Sponsor:

Server and Web Integrator
Link:
Kloxo-MR logo
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:
Click Here
Please login or register. 2024-03-28, 15:45:24

Author Topic: Letsencrypt is creating certificates but not opening https  (Read 14238 times)

0 Members and 1 Guest are viewing this topic.

Offline aamirrajpoot

  • Valuable Member
  • *
  • Posts: 54
  • Karma: +0/-0
    • View Profile
Hi,

I just installed Kloxo-MR 7.0.0.b-2016062004. I have been updating it since 201510 something.

I have installed letsencrypt certificate and it is added without any problem. I can see that in the list. But I am not able to access the website via https, firefox message. Unable to Connect.

Offline aamirrajpoot

  • Valuable Member
  • *
  • Posts: 54
  • Karma: +0/-0
    • View Profile
Re: Letsencrypt is creating certificates but not opening https
« Reply #1 on: 2016-06-21, 08:42:51 »
Here is the telnet result for both 80 and 443.

Code: [Select]
telnet domain.com 80
Trying xxx.131.211.247...
Connected to domain.com.
Escape character is '^]'.


Code: [Select]
telnet domain.com 443
Trying xxx.131.211.247...
telnet: connect to address xxx.131.211.247: Connection refused
telnet: Unable to connect to remote host


Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Letsencrypt is creating certificates but not opening https
« Reply #2 on: 2016-06-21, 08:55:34 »
Try update to Kloxo-MR 7.0 latest version.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline aamirrajpoot

  • Valuable Member
  • *
  • Posts: 54
  • Karma: +0/-0
    • View Profile
Re: Letsencrypt is creating certificates but not opening https
« Reply #3 on: 2016-06-21, 08:57:21 »
Mentioned in my first Message I am using Kloxo-MR 7.0.0.b-2016062004

Again updating it to  Kloxo-MR 7.0.0.b-2016062102 now
« Last Edit: 2016-06-21, 09:02:51 by aamirrajpoot »

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Letsencrypt is creating certificates but not opening https
« Reply #4 on: 2016-06-21, 09:06:16 »
Try delete letsencrypt ssl certificate, run 'sh /script/fixssl; sh /script/fixweb; sh /script/restart-web -y' and then add again letsencrypt ssl certificate.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline aamirrajpoot

  • Valuable Member
  • *
  • Posts: 54
  • Karma: +0/-0
    • View Profile
Re: Letsencrypt is creating certificates but not opening https
« Reply #5 on: 2016-06-21, 09:18:50 »
Removed certificate
Executed the commands you mentioned `sh /script/fixssl; sh /script/fixweb; sh /script/restart-web -y`
Re-Added certificate

Didnt worked,

Re-Executed the `sh /script/fixssl; sh /script/fixweb; sh /script/restart-web -y`

Still connection is refusing

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Letsencrypt is creating certificates but not opening https
« Reply #6 on: 2016-06-21, 09:27:47 »
Read log in 'log manager'.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline aamirrajpoot

  • Valuable Member
  • *
  • Posts: 54
  • Karma: +0/-0
    • View Profile
Re: Letsencrypt is creating certificates but not opening https
« Reply #7 on: 2016-06-21, 09:33:45 »
Which Log, i tried Apache, LetsEncrypt they look okay to me

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Letsencrypt is creating certificates but not opening https
« Reply #8 on: 2016-06-21, 09:37:34 »
Try test your ssl via https://www.ssllabs.com/ssltest/
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline aamirrajpoot

  • Valuable Member
  • *
  • Posts: 54
  • Karma: +0/-0
    • View Profile
Re: Letsencrypt is creating certificates but not opening https
« Reply #9 on: 2016-06-21, 09:41:28 »
https://www.ssllabs.com/ssltest/analyze.html?d=domain.com

 Assessment failed: Unable to connect to the server

I guess my server is not responding to port 443
« Last Edit: 2016-06-22, 09:32:37 by aamirrajpoot »

Offline aamirrajpoot

  • Valuable Member
  • *
  • Posts: 54
  • Karma: +0/-0
    • View Profile
Re: Letsencrypt is creating certificates but not opening https
« Reply #10 on: 2016-06-21, 09:48:08 »
Code: [Select]
netstat -tuplen
I found i have 8443 port, and then I can open my site using

« Last Edit: 2016-06-22, 09:32:57 by aamirrajpoot »

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Letsencrypt is creating certificates but not opening https
« Reply #11 on: 2016-06-21, 09:50:37 »
Add azan.school ssl files (taken from /home/kloxo/ssl) as attachment.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Letsencrypt is creating certificates but not opening https
« Reply #12 on: 2016-06-21, 09:51:50 »
Port 80 and 433 must be opened.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline aamirrajpoot

  • Valuable Member
  • *
  • Posts: 54
  • Karma: +0/-0
    • View Profile
Re: Letsencrypt is creating certificates but not opening https
« Reply #13 on: 2016-06-21, 09:55:50 »
Could you please explain how I can do that? I am on Centos 6.8 Final with Kloxo-MR: 7.0.0.b-2016062102


I tried to following but still telnet is responding connection refused

Code: [Select]
$ iptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
$ iptables -A INPUT -p tcp -m tcp --dport 443 -j ACCEPT


$ iptables-save | sudo tee /etc/sysconfig/iptables

$ service iptables restart


$ service iptables restart
iptables: Setting chains to policy ACCEPT: filter          [  OK  ]
iptables: Flushing firewall rules:                         [  OK  ]
iptables: Unloading modules:                               [  OK  ]
iptables: Applying firewall rules:                         [  OK  ]
[root@server ~]# telnet localhost 443
Trying ::1...
telnet: connect to address ::1: Connection refused
Trying 127.0.0.1...
telnet: connect to address 127.0.0.1: Connection refused


Here is nmap results

Code: [Select]
nmap localhost

Starting Nmap 5.51 ( http://nmap.org ) at 2016-06-21 08:39 UTC
Nmap scan report for localhost (127.0.0.1)
Host is up (0.0000040s latency).
Other addresses for localhost (not scanned): 127.0.0.1
Not shown: 982 closed ports
PORT     STATE SERVICE
21/tcp   open  ftp
25/tcp   open  smtp
53/tcp   open  domain
80/tcp   open  http
110/tcp  open  pop3
143/tcp  open  imap
465/tcp  open  smtps
587/tcp  open  submission
993/tcp  open  imaps
995/tcp  open  pop3s
2200/tcp open  ici
3306/tcp open  mysql
7777/tcp open  cbt
7778/tcp open  interwise
8080/tcp open  http-proxy
8083/tcp open  us-srv
8084/tcp open  unknown
8443/tcp open  https-alt

Nmap done: 1 IP address (1 host up) scanned in 0.10 seconds
« Last Edit: 2016-06-21, 10:23:12 by aamirrajpoot »

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Letsencrypt is creating certificates but not opening https
« Reply #14 on: 2016-06-21, 12:26:13 »
I think, using IPtables/Firewall is useless in OS with Kloxo-MR!.

If you want create letsencrypt ssl need port 80 (http:) opened. In certain condition, need port 443 opened too.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

 


MRatWork Affiliates:    BIGRAF(R) Inc.    House of LMAR    EFARgrafix
Click Here

Page created in 0.07 seconds with 21 queries.

web stats analysis