SSL Certificate issue with my dyndns.org domain

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
mysecret.dyndns.org
I ran this command:
sudo certbot --apache -d mysecret.dyndns.org
It produced this output:
see attached
My web server is (include version):
apache2-latest
The operating system my web server runs on is (include version):
ubuntu 20.04
My hosting provider, if applicable, is:
home server
I can login to a root shell on my machine (yes or no, or I don’t know):
yes
I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
no
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): lateset on ubuntu repositories

Hello everybody.
I am using Let’s encrypt for an SSL certificate on my nextcloud home server.
As can you see on below screenshots SSL certificate has been created but is working only if I use my IP.
Once I try with my mysecret.dyndns.org domain, connection failed.

This is how I set up my virtual host in sites-available

Screenshot from 2020-06-16 12-21-51
Screenshot from 2020-06-16 12-21-511366Ă—768 329 KB

Why mysecret.dyndns.org domain is not working with SSL?
By the way I had some results with openssl

Can somebody explain?

1 Like
2

You should test your HTTPS system from outside your network first.
Try using SSL Labs

The attached screenshot shows nothing about the certbot output.

1 Like
3

Thanks for your time and yes you r correct, I delete the screenshot because forum allows me only one picture per post since I am a new member.
I forget to correct my post sorry but anyway the entire installation went pretty well.
I can’t really explain why my domain is not working with ssl certificates .

1 Like
4

Does the secure site work from the Internet, SSL Labs, a smart phone?

1 Like
5

Nope, It is not working and SSLLabs report
Unable to connect to server

6

Then begin at the beginning…

Does global DNS resolve the name “mysecret.dyndns.org” to your servers’ Internet IP?

7

Sorry I was not clear. My domain is working from outside my home network but only http version and not the https version.
I don’t know what r you asking on your last answer, sorry I’m not IT professional

8

You don’t have to be an IT professional to use DNS.
But since the HTTP is reaching you, then the DNS must be OK.

Step #1 DNS OK.

Step #2 HTTP OK

Step #3 HTTPS:
Have you set your router to port forward 80 and 443 to your server?

9

By the way firewall is set up to
Allow full Apache
And port 443 is open on my router

10

Yes sir both of them

11

Please bare with me; as you have given very little information about … anything.

Is the router configured to allow port 80 and port 443 to reach your server?
I know you said the server will accept it.
But I can’t be sure if there is also a router before the server (between it and the Internet).

12

Yes sir, I answered to you on my above post, both port 80 and 443 are open , firewall is set up to allow full Apache and of course their is a router since this is a Home server running on a old Sony vaio laptop with Ubuntu 20.04

13

Can you check if Apache is listening on 80 and 443?
try something like:
netstat -pant | grep -i listen

14

You again seem to have dodged the direct question:
Is the router configured to allow port 80 and port 443 to reach your Sony Vaio laptop IP?

15

image

16

Looks only tcp6 is listening . Or I am wrong ?

17

OK so the Sony Vaio is configured properly.
Let's get back to the router.

18

TCP6 :::443 will cover both IPv4 and IPv6

Can we talk about the router?

19

I don’t know what to answer to you on this .
I have open the ports on my router
image

20

Hard to read…
But is that the same way port 80 is configured?
Do they look identical (except 443 where 80)?