Raspberry Pi Forums

Posted: **Fri Aug 16, 2019 3:04 pm**

I am currently trying to enable SSL on my hosting(on my pi) and im using NGINX.

my configuration looks like this.

server {
	listen 80;
	listen 443 ssl default_server;
	listen [::]:443 ssl default_server ;
	root /home/web/wordpress/;
	index index.php;
	server_name 192.168.0.4 [domain].ca www.[domain].ca;
	ssl_certificate     /etc/letsencrypt/live/[domain]/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/[domain]/privkey.pem;
	access_log /home/web/wordpress/access.log;
	error_log /home/web/wordpress/error.log notice;
	location / {
		try_files $uri $uri/ /index.php?$args;
	}
	location ~ \.php$ {
		include snippets/fastcgi-php.conf;
		fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;
	}
}

when i view the site it says the connection is not secure.

I followed this guide to help set up https/TLS certificates...https://pimylifeup.com/raspberry-pi-ssl-lets-encrypt/

Yet it still shows unsecure. I was under the presumption that it should be in green as in validated.

Could someone help assist in what im doing wrong?

Posted: **Fri Aug 16, 2019 3:27 pm**

issue resolved...for the https part.

for the DNS when i put in www.domain.ca it works but when i put in domain.ca it doesnt in incognito/ping.

for my dns settings i have 2 CNAME entries with * and www as name and value set to a my DDNS which has an A entry pointing to my ipv4 address. i just put in the entry for www as name is there anything else i could try or do i just have to wait for it to propogate?

Posted: **Sat Aug 17, 2019 1:01 pm**

Hi, just a few suggestions to be sure for your tests and make them fast. I suppose your client has Windows OS.
Be sure that you are not viewing cached data: "ipconfig /flushdns" will clean your dns cache. In browser setting you should also find how to clear browser cache.
To replicate dns changes locally in your PC and use them without waiting for public dns propagation, you can also backup and then edit your "hosts" file in Windows.
These operations let you be sure to test ssl configuration exckudind dns/caching "issues".

Posted: **Sat Aug 17, 2019 1:31 pm**

the TLS certificates were resolved.

And im aware i can edit the hosts but it wouldnt reflect the true public side of things therefor i opted not to do it.

flushing dns cache and browser cache did not resolve the issue

Raspberry Pi Forums

dns/domain/https issue

dns/domain/https issue

Re: dns/domain/https issue

Re: dns/domain/https issue

Re: dns/domain/https issue