VRamone
February 15, 2023, 6:46pm
1
Hello, im having problems to generate the certificate, the steps i did and the current status are attached.
My domain is: kpag.korsa.com.br
My web server is (include version): IIS
The operating system my web server runs on is (include version): Windows
My hosting provider, if applicable, is: Locaweb
I can login to a root shell on my machine (yes or no, or I don't know): yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no
rg305
February 15, 2023, 6:50pm
3
Hi @VRamone , and welcome to the LE community forum
No, it looks like you can get certs just fine:
crt.sh | kpag.korsa.com.br
And the site is using a valid cert now:
https://www.ssllabs.com/ssltest/analyze.html?d=kpag.korsa.com.br&hideResults=on
Pleased explain your problem more clearly.
3 Likes
VRamone
February 15, 2023, 7:03pm
4
Hi there rg, thanks a lot for the welcome the problem is when i access on the browser https://kpag.korsa.com.br:8080 its not working
VRamone
February 15, 2023, 7:06pm
5
it gives me this error when i click on port 443 on iis
danb35
February 15, 2023, 7:08pm
6
No, indeed it isn't; your server isn't configured to speak HTTPS on port 8080 (it's HTTP on that port). You'll need to fix that; that has nothing to do with Let's Encrypt.
5 Likes
rg305
February 15, 2023, 7:15pm
7
It clearly shows that it is trying to connect to:
https://localhost/
That name will never be covered by any valid global CA cert.
You must connect to an FQDN covered by the CA provided cert.
5 Likes
VRamone
February 15, 2023, 7:30pm
8
hello, thanks rg and dan, thanks for the help, i replaced 8080 to 443 and now it works smoothly!
have a nice day u 2
im not very savy with those things
1 Like
no you are just redirecting back to http on port 8080
2 Likes
rg305
February 15, 2023, 7:35pm
10
It "works" when:
VRamone:
i replaced 8080 to 443
equals this change:
https://kpag.korsa.com.br:8080/
https://kpag.korsa.com.br:443/
OR
https://kpag.korsa.com.br/
3 Likes
rg305
February 15, 2023, 7:36pm
11
@VRamone , please review the ciphers and protocols being used.
The site is allowing some very insecure stuff:
SSL Server Test: kpag.korsa.com.br (Powered by Qualys SSL Labs)
3 Likes
system
Closed
March 17, 2023, 7:37pm
12
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.