SSL certificate

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: simboti.co.za

I hosted my domain on EC2, installed an ssl certificate, migrated to my instance to Lightsail
and now i have a problem with my ssl certificate

Hi @Simboti,

Welcome to the community forum!

The problem you’re having with your TLS certificate is because it’s a self signed certificate.

$ echo | openssl s_client -connect simboti.co.za:443 -servername  simboti.co.za 2>/dev/null | openssl x509 -noout -subject -startdate -enddate
subject=O = Bitnami, OU = Certificate generated at boot time, CN = www.example.com
notBefore=Aug 26 17:13:33 2019 GMT
notAfter=Aug 23 17:13:33 2029 GMT

Since you’re running on a Bitnami AMI, you could try following these instructions. https://docs.bitnami.com/aws/how-to/generate-install-lets-encrypt-ssl/

2 Likes

I had a certificate for my EC2 instance, and i want an ssl certificate for my instance on Lightsail

Sure, that’s definitely possible. I’m not sure how you migrated your instance to lightsail, but the easy route is to reissue the certificate on the lightsail server. If you did an rsync of all important files from the EC2 server to the lightsail server you could check if the old cert and key exists in /etc/letsencrypt.

1 Like

I followed the steps on the link you gave me “Generate And Install A Let’s Encrypt SSL Certificate For A Bitnami Application” now my website can’t open
https://simboti.co.za/

I don't believe your webserver is running.

$ telnet simboti.co.za 443
Trying 3.218.122.45...
telnet: connect to address 3.218.122.45: Connection refused

$ telnet simboti.co.za 80
Trying 3.218.122.45...
telnet: connect to address 3.218.122.45: Connection refused

Can you show me the output of ps aux | grep httpd and netstat -plunt | egrep '(80|443)' please?

Should i run this on my ssh

You would need to ssh to that server and run the commands there.

Welcome to Ubuntu 16.04.6 LTS (GNU/Linux 4.4.0-1081-aws x86_64)
*** System restart required ***
___ _ _ _
| _ |) | _ _ __ _ _ __ ()
| _ \ | | ’ / ` | ’ | |
|
/|_|||_,|||||

*** Welcome to the Bitnami WordPress 5.1.1-2 ***
*** Documentation: https://docs.bitnami.com/aws/apps/wordpress/ ***
*** https://docs.bitnami.com/aws/ ***
*** Bitnami Forums: https://community.bitnami.com/ ***
Last login: Wed Aug 28 15:46:04 2019 from 72.21.217.16
bitnami@ip-172-26-6-37:~ ps aux | grep httpd and netstat -plunt | egrep '(80|443)' grep: invalid option -- 'p' Usage: grep [OPTION]... PATTERN [FILE]... Try 'grep --help' for more information. bitnami@ip-172-26-6-37:~

@Simboti

Can you try the following commands from https://docs.bitnami.com/aws/faq/administration/control-services/

sudo /opt/bitnami/ctlscript.sh status
apachectl2 -t
# Failing that
apachectl -t

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.