Www.g8wrb.co.uk uses an invalid security certificate. The certificate is only valid for www.kirbymicrowave.co.uk

Help
9

Thank you, everyone. There were at one point two IP addresses (one was 109.228.59.169). I wanted to delete that, as it should not have been used and was costing me money each month. None of the sites should have been using that IP anyway, as the IP address is put in the VirtualHost definition. I have just removed that and rebooted the server.

I can see a couple of things that look wrong, but I don’t wish to change them, as I will probably just confuse anyone trying to debug this.

  1. The output of certbot certificates does report an error. I put more information in #6 below, as its quite a long output, but that seems quite relevent, so I will mention it first.

    Renewal configuration file /etc/letsencrypt/renewal/www.kirbymicrowave.co.uk.conf produced an unexpected error: renewal config file {} is missing a required file reference. Skipping
    …
    The following renewal configurations were invalid:
    /etc/letsencrypt/renewal/www.kirbymicrowave.co.uk.conf

    1. This virtual host

      <VirtualHost 109.228.58.153:80>
      ServerName kirbymicrowave.co.uk

      Redirect “/” “http://www.kirbymicrowave.co.uk/”

on port 80, which is there only to correct a common spelling mistake (kirby instead of kirkby), redirects to the mist-spelt domain http://www.kirbymicrowave.co.uk. It would seem more sensible to redirect it to the correct SSL enabled domain, although that’s not happening in one stage, but the SSL enabled domain should redirect it to the correctly spelt one. There are two redirections, but I doubt that is a cause of any problems, except waste a few CPU cycles. I would have thought it more sensible to do it in one, but I have left it for now. But I will mention it anyway.

  1. I’ve noticed a fair degree of randomness - sometimes a site works, then does not. I rebooted the server as suggested.

  2. I use the site I’ve attached two files suggested.

/etc/apache2/sites-enabled/g8wrb.co.uk.conf
/etc/apache2/sites-enabled/KIRBYMICROWAVE.co.uk.conf

  1. grep -Ri servername /etc/apache2/sites-enabled/
    root@localhost:~# grep -Ri servername /etc/apache2/sites-enabled/
    /etc/apache2/sites-enabled/kirkbymicrowave.com.conf: # The ServerName directive sets the request scheme, hostname and port that
    /etc/apache2/sites-enabled/kirkbymicrowave.com.conf: # redirection URLs. In the context of virtual hosts, the ServerName
    /etc/apache2/sites-enabled/kirkbymicrowave.com.conf: ServerName www.kirkbymicrowave.com
    /etc/apache2/sites-enabled/kirkbymicrowave.com.conf: # The ServerName directive sets the request scheme, hostname and port that
    /etc/apache2/sites-enabled/kirkbymicrowave.com.conf: # redirection URLs. In the context of virtual hosts, the ServerName
    /etc/apache2/sites-enabled/kirkbymicrowave.com.conf: ServerName kirkbymicrowave.com
    /etc/apache2/sites-enabled/kirkbymicrowave.com.conf: ServerName www.kirkbymicrowave.com
    /etc/apache2/sites-enabled/kirkbymicrowave.com.conf: ServerName kirkbymicrowave.com
    /etc/apache2/sites-enabled/dhars.org.uk.conf: ServerName www.dhars.org.uk
    /etc/apache2/sites-enabled/dhars.org.uk.conf: ServerName dhars.org.uk
    /etc/apache2/sites-enabled/dhars.org.uk.conf: ServerName dhars.org.uk
    /etc/apache2/sites-enabled/dhars.org.uk.conf: # The ServerName directive sets the request scheme, hostname and port that
    /etc/apache2/sites-enabled/dhars.org.uk.conf: # redirection URLs. In the context of virtual hosts, the ServerName
    /etc/apache2/sites-enabled/dhars.org.uk.conf: ServerName www.dhars.org.uk
    /etc/apache2/sites-enabled/kirkbymicrowave.co.uk.conf: # The ServerName directive sets the request scheme, hostname and port that
    /etc/apache2/sites-enabled/kirkbymicrowave.co.uk.conf: # redirection URLs. In the context of virtual hosts, the ServerName
    /etc/apache2/sites-enabled/kirkbymicrowave.co.uk.conf: ServerName www.kirkbymicrowave.co.uk
    /etc/apache2/sites-enabled/kirkbymicrowave.co.uk.conf: ServerName www.kirkbymicrowave.co.uk
    /etc/apache2/sites-enabled/kirkbymicrowave.co.uk.conf: ServerName kirkbymicrowave.co.uk
    /etc/apache2/sites-enabled/kirkbymicrowave.co.uk.conf: ServerName kirkbymicrowave.co.uk
    /etc/apache2/sites-enabled/KIRBYMICROWAVE.co.uk.conf: # The ServerName directive sets the request scheme, hostname and port that
    /etc/apache2/sites-enabled/KIRBYMICROWAVE.co.uk.conf: # redirection URLs. In the context of virtual hosts, the ServerName
    /etc/apache2/sites-enabled/KIRBYMICROWAVE.co.uk.conf: ServerName www.kirbymicrowave.co.uk
    /etc/apache2/sites-enabled/KIRBYMICROWAVE.co.uk.conf: # The ServerName directive sets the request scheme, hostname and port that
    /etc/apache2/sites-enabled/KIRBYMICROWAVE.co.uk.conf: # redirection URLs. In the context of virtual hosts, the ServerName
    /etc/apache2/sites-enabled/KIRBYMICROWAVE.co.uk.conf: ServerName kirbymicrowave.co.uk
    /etc/apache2/sites-enabled/KIRBYMICROWAVE.co.uk.conf: ServerName www.kirbymicrowave.co.uk
    /etc/apache2/sites-enabled/KIRBYMICROWAVE.co.uk.conf: ServerName kirbymicrowave.co.uk
    /etc/apache2/sites-enabled/steam-boilers.co.uk.conf: ServerName www.steam-boilers.co.uk
    /etc/apache2/sites-enabled/steam-boilers.co.uk.conf: ServerName steam-boilers.co.uk
    /etc/apache2/sites-enabled/g8wrb.co.uk.conf: ServerName www.g8wrb.co.uk
    /etc/apache2/sites-enabled/g8wrb.co.uk.conf: ServerName g8wrb.co.uk
    /etc/apache2/sites-enabled/g8wrb.co.uk.conf: ServerName g8wrb.co.uk
    /etc/apache2/sites-enabled/g8wrb.co.uk.conf: # The ServerName directive sets the request scheme, hostname and port that
    /etc/apache2/sites-enabled/g8wrb.co.uk.conf: # redirection URLs. In the context of virtual hosts, the ServerName
    /etc/apache2/sites-enabled/g8wrb.co.uk.conf: ServerName www.g8wrb.co.uk

  2. The output of certbot certificatesdoes indicate a problem.

root@localhost:~# certbot certificates
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Renewal configuration file /etc/letsencrypt/renewal/www.kirbymicrowave.co.uk.conf produced an unexpected error: renewal config file {} is missing a required file reference. Skipping.

Found the following certs:
Certificate Name: kirkbymicrowave.com
Domains: kirkbymicrowave.com
Expiry Date: 2020-01-11 21:54:26+00:00 (VALID: 50 days)
Certificate Path: /etc/letsencrypt/live/kirkbymicrowave.com/fullchain.pem
Private Key Path: /etc/letsencrypt/live/kirkbymicrowave.com/privkey.pem
Certificate Name: dhars.org.uk
Domains: dhars.org.uk
Expiry Date: 2019-12-31 20:08:42+00:00 (VALID: 39 days)
Certificate Path: /etc/letsencrypt/live/dhars.org.uk/fullchain.pem
Private Key Path: /etc/letsencrypt/live/dhars.org.uk/privkey.pem
Certificate Name: www.kirkbymicrowave.com
Domains: www.kirkbymicrowave.com
Expiry Date: 2020-01-11 21:54:37+00:00 (VALID: 50 days)
Certificate Path: /etc/letsencrypt/live/www.kirkbymicrowave.com/fullchain.pem
Private Key Path: /etc/letsencrypt/live/www.kirkbymicrowave.com/privkey.pem
Certificate Name: kirkbymicrowave.co.uk
Domains: kirkbymicrowave.co.uk
Expiry Date: 2020-01-11 21:54:49+00:00 (VALID: 50 days)
Certificate Path: /etc/letsencrypt/live/kirkbymicrowave.co.uk/fullchain.pem
Private Key Path: /etc/letsencrypt/live/kirkbymicrowave.co.uk/privkey.pem
Certificate Name: www.kirkbymicrowave.co.uk
Domains: www.kirkbymicrowave.co.uk
Expiry Date: 2020-01-11 21:55:01+00:00 (VALID: 50 days)
Certificate Path: /etc/letsencrypt/live/www.kirkbymicrowave.co.uk/fullchain.pem
Private Key Path: /etc/letsencrypt/live/www.kirkbymicrowave.co.uk/privkey.pem
Certificate Name: g8wrb.co.uk
Domains: g8wrb.co.uk
Expiry Date: 2020-02-19 21:44:29+00:00 (VALID: 89 days)
Certificate Path: /etc/letsencrypt/live/g8wrb.co.uk/fullchain.pem
Private Key Path: /etc/letsencrypt/live/g8wrb.co.uk/privkey.pem
Certificate Name: www.dhars.org.uk
Domains: www.dhars.org.uk
Expiry Date: 2019-12-31 20:08:49+00:00 (VALID: 39 days)
Certificate Path: /etc/letsencrypt/live/www.dhars.org.uk/fullchain.pem
Private Key Path: /etc/letsencrypt/live/www.dhars.org.uk/privkey.pem
Certificate Name: www.g8wrb.co.uk
Domains: www.g8wrb.co.uk
Expiry Date: 2020-02-19 21:05:44+00:00 (VALID: 89 days)
Certificate Path: /etc/letsencrypt/live/www.g8wrb.co.uk/fullchain.pem
Private Key Path: /etc/letsencrypt/live/www.g8wrb.co.uk/privkey.pem
Certificate Name: www.kirbymicrowave.co.uk-0001
Domains: www.kirbymicrowave.co.uk
Expiry Date: 2020-01-11 21:55:18+00:00 (VALID: 50 days)
Certificate Path: /etc/letsencrypt/live/www.kirbymicrowave.co.uk-0001/fullchain.pem
Private Key Path: /etc/letsencrypt/live/www.kirbymicrowave.co.uk-0001/privkey.pem
Certificate Name: kirbymicrowave.co.uk
Domains: www.kirbymicrowave.co.uk
Expiry Date: 2020-02-16 06:48:52+00:00 (VALID: 85 days)
Certificate Path: /etc/letsencrypt/live/www.kirbymicrowave.co.uk/fullchain.pem
Private Key Path: /etc/letsencrypt/live/www.kirbymicrowave.co.uk/privkey.pem

The following renewal configurations were invalid:
/etc/letsencrypt/renewal/www.kirbymicrowave.co.uk.conf

KIRBYMICROWAVE.co.uk.conf.txt (3.7 KB)

g8wrb.co.uk.conf.txt (4.3 KB)

1 Like