Configuration virtualhost et Letsencrypt
Bonsoir à tous,
résumé : je n'arrive pas à créer un certificat avec Letsencrypt et je suppose que cela provient d'une erreur de configuration Apache.
Mon site est hébergé sur un VPS chez OVH. Ma config :
- Version de WordPress : 5.9.3
- Version de PHP : 7.3.27
- Version de MariaDB : 10.3.27
- Adresse du site : https://www.webcaf.fr/
J'ai un certificat valide pour le www mais pas pour la racine. Je voulais donc corriger cela, mais j'obtiens cette erreur lors de la génération du certificat :
Code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
| sudo certbot --apache -d webcaf.fr -d www.webcaf.fr
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator apache, Installer apache
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for webcaf.fr
Waiting for verification...
Cleaning up challenges
Failed authorization procedure. webcaf.fr (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 51.178.138.45: Invalid response from http://webcaf.fr/.well-known/acme-challenge/HqZbdmwTkNiM061lvanQ_YvoN1Zx4BvAbi2NZuhp7PE: 404
IMPORTANT NOTES:
- The following errors were reported by the server:
Domain: webcaf.fr
Type: unauthorized
Detail: 51.178.138.45: Invalid response from
http://webcaf.fr/.well-known/acme-challenge/HqZbdmwTkNiM061lvanQ_YvoN1Zx4BvAbi2NZuhp7PE:
404
To fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address. |
Ce qui est assez logique vu que http://webcaf.fr mène à un 404.
D'ailleurs, avant que je renomme le dossier html par défaut d'Apache, il pointait dessus o.O?
Voici le fichier VirtualHost d'apache2 :
Code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
| <VirtualHost *:80>
ServerName webcaf.fr
ServerAlias www.webcaf.fr
DocumentRoot "/var/www/wp_webcaf"
<Directory "/var/www/wp_webcaf">
Options +FollowSymLinks
AllowOverride all
Require all granted
</Directory>
ErrorLog /var/log/apache2/error.webcaf.log
CustomLog /var/log/apache2/access.webcaf.log combined
RewriteEngine on
RewriteCond %{SERVER_NAME} =webcaf.fr [OR]
RewriteCond %{SERVER_NAME} =www.webcaf.fr
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost> |
Et voici ma zone DNS chez OVH :
Code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
|
$TTL 3600
@ IN SOA dns104.ovh.net. tech.ovh.net. (2022050701 86400 3600 3600000 60)
IN NS ns104.ovh.net.
IN NS dns104.ovh.net.
IN MX 1 mx1.mail.ovh.net.
IN MX 5 mx2.mail.ovh.net.
IN MX 100 mx3.mail.ovh.net.
IN A 51.178.138.45
600 IN TXT "v=spf1 include:mx.ovh.com ~all"
600 IN TXT "google-site-verification=Gp-FghDGf3ynhaF15yzKZ8SrmzJZXG0okCq4bbNRg08"
600 IN TXT "1|www.webcaf.fr"
_autodiscover._tcp IN SRV 0 0 443 mailconfig.ovh.net.
_imaps._tcp IN SRV 0 0 993 ssl0.ovh.net.
_submission._tcp IN SRV 0 0 465 ssl0.ovh.net.
autoconfig IN CNAME mailconfig.ovh.net.
autodiscover IN CNAME mailconfig.ovh.net.
dijon IN A 51.178.138.45
ftp IN CNAME webcaf.fr.
hebergement IN A 51.178.138.45
imap IN CNAME ssl0.ovh.net.
lourdes IN A 51.178.138.45
mail IN CNAME ssl0.ovh.net.
pop3 IN CNAME ssl0.ovh.net.
smtp IN CNAME ssl0.ovh.net.
tarbes IN A 51.178.138.45
vignettes IN A 51.178.138.45
www IN MX 1 mx1.mail.ovh.net.
www IN MX 5 mx2.mail.ovh.net.
www IN MX 100 mx3.mail.ovh.net.
www IN A 51.178.138.45
www IN TXT "3|welcome"
www IN TXT "l|fr" |
Au besoin, le VH par défaut d'apache :
Code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
|
<VirtualHost *:80>
# The ServerName directive sets the request scheme, hostname and port that
# the server uses to identify itself. This is used when creating
# redirection URLs. In the context of virtual hosts, the ServerName
# specifies what hostname must appear in the request's Host: header to
# match this virtual host. For the default virtual host (this file) this
# value is not decisive as it is used as a last resort host regardless.
# However, you must set it for any further virtual host explicitly.
#ServerName www.example.com
ServerAdmin stephane@webcaf.fr
DocumentRoot /var/www/html
# Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
# error, crit, alert, emerg.
# It is also possible to configure the loglevel for particular
# modules, e.g.
#LogLevel info ssl:warn
LogFormat "%v %h %l %u %t \"%r\" %>s %b" common
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log common
# For most configuration files from conf-available/, which are
# enabled or disabled at a global level, it is possible to
# include a line for only one particular virtual host. For example the
# following line enables the CGI configuration for this host only
# after it has been globally disabled with "a2disconf".
#Include conf-available/serve-cgi-bin.conf
</VirtualHost>
# ######################################
# GLOBAL! deny bad bots and IP addresses
# ######################################
#
# should be set after <VirtualHost>s see https://httpd.apache.org/docs/2.4/sections.html#merging
<Location "/">
# AND-combine with preceding configuration sections
AuthMerging And
# include black list
Include custom.d/globalblacklist.conf
</Location>
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet |
Ce que je ne comprends pas c'est que j'ai un autre site, hébergé sur le même serveur, lui aussi avec le nom de domaine chez OVH, avec la même config DNS et la même structure de fichier VH Apache2 et je n'ai pas eu de souci pour générer le certificat pour la racine et www.
Je suis sûr que c'est un truc simple que j'ai devant les yeux mais que je ne vois pas -_-
Je vous remercie d'avance pour votre aide.
