D
D
DVoropaev2017-08-31 14:52:12
linux
DVoropaev, 2017-08-31 14:52:12

Why is ssl not working on the site??

I use CA letsencrypt. This is how I update the certificate:

certbot certonly --webroot -w /var/www/www.<url_cкрыт>eu/html/ -d www.<url_cкрыт>eu -d <url_cкрыт>eu
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
Cert not yet due for renewal

You have an existing certificate that has exactly the same domains or certificate name you requested and isn't close to expiry.
(ref: /etc/letsencrypt/renewal/www.<url_cкрыт>eu.conf)

What would you like to do?
-------------------------------------------------------------------------------
1: Keep the existing certificate for now
2: Renew & replace the cert (limit ~5 per 7 days)
-------------------------------------------------------------------------------
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for www.<url_cкрыт>eu
http-01 challenge for <url_cкрыт>eu
Using the webroot path /var/www/www.<url_cкрыт>eu/html for all unmatched domains.
Waiting for verification...
Cleaning up challenges
Generating key (2048 bits): /etc/letsencrypt/keys/0003_key-certbot.pem
Creating CSR: /etc/letsencrypt/csr/0003_csr-certbot.pem

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at
   /etc/letsencrypt/live/www.<url_cкрыт>eu/fullchain.pem. Your cert will
   expire on 2017-11-29. To obtain a new or tweaked version of this
   certificate in the future, simply run certbot again. To
   non-interactively renew *all* of your certificates, run "certbot
   renew"
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le

But the browser (chrome) swears that the certificate is out of date. Need to wait some time? several days have passed.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
R
Ruslan Fedoseev, 2017-08-31
@DVoropaev

did you restart the webserver after updating the certificate?

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question