Letsencrypt certificate was expired one day before and i am trying to renew it but it was not

technical2 2020-02-13 11:25:45 UTC #1

Keywords: Mautic - AWS - Technical issue - Secure Connections (SSL/HTTPS)
Description:
Hi, My letsencrypt certificate was expired one day before and i am trying to renew it but it was showing expired on my site.
https://marketing.funding4education.co.uk/s/login

i followed these steps https://docs.bitnami.com/aws/how-to/generate-install-lets-encrypt-ssl/

i want to update it on subdomain my primary domain has another certificate. so, please help me to come out of this

vikram-bitnami 2020-02-14 05:10:46 UTC #2

Hi @technical2

We have a Support Tool that will gather relevant information for us to analyze your configuration and logs. Could you please execute it on the machine where the stack is running by following the steps described in the guide below?

How to Run the Bitnami Support Tool

Please note that you need to paste the code ID that is shown at the end.

Regards,

Vikram

technical2 2020-02-14 06:20:05 UTC #3

Hi, run the tool now i get ssl health check file

======================================
SSL CHECKS
======================================
Starting checks with these parameters:
  - Apache Root: "/opt/bitnami/apache2"
  - Apache Root configuration: "/opt/bitnami/apache2/conf/httpd.conf"
  - Hostname: "ip-172-31-12-167"
  - Port: 443
======================================
-- Check: Active SSL Certificates in Apache Configuration --
Ocurrence #1
Apache File: "/opt/bitnami/apps/mautic/conf/httpd-vhosts.conf"
Certificate file: "/opt/bitnami/apps/mautic/conf/certs/marketing.funding4education.co.uk.crt"
Key file: "/opt/bitnami/apps/mautic/conf/certs/marketing.funding4education.co.uk.key"
Domain name: "marketing.funding4education.co.uk"
Certificate and key match: true
Ocurrence #2
Apache File: "/opt/bitnami/apps/wordpress/conf/httpd-vhosts.conf"
Certificate file: "/etc/lego/certificates/funding4education.co.uk.crt"
Key file: "/etc/lego/certificates/funding4education.co.uk.key"
Domain name: "funding4education.co.uk"
Certificate and key match: true
Ocurrence #3
Apache File: "/opt/bitnami/apps/wordpress/conf/httpd-vhosts.conf"
Certificate file: "/etc/lego/certificates/funding4education.co.uk.crt"
Key file: "/etc/lego/certificates/funding4education.co.uk.key"
Domain name: "funding4education.co.uk"
Certificate and key match: true
Ocurrence #4
Apache File: "/opt/bitnami/apache2/conf/bitnami/bitnami.conf"
Certificate file: "/opt/bitnami/apache2/conf/server.crt"
Key file: "/opt/bitnami/apache2/conf/server.key"
Domain name: "www.example.com"
Certificate and key match: true
-- End of check --

-- Check: HTTPS Connection to web server --
Hostname: "ip-172-31-12-167"
Port: 443
Server certificate domain: "www.example.com"
-- End of check --

SSL Checks finishedflag provided but not defined: -smtp_host
Usage of ./ssl-checker:
  -apache-conf string
    	Path to the root Apache configuration file (default "/opt/bitnami/apache2/conf/httpd.conf")
  -apache-root string
    	Root of Apache installation (default "/opt/bitnami/apache2/")
  -hostname string
    	Web application hostname
  -port int
    	Web application port (default 443)
  -version
    	Show current version======================================
SSL CHECKS
======================================
Starting checks with these parameters:
  - Apache Root: "/opt/bitnami/apache2"
  - Apache Root configuration: "/opt/bitnami/apache2/conf/httpd.conf"
  - Hostname: "ip-172-31-12-167"
  - Port: 443
======================================
-- Check: Active SSL Certificates in Apache Configuration --
Ocurrence #1
Apache File: "/opt/bitnami/apache2/conf/bitnami/bitnami.conf"
Certificate file: "/opt/bitnami/apache2/conf/server.crt"
Key file: "/opt/bitnami/apache2/conf/server.key"
Domain name: "www.example.com"
Certificate and key match: true
Ocurrence #2
Apache File: "/opt/bitnami/apps/mautic/conf/httpd-vhosts.conf"
Certificate file: "/opt/bitnami/apps/mautic/conf/certs/marketing.funding4education.co.uk.crt"
Key file: "/opt/bitnami/apps/mautic/conf/certs/marketing.funding4education.co.uk.key"
Domain name: "marketing.funding4education.co.uk"
Certificate and key match: true
Ocurrence #3
Apache File: "/opt/bitnami/apps/wordpress/conf/httpd-vhosts.conf"
Certificate file: "/etc/lego/certificates/funding4education.co.uk.crt"
Key file: "/etc/lego/certificates/funding4education.co.uk.key"
Domain name: "funding4education.co.uk"
Certificate and key match: true
Ocurrence #4
Apache File: "/opt/bitnami/apps/wordpress/conf/httpd-vhosts.conf"
Certificate file: "/etc/lego/certificates/funding4education.co.uk.crt"
Key file: "/etc/lego/certificates/funding4education.co.uk.key"
Domain name: "funding4education.co.uk"
Certificate and key match: true
-- End of check --

-- Check: HTTPS Connection to web server --
Hostname: "ip-172-31-12-167"
Port: 443
Server certificate domain: "www.example.com"
-- End of check --

SSL Checks finishedflag provided but not defined: -smtp_host
Usage of ./ssl-checker:
  -apache-conf string
    	Path to the root Apache configuration file (default "/opt/bitnami/apache2/conf/httpd.conf")
  -apache-root string
    	Root of Apache installation (default "/opt/bitnami/apache2/")
  -hostname string
    	Web application hostname
  -port int
    	Web application port (default 443)
  -version
    	Show current version

technical2 2020-02-14 06:22:05 UTC #4

I talked to amazon they inspect system and sharing these detail
Further I have inspected the instance console logs and found following errors relating to your web application.

[   25.572019] bitnami[1046]: AH00526: Syntax error on line 10 of /opt/bitnami/apps/mautic/conf/httpd-app.conf:
[   25.578104] bitnami[1046]: Unknown parameter: https://funding4education.co.uk/ 
[   25.591004] bitnami[1046]: apache config test fails, aborting
	--- More lines skipped ---
[  138.562668] bitnami[1046]: Starting gonit daemon
[FAILED] Failed to start LSB: bitnami init script.
See 'systemctl status bitnami.service' for details.

jota 2020-02-14 08:10:53 UTC #5

Hi @technical2,

Didn't the Bitnami support tool return any code at the end?

It seems you have an error in that file, can you share the whole file with us?

cat /opt/bitnami/apps/mautic/conf/httpd-app.conf

technical2 2020-02-14 08:14:13 UTC #6

This is last few line of support tool
Do you agree on adding the information to the archive? [y/N]: y

\
Error: There has been an error.
No origin file found that matched /tmp/apache.permissions

technical2 2020-02-14 08:15:43 UTC #7

Here it is the file code:

<IfDefine USE_PHP_FPM>
    <Proxy "unix:/opt/bitnami/php/var/run/mautic.sock|fcgi://mautic-fpm" timeout=300>
    </Proxy>
</IfDefine>

<Directory "/opt/bitnami/apps/mautic/htdocs">

    Options +MultiViews
    AllowOverride None
    <IfVersion < 2.3 >
        Order allow,deny
        Allow from all
    </IfVersion>
    <IfVersion >= 2.3>
        Require all granted
    </IfVersion>
    
    
    <IfModule php7_module>
            php_flag opcache.enable Off
php_value memory_limit 256M

    </IfModule>

    <IfDefine USE_PHP_FPM>
       <FilesMatch \.php$>
         SetHandler "proxy:fcgi://mautic-fpm"
       </FilesMatch>
    </IfDefine>

    Include "/opt/bitnami/apps/mautic/conf/banner.conf"
</Directory>

Include "/opt/bitnami/apps/mautic/conf/htaccess.conf"

jota 2020-02-14 10:08:42 UTC #8

Hi @technical2,

The line the log showed is not there so you shouldn't get any error now when restarting Apache. Can you confirm it?

sudo /opt/bitnami/ctlscript.sh restart apache

Regarding the certificates, I just accessed your site and the certificate is completely valid now till May 13th. If you still have problems with the certificates, please share this info

sudo crontab -l
sudo crontab -l -u bitnami
ls -la /opt/bitnami/apache2/conf/
cat /opt/bitnami/apache2/conf/bitnami/bitnami.conf

technical2 2020-02-14 10:20:31 UTC #9

Please open this link
https://marketing.funding4education.co.uk/s/login

technical2 2020-02-14 10:21:31 UTC #10

# Default Virtual Host configuration.

<IfVersion < 2.3 >
  NameVirtualHost *:80
  NameVirtualHost *:443
</IfVersion>

<VirtualHost _default_:80>
  DocumentRoot "/opt/bitnami/apache2/htdocs"
  <Directory "/opt/bitnami/apache2/htdocs">
    Options Indexes FollowSymLinks
    AllowOverride All
    <IfVersion < 2.3 >
      Order allow,deny
      Allow from all
    </IfVersion>
    <IfVersion >= 2.3 >
      Require all granted
    </IfVersion>
  </Directory>

  # Error Documents
  ErrorDocument 503 /503.html

  # Bitnami applications installed with a prefix URL (default)
  Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>

# Default SSL Virtual Host configuration.

<IfModule !ssl_module>
  LoadModule ssl_module modules/mod_ssl.so
</IfModule>

Listen 443
SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !EDH !RC4"
SSLPassPhraseDialog  builtin
SSLSessionCache "shmcb:/opt/bitnami/apache2/logs/ssl_scache(512000)"
SSLSessionCacheTimeout  300

<VirtualHost _default_:443>
  DocumentRoot "/opt/bitnami/apache2/htdocs"
  SSLEngine on
SSLCertificateFile "/opt/bitnami/apache2/conf/server.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/server.key"

  <Directory "/opt/bitnami/apache2/htdocs">
    Options Indexes FollowSymLinks
    AllowOverride All
    <IfVersion < 2.3 >
      Order allow,deny
      Allow from all
    </IfVersion>
    <IfVersion >= 2.3 >
      Require all granted
    </IfVersion>
  </Directory>

  # Error Documents
  ErrorDocument 503 /503.html

  # Bitnami applications installed with a prefix URL (default)
  Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>

# Bitnami applications that uses virtual host configuration
Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-vhosts.conf"

jota 2020-02-14 10:27:54 UTC #11

Ok @technical2,

What about the rest of commands?

sudo crontab -l
sudo crontab -l -u bitnami
ls -la /opt/bitnami/apache2/conf/
cat /opt/bitnami/apache2/conf/bitnami/bitnami.conf
cat /opt/bitnami/apache2/conf/bitnami/bitnami-apps-vhosts.conf

technical2 2020-02-14 10:52:29 UTC #12

# Default Virtual Host configuration.

<IfVersion < 2.3 >
  NameVirtualHost *:80
  NameVirtualHost *:443
</IfVersion>

<VirtualHost _default_:80>
  DocumentRoot "/opt/bitnami/apache2/htdocs"
  <Directory "/opt/bitnami/apache2/htdocs">
    Options Indexes FollowSymLinks
    AllowOverride All
    <IfVersion < 2.3 >
      Order allow,deny
      Allow from all
    </IfVersion>
    <IfVersion >= 2.3 >
      Require all granted
    </IfVersion>
  </Directory>

  # Error Documents
  ErrorDocument 503 /503.html

  # Bitnami applications installed with a prefix URL (default)
  Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>

# Default SSL Virtual Host configuration.

<IfModule !ssl_module>
  LoadModule ssl_module modules/mod_ssl.so
</IfModule>

Listen 443
SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !EDH !RC4"
SSLPassPhraseDialog  builtin
SSLSessionCache "shmcb:/opt/bitnami/apache2/logs/ssl_scache(512000)"
SSLSessionCacheTimeout  300

<VirtualHost _default_:443>
  DocumentRoot "/opt/bitnami/apache2/htdocs"
  SSLEngine on
SSLCertificateFile "/opt/bitnami/apache2/conf/server.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/server.key"

  <Directory "/opt/bitnami/apache2/htdocs">
    Options Indexes FollowSymLinks
    AllowOverride All
    <IfVersion < 2.3 >
      Order allow,deny
      Allow from all
    </IfVersion>
    <IfVersion >= 2.3 >
      Require all granted
    </IfVersion>
  </Directory>

  # Error Documents
  ErrorDocument 503 /503.html

  # Bitnami applications installed with a prefix URL (default)
  Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>

# Bitnami applications that uses virtual host configuration
Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-vhosts.conf"

technical2 2020-02-15 04:39:14 UTC #13

Hey,Please update me because my site is stuck.

technical2 2020-02-17 04:23:47 UTC #14

Hey,Please update me.

technical2 2020-02-17 04:29:35 UTC #15

Hi, Contact amazon support team also and they replied me like below :
"Yes, while I was accessing the website 'https://marketing.funding4education.co.uk/ ' I got the mentioned error. I think yesterday's problem was due to syntax errors in Bitnami HTTPD Configuration, please correct me if I am wrong.

As per the screenshot provided by you, the SSL warning is being raised by Kaspersky Antivirus. Please refer[1]. When I try to access the website today, I am able to see the 'Mautic Login Screene', but with a warning "Your connection to this site is not secure". I am attaching a screenshot for your reference.

As you have contacted Bitnami Support, I think you can resolve the SSL issue. In case if you are still not able to resolve the problem, I will try to help you on a best effort basis."

So, there is ssl issue please confirm this and provide solution for that.

jota 2020-02-17 09:41:15 UTC #16

Hi @technical2,

I can't help you if you don't share the output of all these commands, you only shared the content of the bitnami.conf file.

sudo crontab -l
sudo crontab -l -u bitnami
ls -la /opt/bitnami/apache2/conf/
cat /opt/bitnami/apache2/conf/bitnami/bitnami.conf
cat /opt/bitnami/apache2/conf/bitnami/bitnami-apps-vhosts.conf

You can also try to update the bitnami support tool and run it again and share the code with us

cd /tmp
wget -O bnsupport-linux-x64.run https://downloads.bitnami.com/files/bnsupport/latest/bnsupport-linux-x64.run
sudo mkdir /opt/bitnami/bnsupport
sudo mv bnsupport-linux-x64.run /opt/bitnami/bnsupport/
sudo chmod +x /opt/bitnami/bnsupport/bnsupport-linux-x64.run
sudo ln -s /opt/bitnami/bnsupport/bnsupport-linux-x64.run /opt/bitnami/bnsupport-tool
sudo /opt/bitnami/bnsupport-tool

Thanks

technical2 2020-02-17 10:31:31 UTC #17

Hey, i already shared info. of above commands.

# Default Virtual Host configuration.

<IfVersion < 2.3 >
  NameVirtualHost *:80
  NameVirtualHost *:443
</IfVersion>

<VirtualHost _default_:80>
  DocumentRoot "/opt/bitnami/apache2/htdocs"
  <Directory "/opt/bitnami/apache2/htdocs">
    Options Indexes FollowSymLinks
    AllowOverride All
    <IfVersion < 2.3 >
      Order allow,deny
      Allow from all
    </IfVersion>
    <IfVersion >= 2.3 >
      Require all granted
    </IfVersion>
  </Directory>

  # Error Documents
  ErrorDocument 503 /503.html

  # Bitnami applications installed with a prefix URL (default)
  Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>

# Default SSL Virtual Host configuration.

<IfModule !ssl_module>
  LoadModule ssl_module modules/mod_ssl.so
</IfModule>

Listen 443
SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !EDH !RC4"
SSLPassPhraseDialog  builtin
SSLSessionCache "shmcb:/opt/bitnami/apache2/logs/ssl_scache(512000)"
SSLSessionCacheTimeout  300

<VirtualHost _default_:443>
  DocumentRoot "/opt/bitnami/apache2/htdocs"
  SSLEngine on
SSLCertificateFile "/opt/bitnami/apache2/conf/server.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/server.key"

  <Directory "/opt/bitnami/apache2/htdocs">
    Options Indexes FollowSymLinks
    AllowOverride All
    <IfVersion < 2.3 >
      Order allow,deny
      Allow from all
    </IfVersion>
    <IfVersion >= 2.3 >
      Require all granted
    </IfVersion>
  </Directory>

  # Error Documents
  ErrorDocument 503 /503.html

  # Bitnami applications installed with a prefix URL (default)
  Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>

# Bitnami applications that uses virtual host configuration
Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-vhosts.conf"

technical2 2020-02-17 10:39:59 UTC #18

Following is code :bd612753-0f24-f2ee-fb2d-9821f500f780

technical2 2020-02-17 13:46:42 UTC #19

I hope you get the code. If you can't then i share with you again :
bd612753-0f24-f2ee-fb2d-9821f500f780

technical2 2020-02-18 07:47:26 UTC #20

Its solved out by aws support.
thanks

Bitnami provides free all-in-one installers, virtual machines and cloud images for popular open source applications. Get them now!