€œenabledā€]

1 Like