SSL on Cent OS 7 - Site using default self signed cert

Help
1

I am needing some help! I have a VPS and installed Cent OS 7 and Apache. Once the OS is installed, it creates an SSL Cert that is self-signed. I install Certbot and create an SSL certificate that uses Lets Encrypt as the CA. This works fine. However when I go to the website, it still uses the self-signed certificate, rather than the higher level one from Lets Encrypt.

This is the domain report form ssl shopper:

https://www.sslshopper.com/ssl-checker.html?hostname=www.thedevgarden.co.uk

I imagined that just by installing the Let’s Encrypt Cert everything would be fine!
Do I need to install some kind of intermediary cert or something?
I’m at a loss with this, so if anyone has any ideas, please let me know! Thanks, A

My domain is:
www.thedevgarden.co.uk

I ran this command:

It produced this output:

My web server is (include version):
Apache/2.4.6 (CentOS)

The operating system my web server runs on is (include version):
Cent OS 7

My hosting provider, if applicable, is:
n/a

I can login to a root shell on my machine (yes or no, or I don’t know):
yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
n/a

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):
certbot 1.4.0

1 Like
2

This is important: how did you generate the certificate? Please answer with the full command.

1 Like
3

Hi Osrisis, I think I have it figured out. Seems I need to enter some info into the ssl.conf about where the certificates are located. I had expected Certbot to do all this.
Thanks.
A

1 Like
4

certbot can do that. That's the reason I asked for the command you used.

1 Like
5

I’ve probably messed up at some point, but the guide I was following is this :slight_smile:

https://www.hostinger.com/tutorials/how-to-install-ssl-certificate-on-centos-7

and the only command I ran was:

certbot

and then followed the onscreen.

I think I might need to re-install Cent OS and try it again. Practice makes perfect!

6

Hard to say without the actual output of certbot and the choices you've made.

Reinstalling the whole OS is almost NEVER the correct action to take.

1 Like
7

Yeah, no worries - its not a production server, or even a staging server. Just a project server with nothing on it. I’ve wiped and re-installed a tonne of times already.

8

But you won’t learn the deeper, integeral working of systems by just starting “fresh” every time you run in to a little bit of trouble.

2 Likes
9

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.