ssl.CertificateError: hostname doesn't match

14 posts / 0 new
Last post
#1 Wed, 08/16/2017 - 00:53
maconeto

ssl.CertificateError: hostname doesn't match

Hello,

I'm trying to add an alias domain .de to my current main domain .com. But it is not possible to request Let's Encrypt for that new alias domain. It says hostname doesnt match. I checked DNS, they all use the same NS addresses, they all have same A record. When open in browser, they all resolve correctly to the common public_html folder (main website). What else I should check, any idea please?

Parsing account key... Parsing CSR... Registering account... Already registered! Verifying only-approved.com... only-approved.com verified! Verifying only-approved.de... Traceback (most recent call last): .....

File "/usr/lib/python2.7/ssl.py", line 269, in match_hostname % (hostname, ', '.join(map(repr, dnsnames)))) ssl.CertificateError: hostname 'www.only-approved.de' doesn't match either of 'only-approved.com', 'only-approved.dk', 'www.only-approved.com', 'www.only-approved.dk'

Wed, 08/23/2017 - 00:45
maconeto

all domains point to the same address already but Virtualmin failed to match hostname. I Suspect this has something to do with the fact that I add 2 domains from beginning and the last domain is added after I upgraded Virtualmin several times?

Fri, 09/01/2017 - 06:47
Jfro

Default the webmin virtualmin ui interface adres itself ( as this is what you mean?) is on a kind of subdomain Here thes are aded to the encrypt domain autoconfig.puthereyourdomain.tld autodiscover.uyourdomain.tld

Redirection is then somehow also in a config file from admin. and so on

Fri, 11/10/2017 - 03:26
echrom

For others having this issue. i hope this helps. under server configuration > manage ssl certificate. under the tab "Create signing Request". Check the input "Other domain names" does not include a different domain. then press "generate CSR Now". After this is finished try generating a ssl using lets encrypt tab

Thu, 02/08/2018 - 13:12
Luiz Lopes

I experienced this issue. I registered an alias domain (Lets Encrypt run OK), and after 3 months I added another one (and Lets Encrypt failed). My solution was to create a self signed certificate for all the (3) domains, and then request a new Lets Encrypt for them all. Then it worked.

Mon, 09/10/2018 - 19:40
bluora

I can confirm that Luiz's solution works.

Go to Manage SSL Certificate: * Click the Create Self-Signed Certificate tab * Add in the other domains you've just aliases to this account. * Click Generate Self-Signed Key * Click on Let's Encrypt * Click on the Request Certificate button.

Tue, 11/13/2018 - 07:09
Siddharth Singh

Requesting a certificate for www.example.com, example.com from Let's Encrypt .. .. request failed : Web-based validation failed : Failed to request certificate :

even both are pointer at same directory, i not know what is the problem, Can any one help please.

SAND IT SOLUTION

Tue, 11/13/2018 - 07:16
Siddharth Singh

Requesting a certificate for www.example.com, example.com from Let's Encrypt .. .. request failed : Web-based validation failed : Failed to request certificate :

I not know what is the problem, Can any one help please.

when i try separately it work, it will work.

But not for both, it work only for last request no matter naked domain or with www.

SAND IT SOLUTION

Tue, 11/13/2018 - 07:18 (Reply to #8)
Siddharth Singh

both ping to the same directory www.example.com, example.com

SAND IT SOLUTION

SAND IT SOLUTION

Tue, 11/13/2018 - 07:16
Siddharth Singh

Requesting a certificate for www.example.com, example.com from Let's Encrypt .. .. request failed : Web-based validation failed : Failed to request certificate :

I not know what is the problem, Can any one help please.

when i try separately it work, it will work.

But not for both, it work only for last request no matter naked domain or with www.

SAND IT SOLUTION

Tue, 11/13/2018 - 07:17 (Reply to #10)
Siddharth Singh

both ping to the same directory www.example.com, example.com

SAND IT SOLUTION

Mon, 06/03/2019 - 11:09
DominicDesbiens

+1 for Luiz's solution (create BEFORE Let's Encrypt a self signed certificate with all subdomains to include in Let's Encrypt)

IT tech who learn all about Linux and hosting own web server... https://www.dominicdesbiens.com/

Tue, 08/27/2019 - 01:22
Murz

Thanks, Luiz's solution solves the problem for me too!

Thu, 09/26/2019 - 07:15
mewG

Luiz's solution worked for me as well, still can't get wildcard certs to work though as virtualmin doesn't detect the zone being hosted on itself.

https://www.virtualmin.com/node/67280

Topic locked