Unable to issue new ssl cerificate for my domain

Please show:
ls -la | grep well

8 Likes

I am able to generate for a different domain on the same server.

Can it be because the project is a laravel project?. In laravel, it first visits the public folder in the afrikartghana.com folder

so the domain is pointed to /home/mildax22/afrikartghana.com/public

7 Likes

Try using that as the webroot:

.acme.sh/acme.sh --issue -d afrikartghana.com -w /home/mildax22/afrikartghana.com/public

And show this output:
ls -la /home/mildax22/afrikartghana.com | grep well

9 Likes

okay sure

7 Likes

Sorry, has to be done in the folder:
/home/mildax22/afrikartghana.com

8 Likes

Okay, let me do that

6 Likes

You are a genius. It worked after using this command

.acme.sh/acme.sh --issue -d afrikartghana.com -w /home/mildax22/afrikartghana.com/public

9 Likes

Thanks a lot for taking time out of your busy schedules to assist me. I really appreciate it.

9 Likes

Thanks a lot to MikeMcQ as well. I really appreciate it.

9 Likes

Glad Rudy got it sorted for you. Will be happier once your new cert is sent out by your server :slight_smile:

9 Likes

Indeed, two steps remain:

  • use the new cert:
    restart/reload web service
  • automate the renewal process / use the latest cert
10 Likes

After generating the certificate, I am unable to install it via ssh :smiling_face_with_tear:. The command doesn't work for me. So I normally install it through the cpanel manually. I will be glad if you can take me through how to install and automate the renewal process

7 Likes

Please do you mean, installing it on my server?

8 Likes

Yes. Sorry, just different words. Your server is using the new cert so that looks good.

10 Likes

If you have cPanel, you might be able to use that to maintain the certs for all your sites.

9 Likes

Yes please but I wish to automate it :sweat_smile:

7 Likes

cPanel should be able to help with automation.
OR
You must do two things to automate this yourself:

  • ensure there is a job set to run certbot / acme.sh regularly
    [which will check for expiring certs and renew them]
    Try:
    systemctl list-timers | grep certbot
    crontab -l
  • automate the restart/reload of the web service
    [this can be combined into certbot renewals with a renewal hook]
    OR
    You could just schedule a job to reload your web service daily/weekly.
8 Likes

I don't think the hosting service has cPanel setup for any free automation. They sell SSL certs for an annual fee. It's a NameCheap hosting service (StellarPlus).

Still, you could setup so the cert auto-renews but you still would manually copy/paste the certs.

8 Likes

hmm...

9 Likes

okay I get it now

6 Likes