Apache SSL seems to fail

Server Config
#1

I’m setting up a new subdomain. These are my records (I’ve redacted a few things):

<VirtualHost *:80>
ServerAdmin ----@riverside.rocks
ServerName ----.riverside.rocks
ServerAlias http://---.riverside.rocks
DocumentRoot /var/www/---
RemoteIPHeader CF-Connecting-IP
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerAdmin ---@riverside.rocks
ServerAlias https://----.riverside.rocks
DocumentRoot /var/www/---/
RemoteIPHeader CF-Connecting-IP
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined


SSLCertificateFile /etc/letsencrypt/live/---.riverside.rocks/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/---.riverside.rocks/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf
</VirtualHost>

</IfModule>

However, when I visit my site over HTTPS, apache uses the cert for riverside.rocks and not my subdomain:

1059×753 45.5 KB

What is wrong with my config?

#2

I have a Ubuntu VPS and the domain.config does not prefix the subdomain with http::

ServerAlias www.riverside.rocks


Special note:
www is a subdomain

#3

I just tested the sub-domain www.riverside.rocks and it seems to be working OK.

For the benefit of others, please post your solution :slight_smile:

Edit:

Whoops - the URL was cached and there is still a problem :frowning:

Try this - which does not rely on cached URLs:

https://supiet2.tk/test?

#4

Did you restart Apache after adding this configuration?

#5

Hello everyone, thanks for the tips.

@John_Betong I don’t think I have a vhost for www.

@rpkamp I did.

#6

Try the following:

  1. add the following line to “riverside.rocks.configure”
    ServerAlias www.riverside.rocks
  2. Command line: Systemctrl restart apache2
  3. The www. sub-domain should then open https://riverside.rocks
  4. To create a new “Fred” sub-domain a new config file needs creating

I don’t think it is possible to combine the “Fred” sub-domain

To activate the https Letsencrypt protocols I call certbot from the command line.

Not tried and tapped on a tablet.

#7

Thanks, I’ll have a try.