Problem to make new SSL certificates for new sites with VirtualMin and let's encrypt

Howdy -- thanks for contacting us!

We may need to take a look at your Apache config, after the second SSL certificate is enabled.

Would it be possible to enable that second SSL cert, and then run the following commands:

The output of those commands will give us an idea of what's going on there... thanks!

Hello, I've the same problem since yesterday. I've done your command as you suggedsted: ifconfig grep -i virtualhost /etc/apache2/sites-enabled/*

and the mistake is this: for all domain since 2 days ago the result is:

but the last domain added yesterday, the result is:

In fact it puts offline all my websites, apache2 shut down, and all domains that have Let's Encrypt installed return me the error: www.mydomain.eu use a not valid security certificate . The certificate is not trustworthy because it's self-signed. Il certificate is valid only for mylastdomain.eu. Errore code: SEC_ERROR_UNKNOWN_ISSUER

Please, could you help me too. Best Mike

Thanks for the info!

I believe you're seeing the issue described here:

https://www.virtualmin.com/documentation/web/troubleshooting#toc-the-wro...

That is, you'd want to tweak all the VirtualHost sections above so that they're showing an IP address, rather than an asterisk... the above document explains what that should look like.

Give that a shot, and see if that fixes up your issue.

Hi andreychek, I followed your suggestion and your link about the issue I've fixed my VPS, but every time that I add a new virtual server from virtualmin the problem resubmit :( Please, how can I resolve this problem? Have you other suggestions? I haven't found anything about it.... Thank you in advance for your help Best Mike

Now that you've made those changes, what is the current output of the "grep" command from above?

but the new last domain added now, the result is:

So I change the file in /etc/apache2/sites-enabled/mynewdomain.eu.conf and at the line:

I change manually in:

restart apache2 and it works, but every time I have to fix it manually the file in /etc/apache2/sites-enabled/*

Can you show us the full output of the grep command though, after you fixed the above two things?

That will help us better understand what's going on there.

Hi @andreychek I add a new virtual server and this is the problem. This is the output before to add the virtual server:

but when I add a new virtual server (in this case "txad.co") and I flag the box "Setup SSL website too" in "Enable Features" the result is

In fact for example if you try to connect to txad.co you can see the courtesy page correctly in SSL mode without errors, but for example you try to connect to fineartdesign.co with mozilla firefox, you see an error and firefox says that the certificate used for fineartdesign.co is not valid and it's valid only for the domain txad.co with error code: SSL_ERROR_BAD_CERT_DOMAIN. So to fix this problem I must open the file /etc/apache2/sites-enabled/txad.co.conf and change this part of code:

So I fix it manually changing manually this line:

in

And it runs. Ps I leave the error now in the file /etc/apache2/sites-enabled/txad.co.conf so you can see the error in one domain with SSL feature enabled. Hope I have explain better my problem now. Thanks in advance for your help. Mike.

Ah, I think I see the issue -- you would need to update all the Apache config files so that they all use "VirtualHost x.x.x.x:PORT".

None of them should have an asterisk in that VirtualHost line, they should all be using the IP address.

If any have an asterisk, it can cause Virtualmin to incorrectly use an asterisk when making new Virtual Servers.

Thank you for your help. Now I've understand where's the problem. Strange because I make a Re-Check configuration in Virtualmin but it says always that is ok and correct. Do you have any suggestion to fix this problem? Is there an alternative solution to reinstall all the VPS? :O Thank you again.

Sure, there's no need to reinstall -- just tweak the Apache config using the format described above.

That is, all those "VirtualHost *:80" lines you shared in Comment #8 above, just edit those files, and change those to read "VirtualHost x.x.x.x:80", where "x.x.x.x" is your IP address.

You'd want to do the same for references to both port 80 and for port 443.

Hi, I've done as you write me, but now when I add a new virtual server with "setup SSL website too" I can't install Let's Encrypt certificate and I receive this:

But If I create a virtual server without SSL option, it works. Please, have you a suggestion? Thank you in advance. Mike

It sounds like you're close!

The error you're receiving at the moment suggests that Let's Encrypt is rate limiting your server... you may just need to wait 24 hours and then try again, and it should work at that point.

Ok, thank you. Many thanks. Mike