Hi everyone. I created a SSL certifiacte from a Lets Encrypt. After some time the server was re built.
But now the SSL disappeared. I tried to create another one for the same domain, but got some issues that i didnt face during the first installation. But it seems like the certificate is still valid when i test it with https://www.ssllabs.com
This is the error:
Domain: mysite.pl
Type: unauthorized
Detail: Invalid response from
http://mysite.pl/.well-known/acme-challenge/wc7Romm8QfnvUMxqn4YnSm48XNeOHGkyvmGPA_8Yb4Q:
"
<!DOCTYPE html>
<!--[if lt IE 7 ]><html class="ie ie6" lang="en" prefix="og:
http://ogp.me/ns#"> <![endif]-->
<!--[if IE 7 ]"
To fix these errors, please make sure that your domain name was
entered correctly and the DNS A record(s) for that domain
contain(s) the right IP address.
Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is:
I ran this command:
It produced this output:
My web server is (include version):
The operating system my web server runs on is (include version):
My hosting provider, if applicable, is:
I can login to a root shell on my machine (yes or no, or I don't know):
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
To fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address.
Web server: Apache2
OS: ubuntu 16.04 LTS I can login to a root shell on my Machine Am not using Control panel The version for certbot is: certbot 0.28.0
Yes, the certificate is Okay, but i dont know why it doesnât appear on the website now.
The website was secured by lets Encrypt before the server was rebuilt.
After the rebuilt, the certificate is still valid but the website is not secured anymore.
That is what i dont understsnd
Your website is secure. There is the certificate, which is valide.
I don't see the content because the firewall blocks.
And you must remove this blocking if you want to renew the certificate.
But your website is ok, FireFox shows a green lock.
Same with Chrome:
This page is secure (valid HTTPS).
Certificate - valid and trusted
The connection to this site is using a valid, trusted server certificate issued by Let's Encrypt Authority X3.
View certificate
Connection - secure (strong TLS 1.3)
The connection to this site is encrypted and authenticated using TLS 1.3 (a strong protocol), X25519 (a strong key exchange), and AES_256_GCM (a strong cipher).
Resources - all served securely
All resources on this page are served securely.
Yes, i think the the firewall is blocking the https connection, because it does not get the corresponding keys to the server anymore. It was blown away when the server was rebuilt. I can only access it with http connection now.
i do not have these directories in my server anymore:
/etc/letsencrypt/live/deeds.gamregistry.com/fullchain.pem
/etc/letsencrypt/live/deeds.gamregistry.com/privkey.pem
After troubleshooting with sucuri, this is what i got from them:
And Iâve found the following potential problems:
- Your hosting server is forcing the use of plain HTTP, but your SSL Mode setting is set to âFull HTTPSâ. You should change that to âPartial HTTPSâ.
This makes sense: Your hosting server is forcing the use of plain HTTP
Your server now only supports HTTP (no HTTPS or HTTPS is broken/unusable - from their perspective).
Your SSL Mode setting is set to âFull HTTPSâ. You should change that to âPartial HTTPSâ.
This is something they should have walked you through with. [It should be a setting in their software/panel].
Once you get HTTPS working (properly), you can then switch back to 'Full HTTPS'.
