[users@httpd] Managed domains: how do I get from staging to a real letsencrypt cert?

[Tom Browder <to...@gmail.com>]

I got a test cert installed, and Qualys SSL Labs show it. I have changed my
httpd.conf line back to the actual staging site, did a graceful restart,
but nothing has changed.

I have inspected the md directory and don't see any issues recognizable to
me. I have another server, with different vhosts, running fine.

Any ideas would be appreciated.

Best regards,

-Tom

[users@httpd] [SOLVED] Re: [users@httpd] Managed domains: how do I get from staging to a real letsencrypt cert?

[Tom Browder <to...@gmail.com>]

On Sun, Jun 12, 2022 at 12:26 Frank Gingras <th...@apache.org> wrote:

> Can we see the apachectl -S output (you can munge to example.tld if
> needed)?
>

Frank, I was able to get all working by removing the md directory, updating
the httpd.conf file to use the real v2 URL instead of the staging area,
doing a hard restart, checking the logs and saw in the error log the system
was waiting for a graceful restart, did so and all is well now.

I will definitely keep a note of my steps for future reference.

Thanks, and blessings to all!

-Tom

Re: [users@httpd] Managed domains: how do I get from staging to a real letsencrypt cert?

[Frank Gingras <th...@apache.org>]

Can we see the apachectl -S output (you can munge to example.tld if needed)?

On Sun, 12 Jun 2022 at 10:46, Tom Browder <to...@gmail.com> wrote:

> On Sun, Jun 12, 2022 at 09:12 Tom Browder <to...@gmail.com> wrote:
>
>> On Sun, Jun 12, 2022 at 08:09 Frank Gingras <th...@apache.org> wrote:
>>
>>> Changing certificates means that you have to issue a full restart, and
>>> not graceful.
>>>
>>
>> Thanks, Frank. I tried stop then start, then restart, but no change.  I
>> also checked Qualys again--still a staging cert. (And I have checked the
>> httpd.conf file again to make sure I'm NOT using the staging url.)
>>
>
> Can I blow away part of the md directory and nudge the stalemate?
>
> -Tom
>

Re: [users@httpd] Managed domains: how do I get from staging to a real letsencrypt cert?

[Tom Browder <to...@gmail.com>]

On Sun, Jun 12, 2022 at 09:12 Tom Browder <to...@gmail.com> wrote:

> On Sun, Jun 12, 2022 at 08:09 Frank Gingras <th...@apache.org> wrote:
>
>> Changing certificates means that you have to issue a full restart, and
>> not graceful.
>>
>
> Thanks, Frank. I tried stop then start, then restart, but no change.  I
> also checked Qualys again--still a staging cert. (And I have checked the
> httpd.conf file again to make sure I'm NOT using the staging url.)
>

Can I blow away part of the md directory and nudge the stalemate?

-Tom

Re: [users@httpd] Managed domains: how do I get from staging to a real letsencrypt cert?

[Tom Browder <to...@gmail.com>]

On Sun, Jun 12, 2022 at 08:09 Frank Gingras <th...@apache.org> wrote:

> Changing certificates means that you have to issue a full restart, and not
> graceful.
>

Thanks, Frank. I tried stop then start, then restart, but no change.  I
also checked Qualys again--still a staging cert. (And I have checked the
httpd.conf file again to make sure I'm NOT using the staging url.)

-Tom

Re: [users@httpd] Managed domains: how do I get from staging to a real letsencrypt cert?

[Frank Gingras <th...@apache.org>]

Changing certificates means that you have to issue a full restart, and not
graceful.

On Sun, 12 Jun 2022 at 08:19, Tom Browder <to...@gmail.com> wrote:

> I got a test cert installed, and Qualys SSL Labs show it. I have changed
> my httpd.conf line back to the actual staging site, did a graceful restart,
> but nothing has changed.
>
> I have inspected the md directory and don't see any issues recognizable to
> me. I have another server, with different vhosts, running fine.
>
> Any ideas would be appreciated.
>
> Best regards,
>
> -Tom
>