Trying to install certbot I broke Apache

That's the exact opposite of what I said. :wink:

Once the change is published at the nameservers listed in your whois record, you are clear to proceed.

2 Likes

After a session with Godaddy tech support, the website can now be reached by the domain name. I am anxious to proceed with the certificate process. I'd appreciate your assistance. --Gene

1 Like

I guess you should begin anew.

What show?:

  • certbot certificates
  • sudo apachectl -t -D DUMP_VHOSTS
2 Likes

certbot certificates
Saving debug log to /var/log/letsencrypt/letsencrypt.log


No certificates found.


safeandtacticalfirearmstraining:/home/geno #

apachectl -t -D DUMP_VHOSTS

VirtualHost configuration:
*:80                   is a NameVirtualHost
         default server www.safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:17)
         port 80 namevhost www.safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:17)
         port 80 namevhost safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:56)
         port 80 namevhost www.safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:17)
         port 80 namevhost safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:56)
*:443                  is a NameVirtualHost
         default server www.safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:85)
         port 443 namevhost www.safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:85)
         port 443 namevhost www.safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:85)

Well that's unusual looking output. The biggest problem is that it looks like you include the same STFT-vhost.conf file twice. You should check your main apache.conf file (not sure of name on your distro) include statements.

I am also curious to see that STFT-vhost.conf file and how you handle the basename and the www subdomain. Would you show that here but please use 3 backticks before and after to retain the Apache config like

```
pasted contents of STFT conf file
```

The backtick on a US keyboard is just left of the number 1 on the top row (not numeric keypad)

3 Likes

This is STFT-vhost.conf

# Template for a VirtualHost with SSL
# Note: to use the template, rename it to /etc/apache2/vhost.d/yourvhost.conf.
# Files must have the .conf suffix to be loaded.
#
# See /usr/share/doc/packages/apache2/README.QUICKSTART for further hints
# about virtual hosts.
#
# This is the Apache server configuration file providing SSL support.
# It contains the configuration directives to instruct the server how to
# serve pages over an https connection. For detailing information about these 
# directives see http://httpd.apache.org/docs/2.4/mod/mod_ssl.html
#
# Do NOT simply read the instructions in here without understanding
# what they do.  They're here only as hints or reminders.  If you are unsure
# consult the online docs. You have been warned.  

<VirtualHost _default_:80>

        #  General setup for the virtual host
        DocumentRoot "/srv/www/htdocs"
        ServerName www.safeandtacticalfirearmstraining.com
        ServerAdmin geno11x11@gmail.com
        ErrorLog /var/log/apache2/error_log
        TransferLog /var/log/apache2/access_log

        #   SSL Engine Switch:
        #   Enable/Disable SSL for this virtual host.
        SSLEngine off

        #   OCSP Stapling:
        #   Enable/Disable OCSP for this virtual host.
        SSLUseStapling  off

        #   You can use per vhost certificates if SNI is supported.
#       SSLCertificateFile /etc/apache2/ssl.crt/ca-bundle.crt
#        SSLCertificateFile /etc/apache2/ssl.crt/certificate.crt
#        SSLCertificateKeyFile /etc/apache2/ssl.key/private.key
#       SSLCertificateChainFile /etc/apache2/ssl.crt/ca-bundle.crt

        #   Per-Server Logging:
        #   The home of a custom SSL log file. Use this when you want a
        #   compact non-error SSL logfile on a virtual host basis.
        CustomLog /var/log/apache2/ssl_request_log   ssl_combined

</VirtualHost>


<IfDefine SSL>
<IfDefine !NOSSL>

##
## SSL Virtual Host Context
##
#Listen 80
#Listen 443
<VirtualHost _default_:80>

	#  General setup for the virtual host
	DocumentRoot "/srv/www/htdocs"
	ServerName safeandtacticalfirearmstraining.com
	ServerAdmin geno11x11@gmail.com
	ErrorLog /var/log/apache2/error_log
	TransferLog /var/log/apache2/access_log

	#   SSL Engine Switch:
	#   Enable/Disable SSL for this virtual host.
	SSLEngine off

	#   OCSP Stapling:
	#   Enable/Disable OCSP for this virtual host.
	SSLUseStapling  off

	#   You can use per vhost certificates if SNI is supported.
#	SSLCertificateFile /etc/apache2/ssl.crt/ca-bundle.crt
#	SSLCertificateFile /etc/apache2/ssl.crt/certificate.crt
#	SSLCertificateKeyFile /etc/apache2/ssl.key/private.key
#	SSLCertificateChainFile /etc/apache2/ssl.crt/ca-bundle.crt

	#   Per-Server Logging:
	#   The home of a custom SSL log file. Use this when you want a
	#   compact non-error SSL logfile on a virtual host basis.
	CustomLog /var/log/apache2/ssl_request_log   ssl_combined

</VirtualHost>
<VirtualHost _default_:443>

        #  General setup for the virtual host
        DocumentRoot "/srv/www/htdocs"
        ServerName www.safeandtacticalfirearmstraining.com
        ServerAdmin geno11x11@gmail.com
        ErrorLog /var/log/apache2/error_log
        TransferLog /var/log/apache2/access_log

        #   SSL Engine Switch:
        #   Enable/Disable SSL for this virtual host.
        SSLEngine on

        #   OCSP Stapling:
        #   Enable/Disable OCSP for this virtual host.
        SSLUseStapling  on

        #   You can use per vhost certificates if SNI is supported.
#       SSLCertificateFile /etc/apache2/ssl.crt/ca-bundle.crt
        SSLCertificateFile /etc/apache2/ssl.crt/certificate.crt
        SSLCertificateKeyFile /etc/apache2/ssl.key/private.key
#       SSLCertificateChainFile /etc/apache2/ssl.crt/ca-bundle.crt

        #   Per-Server Logging:
        #   The home of a custom SSL log file. Use this when you want a
        #   compact non-error SSL logfile on a virtual host basis.
        CustomLog /var/log/apache2/ssl_request_log   ssl_combined

</VirtualHost>

</IfDefine>
</IfDefine>

1 Like

There are several things wrong but we will do them in small steps. Don't try to work ahead and don't worry if it all isn't working instantly. There is a lot wrong.

First, let's clean up your Apache VirtualHost configs

You have 3 VirtualHosts in your SFTT conf file.

The first one starts with this:

<VirtualHost _default_:80>

        #  General setup for the virtual host
        DocumentRoot "/srv/www/htdocs"
        ServerName www.safeandtacticalfirearmstraining.com

After that ServerName line add this line:

ServerAlias safeandtacticalfirearmstraining.com

And then remove the second VirtualHost completely. The second one starts like this and notice we added the ServerAlias for this domain name above so do not need it here:

<VirtualHost _default_:80>

	#  General setup for the virtual host
	DocumentRoot "/srv/www/htdocs"
	ServerName safeandtacticalfirearmstraining.com

Then add the same ServerAlias statement to your last VirtualHost. That's the one for port 443

<VirtualHost _default_:443>
        #  General setup for the virtual host
        DocumentRoot "/srv/www/htdocs"
        ServerName www.safeandtacticalfirearmstraining.com

When all those changes are done show this again before next step

apachectl -t -D DUMP_VHOSTS
2 Likes

Step one completed:

VirtualHost configuration:
*:80                   is a NameVirtualHost
         default server www.safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:17)
         port 80 namevhost www.safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:17)
                 alias safeandtacticalfirearmstraining.com
         port 80 namevhost www.safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:17)
                 alias safeandtacticalfirearmstraining.com
*:443                  is a NameVirtualHost
         default server www.safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:58)
         port 443 namevhost www.safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:58)
                 alias safeandtacticalfirearmstraining.com
         port 443 namevhost www.safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:58)
                 alias safeandtacticalfirearmstraining.com

They are still being loaded twice.
What shows?:
grep -i include /etc/apache2/*

3 Likes

Okay good. Now we have to find out why these are duplicated. Had you looked at your include statements in your apache2 conf yet?

Show

grep 'include' /etc/apache2/apache2.conf
3 Likes
  1. grep -i include /etc/apache2/*
/etc/apache2/default-server.conf:	#   Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
/etc/apache2/default-server.conf:# Note that if you include a trailing / on fakename then the server will
/etc/apache2/default-server.conf:# We include the /icons/ alias for FancyIndexed directory listings.  If you
/etc/apache2/default-server.conf: Options +ExecCGI -Includes
/etc/apache2/default-server.conf:Include /etc/apache2/mod_userdir.conf
/etc/apache2/default-server.conf:# Include all *.conf files from /etc/apache2/conf.d/.
/etc/apache2/default-server.conf:# You can comment this out here if you want those bits include only in a
/etc/apache2/default-server.conf:#IncludeOptional /etc/apache2/conf.d/*.conf
/etc/apache2/default-server.conf:IncludeOptional /etc/apache2/conf.d/apache2-manual?conf
/etc/apache2/default-server.conf:include /etc/apache2/vhosts.d/*.conf
/etc/apache2/errors.conf:# includes to substitute the appropriate text.
/etc/apache2/errors.conf:#   Alias /error/include/ "/your/include/path/"
/etc/apache2/errors.conf:# /usr/share/apache2/error/include/ files and copying them to /your/include/path/, 
/etc/apache2/errors.conf:# even on a per-VirtualHost basis.  The default include files will display
/etc/apache2/errors.conf:# The internationalized error documents require mod_alias, mod_include
/etc/apache2/errors.conf:<IfModule mod_include.c>
/etc/apache2/errors.conf:        Options IncludesNoExec
/etc/apache2/errors.conf:        AddOutputFilter Includes html
/etc/apache2/httpd.conf:# If possible, avoid changes to this file. It does mainly contain Include
/etc/apache2/httpd.conf:# Overview of include files, chronologically:
/etc/apache2/httpd.conf:#       `-- *.conf . . . . . . . . . . . . .     (*.conf is automatically included)
/etc/apache2/httpd.conf:Include /etc/apache2/uid.conf
/etc/apache2/httpd.conf:Include /etc/apache2/server-tuning.conf
/etc/apache2/httpd.conf:  Include /etc/apache2/loadmodule.conf
/etc/apache2/httpd.conf:Include /etc/apache2/listen.conf
/etc/apache2/httpd.conf:Include /etc/apache2/mod_log_config.conf
/etc/apache2/httpd.conf:  Include /etc/apache2/global.conf
/etc/apache2/httpd.conf:Include /etc/apache2/mod_status.conf
/etc/apache2/httpd.conf:Include /etc/apache2/mod_info.conf
/etc/apache2/httpd.conf:Include /etc/apache2/mod_reqtimeout.conf
/etc/apache2/httpd.conf:Include /etc/apache2/mod_cgid-timeout.conf
/etc/apache2/httpd.conf:Include /etc/apache2/mod_usertrack.conf
/etc/apache2/httpd.conf:Include /etc/apache2/mod_autoindex-defaults.conf
/etc/apache2/httpd.conf:Include /etc/apache2/mod_mime-defaults.conf
/etc/apache2/httpd.conf:Include /etc/apache2/errors.conf
/etc/apache2/httpd.conf:Include /etc/apache2/ssl-global.conf
/etc/apache2/httpd.conf:Include /etc/apache2/protocols.conf
/etc/apache2/httpd.conf:Include /etc/apache2/default-server.conf
/etc/apache2/httpd.conf:IncludeOptional /etc/apache2/vhosts.d/*.conf
/etc/apache2/httpd.conf:#       putting its name into APACHE_CONF_INCLUDE_FILES in 
/etc/apache2/httpd.conf.gnk1:# If possible, avoid changes to this file. It does mainly contain Include
/etc/apache2/httpd.conf.gnk1:# Overview of include files, chronologically:
/etc/apache2/httpd.conf.gnk1:#       `-- *.conf . . . . . . . . . . . . .     (*.conf is automatically included)
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/uid.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/server-tuning.conf
/etc/apache2/httpd.conf.gnk1:  Include /etc/apache2/loadmodule.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/listen.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/mod_log_config.conf
/etc/apache2/httpd.conf.gnk1:  Include /etc/apache2/global.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/mod_status.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/mod_info.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/mod_reqtimeout.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/mod_cgid-timeout.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/mod_usertrack.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/mod_autoindex-defaults.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/mod_mime-defaults.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/errors.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/ssl-global.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/protocols.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/default-server.conf
/etc/apache2/httpd.conf.gnk1:IncludeOptional /etc/apache2/vhosts.d/*.conf
/etc/apache2/httpd.conf.gnk1:#       putting its name into APACHE_CONF_INCLUDE_FILES in 
/etc/apache2/loadmodule.conf:LoadModule include_module                 /usr/lib64/apache2-prefork/mod_include.so
/etc/apache2/mod_mime-defaults.conf:# To parse .shtml files for server-side includes (SSI):
/etc/apache2/mod_mime-defaults.conf:# (You will also need to add "Includes" to the "Options" directive.)
/etc/apache2/mod_mime-defaults.conf:#AddOutputFilter INCLUDES .shtml
/etc/apache2/mod_userdir.conf:		Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
/etc/apache2/server-tuning.conf:	# a directory that does not include the trailing slash.  This fixes a 
grep: /etc/apache2/sites-enabled: Is a directory
grep: /etc/apache2/ssl.crl: Is a directory
grep: /etc/apache2/ssl.crt: Is a directory
grep: /etc/apache2/ssl.csr: Is a directory
/etc/apache2/ssl-global.conf:	#   Configures the cache used to store OCSP responses which get included in
grep: /etc/apache2/ssl.key: Is a directory
grep: /etc/apache2/ssl.prm: Is a directory
grep: /etc/apache2/sysconfig.d: Is a directory
grep: /etc/apache2/vhosts.d: Is a directory
  1. Apache2.conf does not exist on the server. Not finding it under /etc/apache2, I did a system-wide search.

  2. Here is a list of all .conf files under /etc/apache2:

default-server.conf
errors.conf
global.conf
httpd.conf
listen.conf
loadmodule.conf
mod_autoindex-defaults.conf
mod_cgid-timeout.conf
mod_info.conf
mod_log_config.conf
mod_mime-defaults.conf
mod_reqtimeout.conf
mod_status.conf
mod_userdir.conf
mod_usertrack.conf
protocols.conf
server-tuning.conf
ssl-global.conf
uid.conf
  1. Also, my distro is OpenSuse LEAP 15.4
1 Like

Here are the culprit lines:
[reordered for simpler explanation]

Line 1 includes all the config files in folder /vhosts.d/ <<<<< all are loaded once [normal]
Line 2 specifically includes the default-server.conf file [outside of the config folder]
Line 3 also includes all the config files in folder /vhosts.d/ <<<<< all are loaded twice [unexpected]

[file default-server.conf should not be including such other files/folders]

3 Likes

Once you make the change shown by @rg305 show the result of this to make sure is now good:

apachectl -t -D DUMP_VHOSTS

I'll assume it is so the next step is to fix your DNS. You have a proper A record for your root domain name but not for the www subdomain. You need to make an A record for that name too.

Use the https://unboundtest.com tool to check the A records for both names. Let us know when they both look good and we will guide to next step.

Of course, if you have any questions we can try to help but you should be able to use the GoDaddy DNS panel now.

3 Likes

I added a cname record with www at Godaddy. Not sure how to interpret the output of unboundtest.com, but the output of my URL with & without www look similar.

I implemented the changes listed by @rg305 by commenting out line 2 in http.conf which stopped the include of default-server.conf - Hope that was the correct choice. The output below is the same as prior. I restarted Apache2 so it looks like I'll need another stab at it...

VirtualHost configuration:
*:80                   is a NameVirtualHost
         default server www.safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:17)
         port 80 namevhost www.safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:17)
                 alias safeandtacticalfirearmstraining.com
         port 80 namevhost www.safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:17)
                 alias safeandtacticalfirearmstraining.com
*:443                  is a NameVirtualHost
         default server www.safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:58)
         port 443 namevhost www.safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:58)
                 alias safeandtacticalfirearmstraining.com
         port 443 namevhost www.safeandtacticalfirearmstraining.com (/etc/apache2/vhosts.d/STFT-vhost.conf:58)
                 alias safeandtacticalfirearmstraining.com
grep -i include /etc/apache2/*
grep: /etc/apache2/conf.d: Is a directory
/etc/apache2/default-server.conf:	#   Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
/etc/apache2/default-server.conf:# Note that if you include a trailing / on fakename then the server will
/etc/apache2/default-server.conf:# We include the /icons/ alias for FancyIndexed directory listings.  If you
/etc/apache2/default-server.conf: Options +ExecCGI -Includes
/etc/apache2/default-server.conf:Include /etc/apache2/mod_userdir.conf
/etc/apache2/default-server.conf:# Include all *.conf files from /etc/apache2/conf.d/.
/etc/apache2/default-server.conf:# You can comment this out here if you want those bits include only in a
/etc/apache2/default-server.conf:#IncludeOptional /etc/apache2/conf.d/*.conf
/etc/apache2/default-server.conf:IncludeOptional /etc/apache2/conf.d/apache2-manual?conf
/etc/apache2/default-server.conf:include /etc/apache2/vhosts.d/*.conf
/etc/apache2/errors.conf:# includes to substitute the appropriate text.
/etc/apache2/errors.conf:#   Alias /error/include/ "/your/include/path/"
/etc/apache2/errors.conf:# /usr/share/apache2/error/include/ files and copying them to /your/include/path/, 
/etc/apache2/errors.conf:# even on a per-VirtualHost basis.  The default include files will display
/etc/apache2/errors.conf:# The internationalized error documents require mod_alias, mod_include
/etc/apache2/errors.conf:<IfModule mod_include.c>
/etc/apache2/errors.conf:        Options IncludesNoExec
/etc/apache2/errors.conf:        AddOutputFilter Includes html
/etc/apache2/httpd.conf:# If possible, avoid changes to this file. It does mainly contain Include
/etc/apache2/httpd.conf:# Overview of include files, chronologically:
/etc/apache2/httpd.conf:#       `-- *.conf . . . . . . . . . . . . .     (*.conf is automatically included)
/etc/apache2/httpd.conf:Include /etc/apache2/uid.conf
/etc/apache2/httpd.conf:Include /etc/apache2/server-tuning.conf
/etc/apache2/httpd.conf:  Include /etc/apache2/loadmodule.conf
/etc/apache2/httpd.conf:Include /etc/apache2/listen.conf
/etc/apache2/httpd.conf:Include /etc/apache2/mod_log_config.conf
/etc/apache2/httpd.conf:  Include /etc/apache2/global.conf
/etc/apache2/httpd.conf:Include /etc/apache2/mod_status.conf
/etc/apache2/httpd.conf:Include /etc/apache2/mod_info.conf
/etc/apache2/httpd.conf:Include /etc/apache2/mod_reqtimeout.conf
/etc/apache2/httpd.conf:Include /etc/apache2/mod_cgid-timeout.conf
/etc/apache2/httpd.conf:Include /etc/apache2/mod_usertrack.conf
/etc/apache2/httpd.conf:Include /etc/apache2/mod_autoindex-defaults.conf
/etc/apache2/httpd.conf:Include /etc/apache2/mod_mime-defaults.conf
/etc/apache2/httpd.conf:Include /etc/apache2/errors.conf
/etc/apache2/httpd.conf:Include /etc/apache2/ssl-global.conf
/etc/apache2/httpd.conf:#Include /etc/apache2/protocols.conf
/etc/apache2/httpd.conf:Include /etc/apache2/default-server.conf
/etc/apache2/httpd.conf:IncludeOptional /etc/apache2/vhosts.d/*.conf
/etc/apache2/httpd.conf:#       putting its name into APACHE_CONF_INCLUDE_FILES in 
/etc/apache2/httpd.conf.gnk1:# If possible, avoid changes to this file. It does mainly contain Include
/etc/apache2/httpd.conf.gnk1:# Overview of include files, chronologically:
/etc/apache2/httpd.conf.gnk1:#       `-- *.conf . . . . . . . . . . . . .     (*.conf is automatically included)
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/uid.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/server-tuning.conf
/etc/apache2/httpd.conf.gnk1:  Include /etc/apache2/loadmodule.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/listen.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/mod_log_config.conf
/etc/apache2/httpd.conf.gnk1:  Include /etc/apache2/global.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/mod_status.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/mod_info.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/mod_reqtimeout.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/mod_cgid-timeout.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/mod_usertrack.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/mod_autoindex-defaults.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/mod_mime-defaults.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/errors.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/ssl-global.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/protocols.conf
/etc/apache2/httpd.conf.gnk1:Include /etc/apache2/default-server.conf
/etc/apache2/httpd.conf.gnk1:IncludeOptional /etc/apache2/vhosts.d/*.conf
/etc/apache2/httpd.conf.gnk1:#       putting its name into APACHE_CONF_INCLUDE_FILES in 
/etc/apache2/loadmodule.conf:LoadModule include_module                 /usr/lib64/apache2-prefork/mod_include.so
/etc/apache2/mod_mime-defaults.conf:# To parse .shtml files for server-side includes (SSI):
/etc/apache2/mod_mime-defaults.conf:# (You will also need to add "Includes" to the "Options" directive.)
/etc/apache2/mod_mime-defaults.conf:#AddOutputFilter INCLUDES .shtml
/etc/apache2/mod_userdir.conf:		Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
/etc/apache2/server-tuning.conf:	# a directory that does not include the trailing slash.  This fixes a 
grep: /etc/apache2/sites-enabled: Is a directory
grep: /etc/apache2/ssl.crl: Is a directory
grep: /etc/apache2/ssl.crt: Is a directory
grep: /etc/apache2/ssl.csr: Is a directory
/etc/apache2/ssl-global.conf:	#   Configures the cache used to store OCSP responses which get included in
grep: /etc/apache2/ssl.key: Is a directory
grep: /etc/apache2/ssl.prm: Is a directory
grep: /etc/apache2/sysconfig.d: Is a directory
grep: /etc/apache2/vhosts.d: Is a directory

We'll come back to the duplicate VirtualHosts problem but the DNS CNAME is wrong

The name you CNAMEd to isn't your base name

;; ANSWER SECTION:
www.safeandtacticalfirearmstraining.com.	0	IN	CNAME	safeandtacticalfirearms.com.

You are missing "training" as part of the name

1 Like

Corrected. Thanks for your diligent work.

1 Like

That line still looks active in your default-server.conf file. You should comment that out since it is also included in your httpd.conf file

then show this again
apachectl -t -D DUMP_VHOSTS

PS: your DNS change looks good

2 Likes

No text output. I would have expected a single vhost each for ports 80 & 443. The line I commented out included a * wildcard. I'm thinking that line should specify the file instead.

apachectl -t -D DUMP-VHOSTS
Syntax OK
1 Like

Um, no :slight_smile: Did you comment out just that one line in the default-server.conf file?

Is that the format of the -t -D DUMP_VHOSTS command you used previously?

Even though I typed that format earlier could you have used this instead?

apache2ctl -t -D DUMP_VHOSTS
or less likely
httpd -t -D DUMP_VHOSTS

2 Likes

I used:
apachectl -t -D DUMP-VHOSTS

When I use
apache2ctl -t -D DUMP_VHOSTS

I get output. Now I'm going back to re-correct what I think is wrong.