I followed the guide to install a Let's Encrypt certificate, and now Apache won't start

will.seymour2010 2018-08-23 14:41:24 UTC #1

Keywords: WordPress Multisite - Google Cloud Platform - Technical issue - Secure Connections (SSL/HTTPS)
Description:
I have bitnami multisite, originally launched from GCP deployment manager, using Apache.

I followed the instructions to install a let's encrypt SSL on my Bitnami installation. Ideally I would have an SSL for the whole Multisite, ideally automatically for each new domain.

When I followed the instruction
sudo mv /opt/bitnami/apache2/conf/server.csr /opt/bitnami/apache2/conf/server.csr.old
I received the error message
mv: cannot stat ‘/opt/bitnami/apache2/conf/server.crt’: No such file or directory

I then attempted again, but it didn't work.
I then received the error messages when trying to start everything again:
/opt/bitnami/mysql/scripts/ctl.sh : mysql started at port 3306
/opt/bitnami/php/scripts/ctl.sh : php-fpm started
AH00526: Syntax error on line 46 of /opt/bitnami/apache2/conf/bitnami/bitnami.conf:
SSLCertificateFile: file '/opt/bitnami/apache2/conf/server.crt' does not exist or is empty
apache config test fails, aborting

since then, not much has worked, including attempting to start, stop and repeat the instructions on the let's encrypt guide (as above) always giving the error message:
mv: cannot stat ‘/opt/bitnami/apache2/conf/server.crt’: No such file or directory
or

AH00526: Syntax error on line 46 of /opt/bitnami/apache2/conf/bitnami/bitnami.conf:
SSLCertificateFile: file '/opt/bitnami/apache2/conf/server.crt' does not exist or is empty
apache config test fails, aborting

Now my website isn't working at all and I can't start it as HTTP, let alone with SSL.

outputs of the commands advised:
sudo ls -la /opt/bitnami/apache2/conf/

total 288
drwxr-xr-x 5 bitnami root 4096 Aug 22 18:08 .
drwxr-xr-x 14 root root 4096 Nov 16 2017 ..
drwxr-xr-x 2 bitnami root 4096 Dec 6 2017 bitnami
-rw-r--r-- 1 root root 1212 May 16 23:14 cert.csr.old
-rw-r--r-- 1 bitnami root 289 Nov 16 2017 deflate.conf
drwxr-xr-x 2 bitnami root 4096 Nov 16 2017 extra
-rw-r--r-- 1 bitnami root 20092 Nov 16 2017 httpd.conf
-rw-r--r-- 1 bitnami root 13077 Nov 8 2017 magic
-rw-r--r-- 1 bitnami root 60847 Nov 8 2017 mime.types
-rw-r--r-- 1 bitnami root 7413 Aug 2 2012 modsecurity.conf
drwxr-xr-x 3 bitnami root 4096 Nov 16 2017 original
-rw-r--r-- 1 bitnami root 17301 Nov 16 2017 pagespeed.conf
-rw-r--r-- 1 bitnami root 120982 Nov 16 2017 pagespeed_libraries.conf
-rw-r--r-- 1 bitnami root 199 Nov 16 2017 php-fpm-apache.conf
-rw-r--r-- 1 bitnami root 1834 Nov 16 2017 privkey.pem
lrwxrwxrwx 1 root root 47 Aug 22 18:03 server.crt.old -> /etc/lego/certificates/smcreativedesign.com.crt
-rw------- 1 root root 899 Nov 16 2017 server.csr.old
lrwxrwxrwx 1 root root 47 Aug 22 18:03 server.key.old -> /etc/lego/certificates/smcreativedesign.com.key
-rw-r--r-- 1 bitnami root 203 Nov 16 2017 ssi.conf

and
sudo ls -la /etc/lego/

total 20
drwx------ 4 root root 4096 May 17 01:10 .
drwxr-xr-x 74 root root 4096 Aug 23 10:05 ..
drwx------ 4 root root 4096 Aug 22 17:49 accounts
drwx------ 2 root root 4096 May 17 10:39 certificates
-rw-r--r-- 1 bitnami root 222 May 17 01:14 renew-certificate.sh

Bitnami Let's Encrypt Guide has failed again. Apache won't start AGAIN. Please help

jota 2018-08-24 07:44:23 UTC #2

Hi @will.seymour2010,

As Apache mentions, the server.crt file doesn't exit in the apache's conf folder and that's why it can't be started. As you can see in the list of files in the conf folder you have 2 ".old" files. You probably moved them before restarting the server.

I just checked that the DNS configuration is fine and the domain is redirecting to your instance. So please follow these steps:

Recover the ".old" files to be able to restart Apache

sudo mv /opt/bitnami/apache2/conf/server.crt.old /opt/bitnami/apache2/conf/server.crt
sudo mv /opt/bitnami/apache2/conf/server.key.old /opt/bitnami/apache2/conf/server.key

I checked that the certificates of your site expired yesterday so you will need to renew them, please run this command

sudo /opt/bitnami/ctlscript.sh stop
sudo lego --email="EMAIL-ADDRESS" --domains="DOMAIN" --path="/etc/lego" renew
sudo /opt/bitnami/ctlscript.sh start

Please share the output of these commands with us and substitute email-address and domain with valid information. More information here

Your site should work properly now with the new certificates. In case you see any error during the process, please share it with us and we will help you with the Apache's configuration.

Happy to help!

Was my answer helpful? Click on

will.seymour2010 2018-08-30 01:06:23 UTC #3

It didn't work following your instructions. Here is what it says to me:

will_seymour2010@smcdsites-vm:/tmp$ sudo mv /opt/bitnami/apache2/conf/server.crt.old /opt/bitnami/apache2/conf/server.crt
will_seymour2010@smcdsites-vm:/tmp$ sudo mv /opt/bitnami/apache2/conf/server.key.old /opt/bitnami/apache2/conf/server.key
will_seymour2010@smcdsites-vm:/tmp$ sudo lego --email="contact@smcreativedesign.com" --domains="smcreativedesign.com" --path="/etc/lego" renew
2018/08/30 01:04:14 [INFO][smcreativedesign.com] acme: Trying renewal with 2158 hours remaining
2018/08/30 01:04:14 [INFO][smcreativedesign.com] acme: Obtaining bundled SAN certificate
2018/08/30 01:04:15 [INFO][smcreativedesign.com] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/821H2ygd-XNRAvvqtanGjAwgM0S7d_t77LRaCkii4gY
2018/08/30 01:04:15 [INFO][smcreativedesign.com] acme: Authorization already valid; skipping challenge
2018/08/30 01:04:15 [INFO][smcreativedesign.com] acme: Validations succeeded; requesting certificates
2018/08/30 01:04:16 [INFO][smcreativedesign.com] Server responded with a certificate.
will_seymour2010@smcdsites-vm:/tmp$ sudo /opt/bitnami/ctlscript.sh start
/opt/bitnami/mysql/scripts/ctl.sh : mysql started at port 3306
/opt/bitnami/php/scripts/ctl.sh : php-fpm started
AH00526: Syntax error on line 46 of /opt/bitnami/apache2/conf/bitnami/bitnami.conf:
SSLCertificateFile: file '/opt/bitnami/apache2/conf/server.crt' does not exist or is empty
apache config test fails, aborting

will_seymour2010@smcdsites-vm:/tmp$

What next??

will.seymour2010 2018-08-30 03:44:43 UTC #4

Now I am getting:
will_seymour2010@smcdsites-vm:~$ sudo /opt/bitnami/ctlscript.sh start apache
Syntax OK
(98)Address already in use: AH00072: make_sock: could not bind to address 0.0.0.0:80
no listening sockets available, shutting down
AH00015: Unable to open logs
/opt/bitnami/apache2/scripts/ctl.sh : httpd could not be started
Monitored apache

jota 2018-08-30 08:34:58 UTC #5

Hi @will.seymour2010,

It seems that Lego tool returned a valid certificate so Apache should use it. Could you please share with us the output of the following commands

sudo ls -la /opt/bitnami/apache2/conf/
sudo ls -la /etc/lego/certificates/
sudo cat /opt/bitnami/apache2/conf/bitnami/bitnami.conf

Did you install Apache using the system packages in the instance? This post will help you to check that

will.seymour2010 2018-08-31 13:56:14 UTC #6

Hi there.
The commands returned the following:

will_seymour2010@smcdsites-vm:~$ sudo ls -la /opt/bitnami/apache2/conf/
total 292
drwxr-xr-x  5 bitnami root   4096 Aug 30 03:25 .
drwxr-xr-x 14 root    root   4096 Nov 16  2017 ..
drwxr-xr-x  2 bitnami root   4096 Dec  6  2017 bitnami
-rw-r--r--  1 root    root   1086 Aug 30 03:24 cert.csr
-rw-r--r--  1 bitnami root    289 Nov 16  2017 deflate.conf
drwxr-xr-x  2 bitnami root   4096 Nov 16  2017 extra
-rw-r--r--  1 bitnami root  20092 Nov 16  2017 httpd.conf
-rw-r--r--  1 bitnami root  13077 Nov  8  2017 magic
-rw-r--r--  1 bitnami root  60847 Nov  8  2017 mime.types
-rw-r--r--  1 bitnami root   7413 Aug  2  2012 modsecurity.conf
drwxr-xr-x  3 bitnami root   4096 Nov 16  2017 original
-rw-r--r--  1 bitnami root  17301 Nov 16  2017 pagespeed.conf
-rw-r--r--  1 bitnami root 120982 Nov 16  2017 pagespeed_libraries.conf
-rw-r--r--  1 bitnami root    199 Nov 16  2017 php-fpm-apache.conf
-rw-r--r--  1 bitnami root   1834 Nov 16  2017 privkey.pem
-rw-r--r--  1 root    root   1310 Aug 30 03:25 server.crt
-rw-r--r--  1 root    root   1679 Aug 30 03:24 server.key
-rw-r--r--  1 bitnami root    203 Nov 16  2017 ssi.conf
will_seymour2010@smcdsites-vm:~$ 
will_seymour2010@smcdsites-vm:~$ sudo ls -la /etc/lego/certificates/
total 40
drwx------ 2 root root 4096 May 17 10:39 .
drwx------ 4 root root 4096 May 17 01:10 ..
-rw------- 1 root root 3815 Aug 30 01:04 smcreativedesign.com.crt
-rw------- 1 root root 1647 May 17 10:43 smcreativedesign.com.issuer.crt
-rw------- 1 root root  241 Aug 30 01:04 smcreativedesign.com.json
-rw------- 1 root root 1675 Aug 30 01:04 smcreativedesign.com.key
-rw------- 1 root root 3798 May 17 10:39 virtuoso.me.uk.crt
-rw------- 1 root root 1647 May 17 10:39 virtuoso.me.uk.issuer.crt
-rw------- 1 root root  225 May 17 10:39 virtuoso.me.uk.json
-rw------- 1 root root 1675 May 17 10:39 virtuoso.me.uk.key
will_seymour2010@smcdsites-vm:~$ 
will_seymour2010@smcdsites-vm:~$ sudo cat /opt/bitnami/apache2/conf/bitnami/bitnami.conf
# Default Virtual Host configuration.

<IfVersion < 2.3 >
  NameVirtualHost *:80
  NameVirtualHost *:443
</IfVersion>

<VirtualHost _default_:80>
  DocumentRoot "/opt/bitnami/apache2/htdocs"
  <Directory "/opt/bitnami/apache2/htdocs">
    Options Indexes FollowSymLinks
    AllowOverride All
    <IfVersion < 2.3 >
      Order allow,deny                          
      Allow from all
    </IfVersion>
    <IfVersion >= 2.3 >
      Require all granted
    </IfVersion>
  </Directory>

  # Error Documents
  ErrorDocument 503 /503.html

  # Bitnami applications installed with a prefix URL (default)
  Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>

# Default SSL Virtual Host configuration.
-rw------- 1 root root 3798 May 17 10:39 virtuoso.me.uk.crt
<IfModule !ssl_module>
  LoadModule ssl_module modules/mod_ssl.so
</IfModule>
Listen 443
SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH !aNULL !eNULL !LOW !3DES !MD5 !
EXP !PSK !SRP !DSS !EDH !RC4"
SSLPassPhraseDialog  builtin
SSLSessionCache "shmcb:/opt/bitnami/apache2/logs/ssl_scache(512000)"
SSLSessionCacheTimeout  300
<VirtualHost _default_:443>
  DocumentRoot "/opt/bitnami/apache2/htdocs"
  SSLEngine on
SSLCertificateFile "/opt/bitnami/apache2/conf/server.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/server.key"
            
  <Directory "/opt/bitnami/apache2/htdocs">
    Options Indexes FollowSymLinks
    AllowOverride All
    <IfVersion < 2.3 >
      Order allow,deny                          
      Allow from all
    </IfVersion>
    <IfVersion >= 2.3 >
      Require all granted
    </IfVersion>
  </Directory>
  # Error Documents
  ErrorDocument 503 /503.html
        
  # Bitnami applications installed with a prefix URL (default)
  Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>
# Bitnami applications that uses virtual host configuration
Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-vhosts.conf"
# Status
ExtendedStatus on
<VirtualHost _default_:80>
ServerName local-stackdriver-agent.stackdriver.com
<Location /server-status>
  SetHandler server-status
  Order deny,allow
  Deny from all
  Allow from 127.0.0.1
</Location>
</VirtualHost>
will_seymour2010@smcdsites-vm:~$

jota 2018-08-31 16:46:02 UTC #7

Hi @will.seymour2010,

Let's configure the SSL certificates in the Bitnami's Apache. From here, run these commands

sudo mv /opt/bitnami/apache2/conf/server.crt /opt/bitnami/apache2/conf/server.crt.old
sudo mv /opt/bitnami/apache2/conf/server.key /opt/bitnami/apache2/conf/server.key.old
sudo mv /opt/bitnami/apache2/conf/server.csr /opt/bitnami/apache2/conf/server.csr.old
sudo ln -s /etc/lego/certificates/smcreativedesign.com.key /opt/bitnami/apache2/conf/server.key
sudo ln -s /etc/lego/certificates/smcreativedesign.com.crt /opt/bitnami/apache2/conf/server.crt
sudo chown root:root /opt/bitnami/apache2/conf/server*
sudo chmod 600 /opt/bitnami/apache2/conf/server*

Then, get the list of running services and check if there is any apache2 service

sudo service --status-all

If apache2 is in that list, please run the commands of this post

If apache2 is not there, please share the entire output of that command and the output of this command

sudo netstat -plnt

Thanks

will.seymour2010 2018-08-31 18:08:15 UTC #8

Hi there, thanks for your reply.

I followed your instructions to configure the certificates. 1 error:
will_seymour2010@smcdsites-vm:~$ sudo mv /opt/bitnami/apache2/conf/server.csr /opt/bitnami/apache2/conf/server.csr.old
mv: cannot stat ‘/opt/bitnami/apache2/conf/server.csr’: No such file or directory

and then apache was showing when i ran
sudo service --status-all

so I ran the following:

will_seymour2010@smcdsites-vm:~$ sudo service apache2 stop
will_seymour2010@smcdsites-vm:~$ sudo apt-get remove apache2 --purge
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer required:
apache2-bin apache2-data apache2-utils augeas-lenses certbot libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap libaugeas0 liblua5.1-0 libuuid-perl
python-acme python-augeas python-certbot python-configargparse python-configobj python-dnspython python-funcsigs python-mock python-parsedatetime python-pbr
python-pyicu python-rfc3339 python-tz python-zope.component python-zope.event python-zope.interface
Use 'apt-get autoremove' to remove them.
The following packages will be REMOVED:
apache2* python-certbot-apache*
0 upgraded, 0 newly installed, 2 to remove and 23 not upgraded.
After this operation, 730 kB disk space will be freed.
Do you want to continue? [Y/n] y
(Reading database ... 38327 files and directories currently installed.)
Removing python-certbot-apache (0.10.2-1~bpo8+1) ...
Removing apache2 (2.4.10-10+deb8u12) ...
Purging configuration files for apache2 (2.4.10-10+deb8u12) ...
dpkg: warning: while removing apache2, directory '/var/www/html' not empty so not removed
Processing triggers for man-db (2.7.0.2-5) ...
will_seymour2010@smcdsites-vm:~$ sudo service --status-all
[ + ] acpid
[ + ] atd
[ + ] bitnami
[ - ] bootlogs
[ - ] bootmisc.sh
[ - ] checkfs.sh
[ - ] checkroot-bootclean.sh
[ - ] checkroot.sh
[ + ] cron
[ - ] generate-ssh-hostkeys
[ + ] haveged
[ - ] hostname.sh
[ - ] hwclock.sh
[ - ] killprocs
[ + ] kmod
[ - ] motd
[ - ] mountall-bootclean.sh
[ - ] mountall.sh
[ - ] mountdevsubfs.sh
[ - ] mountkernfs.sh
[ - ] mountnfs-bootclean.sh
[ - ] mountnfs.sh
[ + ] networking
[ + ] ntp
[ + ] procps
[ + ] rc.local
[ - ] rmnologin
[ - ] rsync
[ + ] rsyslog
[ - ] screen-cleanup
[ - ] sendsigs
[ + ] ssh
[ + ] stackdriver-agent
[ - ] stackdriver-extractor
[ - ] sudo
[ + ] udev
[ + ] udev-finish
[ - ] umountfs
[ - ] umountnfs.sh
[ - ] umountroot
[ - ] unattended-upgrades
[ + ] urandom
[ - ] uuidd
[ + ] vsftpd
[ - ] x11-common
will_seymour2010@smcdsites-vm:~$ sudo /opt/bitnami/ctlscript.sh start apache
Syntax OK
(98)Address already in use: AH00072: make_sock: could not bind to address 0.0.0.0:80
no listening sockets available, shutting down
AH00015: Unable to open logs
/opt/bitnami/apache2/scripts/ctl.sh : httpd could not be started
Monitored apache

will.seymour2010 2018-08-31 18:12:01 UTC #9

And then after all that:

will_seymour2010@smcdsites-vm:~$ sudo netstat -ntlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:21 0.0.0.0:* LISTEN 363/vsftpd
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 13098/sshd
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN 8594/mysqld.bin
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 6604/apache2
tcp6 0 0 :::22 :::* LISTEN 13098/sshd
will_seymour2010@smcdsites-vm:~$

will.seymour2010 2018-09-01 13:42:01 UTC #10

Can you help? I'm losing so much each day. Google have referred me to you again, and other engineers have said all they are able to do is post in this forum??

will.seymour2010 2018-09-02 02:52:49 UTC #11

OK so I just did a load of research and taught myself a lot and seem to have fixed some immediate problems.
I found that certbot installed apache, which had something "-k start" when i ran
/usr/sbin$ sudo ps aux | grep apache
www-data 6604 0.0 0.0 430416 552 ? Sl Aug30 1:45 /usr/sbin/apache2 -k start

I deleted that file , but it still showed. I removed all of certbot but it was still showing.
It didn't go away when using pkill, or pkill -f. But it did go away with
/usr/sbin$ sudo pkill -9 apache2

so then

/usr/sbin$ sudo ps aux | grep apache
will_se+ 25073 0.0 0.3 12728 2140 pts/0 S+ 02:34 0:00 grep apache

and then
sudo /opt/bitnami/ctlscript.sh start
/opt/bitnami/mysql/scripts/ctl.sh : mysql started at port 3306
/opt/bitnami/php/scripts/ctl.sh : php-fpm started
Syntax OK
/opt/bitnami/apache2/scripts/ctl.sh : httpd started at port 80

And some things are working now.

I have some questions:
1. The site seems to be working at https despite not even finishing the SSL setup. Why is that?
2. How can I now force https on the subdomains and map them?
3. Do I need certbot?
4. Without certbot, how can I set up https on newly added subdomains without having to use the console?

jota 2018-09-03 07:52:24 UTC #12

Hi @will.seymour2010,

Just for the record:

As you saw, there was an apache2 process in the system and the Bitnami's one couldn't start. I'm glad to hear that you managed to solve this issue.

I wanted to access your website to get more information about it but I can't access it, did you make any other change in the instance lately? Did the public IP of the instance change?

https://www.whatsmydns.net/#A/smcreativedesign.com

You can force the HTTPS redirection by following this guide.

https://docs.bitnami.com/google/components/apache/#how-to-force-https-redirection-with-apache

Once you configure everything, we have a Support Tool that will gather relevant information for us to review your configuration. Could you please download and execute it on the machine where the stack is running by following the steps described in the guide below?

How to Run the Bitnami Support Tool

Please note that you need to paste the code outputted by the tool in your reply.

No, you don't need it. You can use lego to renew the certificates in the instance

https://docs.bitnami.com/google/how-to/generate-install-lets-encrypt-ssl/

You first need to generate the certificates using the command line and configure Apache (if needed) then you can configure the instance to auto-renew the certificates. Check the last section of the page I shared above.

system 2018-09-17 07:52:23 UTC #13

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

jota 2018-09-19 07:35:22 UTC #14

will.seymour2010 2018-09-19 07:35:37 UTC #15

Keywords: WordPress Multisite - Google Cloud Platform - Technical issue - Secure Connections (SSL/HTTPS)
bnsupport ID: 8ce4e802-9f02-0f89-7e89-73bb14a91114
Description:
I had a huge amount of trouble before, however managed to solve the issue on my own without much help from Bitnami.
The guide to install SSL meant that it only went onto the primary site of my multisite Wordpress install, so the other sites all had security warnings.
I say had as none of them are working now! Again I should say.

I have now attempted to follow the guide again to install multiple domain certificates, however this has failed again.

This is what happened.
(nb: Prior to this I had already stopped ctlscript.sh)

will_seymour2010@smcdsites-vm:~$ sudo /opt/bitnami/ctlscript.sh stop
Syntax OK
/opt/bitnami/apache2/scripts/ctl.sh : apache not running
/opt/bitnami/php/scripts/ctl.sh : php-fpm not running
/opt/bitnami/mysql/scripts/ctl.sh : mysql not running
will_seymour2010@smcdsites-vm:~$ sudo lego --email="contact@smcreativedesign.com" --domains="virtuoso.me.uk" --domains="smcreativedesign.com" --path="/etc/lego" run
2018/09/19 00:39:03 [INFO][virtuoso.me.uk, smcreativedesign.com] acme: Obtaining bundled SAN certificate
2018/09/19 00:39:04 [INFO][smcreativedesign.com] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/821H2ygd-XNRAvvqtanGjAwgM0S7d_t77LRaCkii4gY
2018/09/19 00:39:04 [INFO][virtuoso.me.uk] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/CgLVXkNppDlakl4bHPLOkJ07NxbqZRn7uZKXap85PAs
2018/09/19 00:39:04 [INFO][smcreativedesign.com] acme: Authorization already valid; skipping challenge
2018/09/19 00:39:04 [INFO][virtuoso.me.uk] acme: Authorization already valid; skipping challenge
2018/09/19 00:39:04 [INFO][virtuoso.me.uk, smcreativedesign.com] acme: Validations succeeded; requesting certificates
2018/09/19 00:39:05 [INFO][virtuoso.me.uk] Server responded with a certificate.
will_seymour2010@smcdsites-vm:~$ sudo mv /opt/bitnami/apache2/conf/server.crt /opt/bitnami/apache2/conf/server.crt.old
will_seymour2010@smcdsites-vm:~$ sudo mv /opt/bitnami/apache2/conf/server.key /opt/bitnami/apache2/conf/server.key.old
will_seymour2010@smcdsites-vm:~$ sudo mv /opt/bitnami/apache2/conf/server.csr /opt/bitnami/apache2/conf/server.csr.old
mv: cannot stat ‘/opt/bitnami/apache2/conf/server.csr’: No such file or directory
will_seymour2010@smcdsites-vm:~$ sudo ln -s /etc/lego/certificates/smcreativedesign.key /opt/bitnami/apache2/conf/server.key
will_seymour2010@smcdsites-vm:~$ sudo ln -s /etc/lego/certificates/virtuoso.me.uk.key /opt/bitnami/apache2/conf/server.key
ln: failed to create symbolic link ‘/opt/bitnami/apache2/conf/server.key’: File exists
will_seymour2010@smcdsites-vm:~$ sudo ln -s /etc/lego/certificates/virtuoso.me.uk.crt /opt/bitnami/apache2/conf/server.crt
will_seymour2010@smcdsites-vm:~$ sudo chown root:root /opt/bitnami/apache2/conf/server*
chown: cannot dereference ‘/opt/bitnami/apache2/conf/server.key’: No such file or directory
will_seymour2010@smcdsites-vm:~$ will_seymour2010@smcdsites-vm:~$ sudo ln -s /etc/lego/certificates/smcreativedesign.key /opt/bitnami/apache2/conf/server.key
-bash: will_seymour2010@smcdsites-vm:~$: command not found
will_seymour2010@smcdsites-vm:~$ sudo ln -s /etc/lego/certificates/smcreativedesign.key /opt/bitnami/apache2/conf/server.key
ln: failed to create symbolic link ‘/opt/bitnami/apache2/conf/server.key’: File exists
will_seymour2010@smcdsites-vm:~$ sudo chown root:root /opt/bitnami/apache2/conf/server*
chown: cannot dereference ‘/opt/bitnami/apache2/conf/server.key’: No such file or directory
will_seymour2010@smcdsites-vm:~$ sudo chmod 600 /opt/bitnami/apache2/conf/server*
chmod: cannot operate on dangling symlink ‘/opt/bitnami/apache2/conf/server.key’
will_seymour2010@smcdsites-vm:~$ sudo /opt/bitnami/ctlscript.sh start
/opt/bitnami/mysql/scripts/ctl.sh : mysql started at port 3306
/opt/bitnami/php/scripts/ctl.sh : php-fpm started
AH00526: Syntax error on line 50 of /opt/bitnami/apache2/conf/bitnami/bitnami.conf:
SSLCertificateKeyFile: file '/opt/bitnami/apache2/conf/server.key' does not exist or is empty
apache config test fails, aborting
will_seymour2010@smcdsites-vm:~$

jota 2018-09-19 07:41:04 UTC #16

Hi @will.seymour2010,

It seems you generated the certificate properly.

This command is wrong, you need to use the domain you set first in the lego command, please run these ones:

sudo ln -sf /etc/lego/certificates/virtuoso.me.uk.key /opt/bitnami/apache2/conf/server.key
sudo ln -sf /etc/lego/certificates/virtuoso.me.uk.crt /opt/bitnami/apache2/conf/server.crt
sudo chown root:root /opt/bitnami/apache2/conf/server*
sudo chmod 600 /opt/bitnami/apache2/conf/server*
sudo /opt/bitnami/ctlscript.sh restart apache

Those commands will solve this error message. In case Apache doesn't start, please share with us the output of these commands

sudo ls -la /opt/bitnami/apache2/conf
sudo ls -la /etc/lego/certificates

Thanks

Bitnami provides free all-in-one installers, virtual machines and cloud images for popular open source applications. Get them now!