SSL certificate installation - need some help, please!

Hi

I have just installed SSL certificate from Comodo on my Debian 8 Linode and following are the issues:

* 1 - https://www.mydomain.com takes me to my site but Firefox displays a green lock with yellow triangle
* 2 - http://www.mydomain.com take me to 'Apache2 Debian Default Page' page rather than displaying my site and changing the url to https://www.mydomain.com (still green lock with yellow triangle)

My '/etc/apache2/sites-available/mydomain.com.conf' file for port 443 only

 <virtualhost *:443="">SSLEngine on
  SSLCertificateKeyFile /etc/ssl/private/mydomain.com.key
  SSLCertificateFile /etc/ssl/certs/mydomain_com.crt
  SSLCertificateChainFile /etc/ssl/certs/mydomain_com.ca-bundle

  # Admin email, Server Name (domain name), and any aliases
  ServerAdmin webmaster@mydomain.com
  ServerName  mydomain.com
  ServerAlias www.mydomain.com

  # Index file and Document Root (where the public files are located)
  DirectoryIndex index.html index.php
  DocumentRoot /var/www/html/mydomain.com/public_html
  # Log file locations
  LogLevel warn
  ErrorLog  /var/www/html/mydomain.com/log/error.log
  CustomLog /var/www/html/mydomain.com/log/access.log combined
 <directory var="" www="">Options Indexes FollowSymLinks
  AllowOverride All
  Order allow,deny
  allow from all
  Require all granted</directory></virtualhost> 

My '/etc/apache2/sites-available/mydomain.com.conf' file for port 443 and port 80 to avoid seeing 'Apache2 Debian Default Page'. But this configuration loads 'Apache2 Debian Default Page' first and my site next. Very frustrating!

# domain: mydomain.com
# public: /var/www/html/mydomain.com/public_html/

 <virtualhost *:80="">ServerName mydomain.com
    Redirect / https://www.mydomain.com/</virtualhost> 

 <virtualhost *:443="">SSLEngine on
  SSLCertificateKeyFile /etc/ssl/private/mydomain.com.key
  SSLCertificateFile /etc/ssl/certs/mydomain_com.crt
  SSLCertificateChainFile /etc/ssl/certs/mydomain_com.ca-bundle

  # Admin email, Server Name (domain name), and any aliases
  ServerAdmin webmaster@mydomain.com
  ServerName  mydomain.com
  ServerAlias www.mydomain.com

  # Index file and Document Root (where the public files are located)
  DirectoryIndex index.html index.php
  DocumentRoot /var/www/html/mydomain.com/public_html
  # Log file locations
  LogLevel warn
  ErrorLog  /var/www/html/mydomain.com/log/error.log
  CustomLog /var/www/html/mydomain.com/log/access.log combined
 <directory var="" www="">Options Indexes FollowSymLinks
  AllowOverride All
  Order allow,deny
  allow from all
  Require all granted</directory></virtualhost> 

Please, could someone help me out to resolve this issue.

Many thanks

6 Replies

Hi,

First things first, it would be easier to help if you provide the actual domain, so we can see what happens if we try to go there, and see what sort of redirects happen.

Secondly, http://www.mydomain.com isn't redirecting because you don't have a ServerAlias line for the subdomain (www) in the virtualhost for *80. Does http://mydomain.com (without the www) redirect properly?

As for the "yellow triangle", in order to diagnose that you would have to click it and see what it's actually complaining about. Again, if you give us the domain in question we can check for ourselves.

Hi alexfornuto

I just emailed you my site's url

Many thanks

It looks like you already solved the redirects. As for your Triangle issue, did you check out the complaint? Also, consider using a tool like https://www.ssllabs.com/ssltest/analyze.html to get a complete look at your SSL configuration.

Hi

No, I did not do anything since I posted the issue and it still loads 'Apache2 Debian Default Page' first and my site next. I will use the tool and check it as you suggested.

Thanks for looking at it.

All I can say is it works for me. Your browser may be caching redirects despite your refresh. Open a private browsing window and try again.

Thank you, alexfornuto for the follow up.

It works fine now. The yellow triangle on green lock in FireFox was due to some links on my home page with http://.

All is good now.

Thanks once again.

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct