SSL certificate error

none

its on centos 7

Run ls /etc/letsencrypt/live/

image

Let’s issue hostname SSL again https://server.obrtnik.net:8090/manageSSL/sslForHostName then issue obrtnik.net SSL https://server.obrtnik.net:8090/manageSSL/manageSSL

See if your obrtnik.net certificate is properly installed SSL Checker | Free online SSL Certificate Test for your website | IONOS and server.obrtnik.net SSL Server Test (Powered by Qualys SSL Labs) and post result here

You need to remove private keys and certificates at the Virtual Host Level


Then you delete all private keys and certificates for respective website and hostname from server:

$ rm -f /etc/letsencrypt/live/obrtnik.net/privkey.pem && rm -f /etc/letsencrypt/live/obrtnik.net/fullchain.pem

$ rm -f /etc/letsencrypt/live/server.obrtnik.net/privkey.pem && rm -f /etc/letsencrypt/live/server.obrtnik.net/fullchain.pem

$ rm -f /etc/letsencrypt/live/mail.obrtnik.net/privkey.pem && rm -f /etc/letsencrypt/live/mail.obrtnik.net/fullchain.pem

Then resissue the CyberPanel way:

  1. Go to https://server.obrtnik.net:8090/manageSSL/sslForHostName
  2. Choose obrtnik.net
  3. Click on Issue SSL

do the same for hostname: https://server.obrtnik.net:8090/manageSSL/sslForHostName

no success

@si668p What error have you gotten

the same as before

Sad to hear that

Repeat this process SSL certificate error - #20 by josephgodwinke

DO NOT reissue the ssl.

First upgrade CyberPanel, Run wget -O - https://get.acme.sh | sh then setup detailed debug logs and reboot.

Resissue SSL by running cyberpanel issueSSL --domainName obrtnik.net as you tail /home/cyberpanel/error-logs.txt or debug using commandline

[11.03.2022_18-15-35] /root/.acme.sh/acme.sh --issue -d obrtnik.net -d www.obrtnik.net --cert-file /etc/letsencrypt/live/obrtnik.net/cert.pem --key-file /etc/letsencrypt/live/obrtnik.net/privkey.pem --fullchain-file /etc/letsencrypt/live/obrtnik.net/fullchain.pem -w /usr/local/lsws/Example/html -k ec-256 --force --server letsencrypt
[11.03.2022_18-15-35] Failed to obtain SSL for: obrtnik.net and: www.obrtnik.net
[11.03.2022_18-15-35] Trying to obtain SSL for: obrtnik.net
[11.03.2022_18-15-43] Failed to obtain SSL, issuing self-signed SSL for: obrtnik.net
[11.03.2022_18-15-43] Self signed SSL issued for obrtnik.net.

2022-11-03 19:19:26.167978 [INFO] [60528] [Module:mod_security] setSecRule value: /usr/local/lsws/conf/modsec/rules.conf, type: 2
2022-11-03 19:19:26.168639 [INFO] [60528] [Module: modcompress 1.1] has been initialized successfully
2022-11-03 19:19:26.168768 [INFO] [60528] [Module: moddecompress 1.1] has been initialized successfully
2022-11-03 19:19:26.169087 [INFO] [60528] [Module: cache 1.64] has been initialized successfully
2022-11-03 19:19:26.169253 [INFO] [60528] [Module: mod_security mod_security 1.4] has been initialized successfully
2022-11-03 19:19:26.169311 [ERROR] [60528] Path for certificate file is invalid: /usr/local/lsws/admin/conf/webadmin.crt
2022-11-03 19:19:26.169336 [ERROR] [60528] [config:admin:listener] No listener is available for admin virtual host!
2022-11-03 19:19:26.169750 [ERROR] [60528] Fatal error in configuration, exit!

Please remove obrtnik.net domain ssl certificates completely from your server SSL certificate error - #20 by josephgodwinke

After removing obrtnik.net domain ssl certificates completely from your server and reissuing via cyberpanel fails:

$ /root/.acme.sh/acme.sh --issue -d obrtnik.net --cert-file /etc/letsencrypt/live/obrtnik.net/cert.pem --key-file /etc/letsencrypt/live/obrtnik.net/privkey.pem --fullchain-file /etc/letsencrypt/live/obrtnik.net/fullchain.pem -w /usr/local/lsws/Example/html --force --debug
  1. Create file anything.txt in /usr/local/Example/html/.well-known/acme-challenge/ and try to access it via yourdomain.com is available for purchase - Sedo.com
  2. If point 1 is working then run SSL command otherwise verify the vhost config context for the .well-known if not there create it or ask for context code

Note: the SSL verify file will not open in browser if site is using openlitespeed as proxy to other webserver with / path.

Try and let me know result :blush: