SSL Flush and Re-Issue New SSL
Change the hostname if you just did a rsync
sudo hostnamectl set-hostname xxxx.flast.com.au
Check Apache Configuration: Before generating a new SSL certificate, ensure that Apache is not referencing the old certificate.
Edit the Apache configuration file where the SSL certificates are referenced (usually found in /etc/apache2/sites-available/
or /etc/apache2/sites-enabled/
).
Look for the lines mentioning SSLCertificateFile
and SSLCertificateKeyFile
, and either comment them out or update them with the new paths (if you already know where the new certificates will be located).
The file on an Ubuntu system that you need to edit is 000-default-le-ssl.conf
Restart Apache: After editing the configuration, restart Apache to apply the changes:
sudo systemctl restart apache2
Check Current Certificates
sudo certbot certificates
Delete Current Certificates
sudo certbot delete --cert-name [your-old-domain.com]
Generate New Certificate: Now, try generating a new SSL certificate with Certbot. Ensure that your domain name is correctly pointing to your server's IP address. DNS propagation might take some time if you have recently changed it.
sudo certbot --apache
Update Apache Configuration (if needed): If you had commented out the SSL lines in step 1, go back and update these lines with the new paths provided by Certbot. They should be in /etc/letsencrypt/live/yourdomain.com/.
Final Restart of Apache: After updating the configuration with the new certificate paths, restart Apache once more:
sudo systemctl restart apache2
Verify Configuration: Finally, verify that your site is accessible via HTTPS and that the SSL certificate is correctly installed. You can use online tools like SSL Labs to test your SSL configuration.
Update /etc/stunnel/streamlit.conf
Update /var/www/html/flast/.env