Trying to get SSL certificate, using stock command

kevin6 2019-08-23 08:41:51 UTC #1

Keywords: WordPress + NGINX + SSL - AWS - Technical issue - Secure Connections (SSL/HTTPS)
Description:
sudo /opt/bitnami/letsencrypt/scripts/generate-certificate.sh -m kevin@x.com -d x.com

Error: Something went wrong when running the following command:
$ "$LEGO_BIN" --path "/opt/bitnami/letsencrypt" --tls --email="${email}" ${doma

kevin6 2019-08-23 08:46:18 UTC #2

Also, when viewed through ftp, get this error:
Status: Listing directory /opt/bitnami/letsencrypt
Status: Directory listing of "/opt/bitnami/letsencrypt" successful
Status: Retrieving directory listing of "/opt/bitnami/letsencrypt/accounts"...
Command: cd "/opt/bitnami/letsencrypt/accounts"
Error: Directory /opt/bitnami/letsencrypt/accounts: permission denied
Error: Failed to retrieve directory listing

So even though I am logged in through ftp, I cannot access the letsencrypt directory. Just set up site a few days ago.

kevin6 2019-08-23 09:12:29 UTC #3

Also, I am trying to get the corner banner off the freaking web page. I try using these directions:
To remove the banner link to the Bitnami Info page, follow these steps:
Log in to into your server console using SSH and execute the following command. Remember to replace APPNAME with the actual name or directory location of your application.

my question is which appname to use? it says "command not found" with either wordpress or nginx as the APPNAME

michiel 2019-08-23 09:30:27 UTC #4

Hi @kevin6,

For WordPress with Nginx could you try the alternative approach for creating a Let's Encrypt certificate?

https://docs.bitnami.com/general/how-to/generate-install-lets-encrypt-ssl/#alternative-approach

The following guide shows how to remove the Bitnami banner.

https://docs.bitnami.com/general/how-to/bitnami-remove-banner/

For APPNAME you should use "wordpress-pro"

Please, click on if you think my answer was helpful

kevin6 2019-08-23 10:09:05 UTC #5

hi, thanks.
in the alternative approach, I get
Could not obtain certificates:
acme: Error -> One or more domains had a problem:
[x.com] acme: error: 403 :: urn:ietf:params:acme:error:unauthorized :: Cannot negotiate ALPN protocol "acme-tls/1" for tls-alpn-01 challenge, url:
[www.x.com] acme: error: 403 :: urn:ietf:params:acme:error:unauthorized :: Cannot negotiate ALPN protocol "acme-tls/1" for tls-alpn-01 challenge, url:

kevin6 2019-08-23 10:12:27 UTC #6

also, using wordpress-pro doesn't help me either

bitnami@ip-172-31-30-117:~$ sudo /opt/bitnami/apps/wordpress-pro/bnconfig --disable_banner 1
sudo: /opt/bitnami/apps/wordpress-pro/bnconfig: command not found

kevin6 2019-08-23 10:59:06 UTC #7

Now the site is down. I have only been working on this.
Could anything I have done with these commands crashed the site?
It is giving me an error from the aws server.
In a bind here, thanks for any help you can give to get it back up, with the SSL operatonal.

kevin6 2019-08-23 11:03:38 UTC #8

Could my taking too long to get that corner banner down have exposed the site to bad actors?

kevin6 2019-08-23 11:06:05 UTC #9

the site http://127.0.0.1/phpmyadmin/index.php?lang=en
is not loading now either, maybe just because the server crashed?

michiel 2019-08-26 09:59:47 UTC #10

Hi @kevin6,

We have a Support Tool that will gather relevant information for us to analyze your configuration and logs. Could you please download and execute it on the machine where the stack is running by following the steps described in the guide below?

How to Run the Bitnami Support Tool

Please note that you need to paste the code outputted by the tool in your reply.

kevin6 2019-10-14 07:52:47 UTC #11

Here is my support code,
f05eef6a-3056-9acd-bf9c-4d4344d15c0c
Can you help, Michiel?

kevin6 2019-10-14 07:59:11 UTC #12

Last time I just reinstalled the system, but every time I try to install the certificate, it crashes the site.
Now it's crashed, and I really need this fixed, so I'd appreciate the prompt help, thanks.
Regards, Kevin

kevin6 2019-10-14 08:07:23 UTC #14

Sorry, the site is
18.136.106.241

jota 2019-10-14 08:57:13 UTC #15

Hi @kevin6,

It seems that NGINX is not running right now. Can you get the status of the services?

sudo /opt/bitnami/ctlscript.sh status
sudo /opt/bitnami/ctlscript.sh start

In order to generate the certificate and instead of using the generate-certificate.sh script, can you follow the manual process?

https://docs.bitnami.com/aws/how-to/generate-install-lets-encrypt-ssl/#alternative-approach

If you have any questions, please do not hesitate to ask.

jota 2019-10-14 08:59:12 UTC #16

Hi again @kevin6,

I just found some error lines in the NGINX log, can you try to disable the banner's lines in the WordPress' configuration file (/opt/bitnami/apps/wordpress/conf/nginx-app.conf)?

# Disable banner
#include "/opt/bitnami/apps/bitnami/banner/conf/banner-substitutions.conf";
#include "/opt/bitnami/apps/bitnami/banner/conf/banner.conf";

and restart the services

sudo /opt/bitnami/ctlscript.sh status
sudo /opt/bitnami/ctlscript.sh restart

kevin6 2019-10-14 09:30:39 UTC #17

ok, i deleted the 2 lines and restarted.

kevin6 2019-10-14 09:37:29 UTC #18

site is up, question is, is the cert installed?

kevin6 2019-10-14 09:38:36 UTC #19

Here's the error I get when I try to install:
Could not obtain certificates:
acme: Error -> One or more domains had a problem:
[climatesciencejournal.com] [climatesciencejournal.com] acme: error presenting token: could not start HTTPS server for challenge -> listen tcp :443: bind: address already in use
[www.climatesciencejournal.com] [www.climatesciencejournal.com] acme: error presenting token: could not start HTTPS server for challenge -> listen tcp :443: bind: address already in use

kevin6 2019-10-14 09:40:26 UTC #20

I have been using the alt procedure

kevin6 2019-10-14 09:45:10 UTC #22

sudo /opt/bitnami/letsencrypt/lego --tls --email="xxx@xxx.com" --domains="xxx.com" --domains="www.xxx.com" --path="/opt/bitnami/letsencrypt" run

Bitnami provides free all-in-one installers, virtual machines and cloud images for popular open source applications. Get them now!