Website not secure

Help
21

-rw-r--r-- 1 root root 540 Feb 14 04:41 noorirubbers.in-0001.conf
-rw-r--r-- 1 root root 540 Feb 14 04:45 noorirubbers.in-0002.conf
-rw-r--r-- 1 root root 540 Feb 14 05:16 noorirubbers.in-0003.conf
-rw-r--r-- 1 root root 559 Feb 14 05:19 noorirubbers.in-0004.conf
-rw-r--r-- 1 root root 540 Feb 20 18:18 noorirubbers.in-0005.conf
-rw-r--r-- 1 root root 540 Feb 23 08:01 noorirubbers.in-0006.conf
-rw-r--r-- 1 root root 540 Feb 23 08:46 noorirubbers.in-0007.conf
-rw-r--r-- 1 root root 540 Feb 25 09:28 noorirubbers.in-0008.conf
-rw-r--r-- 1 root root 540 Apr 26 14:07 noorirubbers.in-0009.conf
-rw-r--r-- 1 root root 515 Feb 11 19:21 noorirubbers.in.conf

i dono someone in team has created this.
so do i have to consider apr 26th is latest one rt?

22

Show:
ls -l /etc/letsencrypt/archive/noorirubbers.in-0009/
cat /etc/letsencrypt/archive/noorirubbers.in-0009/cert*.pem

3 Likes
23

Besides what Rudy asks, how many noorirubbers.in* directories are available in /etc/letsencrypt/archive/ ? Where did the certs from a few days ago go?

3 Likes
24

ls -l /etc/letsencrypt/archive/noorirubbers.in-0009/
total 40
-rw-r--r-- 1 root root 1842 Feb 25 09:35 cert1.pem
-rw-r--r-- 1 root root 1846 Apr 26 14:07 cert2.pem
-rw-r--r-- 1 root root 3750 Feb 25 09:35 chain1.pem
-rw-r--r-- 1 root root 3750 Apr 26 14:07 chain2.pem
-rw-r--r-- 1 root root 5592 Feb 25 09:35 fullchain1.pem
-rw-r--r-- 1 root root 5596 Apr 26 14:07 fullchain2.pem
-rw------- 1 root root 1704 Feb 25 09:35 privkey1.pem
-rw------- 1 root root 1704 Apr 26 14:07 privkey2.pem

25

cat /etc/letsencrypt/archive/noorirubbers.in-0009/cert*.pem
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

26

/etc/letsencrypt/archive# ls -l noorirubbers.in*
noorirubbers.in-0008:
total 20
-rw-r--r-- 1 root root 1846 Feb 25 09:28 cert1.pem
-rw-r--r-- 1 root root 3750 Feb 25 09:28 chain1.pem
-rw-r--r-- 1 root root 5596 Feb 25 09:28 fullchain1.pem
-rw------- 1 root root 1708 Feb 25 09:28 privkey1.pem

noorirubbers.in-0009:
total 40
-rw-r--r-- 1 root root 1842 Feb 25 09:35 cert1.pem
-rw-r--r-- 1 root root 1846 Apr 26 14:07 cert2.pem
-rw-r--r-- 1 root root 3750 Feb 25 09:35 chain1.pem
-rw-r--r-- 1 root root 3750 Apr 26 14:07 chain2.pem
-rw-r--r-- 1 root root 5592 Feb 25 09:35 fullchain1.pem
-rw-r--r-- 1 root root 5596 Apr 26 14:07 fullchain2.pem
-rw------- 1 root root 1704 Feb 25 09:35 privkey1.pem
-rw------- 1 root root 1704 Apr 26 14:07 privkey2.pem

27

At least this cert seems to be valid.. However, it's not one of the certificates issued in May. So it's very weird those certs are gone somehow..

You could change these directives to use the /live/noorirubbers.in-0009/ directory. At least you'd have a working website.

How this all is integrated with Saltsomething is a complete mystery to me, so you might want to ask about the whole messed up Certbot configuration on a support channel for Saltsomething.

2 Likes
28

Thank you so muchfor the reply, now website is secure.
lets encrypt community has always helped us.
keep rocking!!

2 Likes
29

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.