All my sites are offline when accessing via https, most accessing via http.

henriquelucas

Server OS: Ubuntu 20.04
aaPanel version: FREE 6.9.69

I've been noticing that my sites are sometimes offline when accessing via https, but they normally access via http. And after some time they work again on https. But it runs several times a day.

What can I do to fix this?

About port 443 it is free and listed in the aapanel panel

log site:

[Thu Apr 06 02:03:51.155758 2023] [ssl:warn] [pid 2019:tid 140179945122880] AH01909: SSL.baixai.com.br:443:0 server certificate does NOT include an ID which matches the server name [Thu Apr 06 02:03:51.205447 2023] [ssl:warn] [pid 2019:tid 140179945122880] AH01909: SSL.baixai.com.br:443:0 server certificate does NOT include an ID which matches the server name [Thu Apr 06 02:03:51.432235 2023] [ssl:warn] [pid 2019:tid 140179945122880] AH01909: SSL.baixai.com.br:443:0 server certificate does NOT include an ID which matches the server name [Thu Apr 06 02:03:51.556531 2023] [ssl:warn] [pid 2019:tid 140179945122880] AH01909: SSL.baixai.com.br:443:0 server certificate does NOT include an ID which matches the server name [Thu Apr 06 02:03:51.884091 2023] [ssl:warn] [pid 2019:tid 140179945122880] AH01909: SSL.baixai.com.br:443:0 server certificate does NOT include an ID which matches the server name [Thu Apr 06 02:04:42.961360 2023] [ssl:warn] [pid 2019:tid 140179945122880] AH01909: SSL.baixai.com.br:443:0 server certificate does NOT include an ID which matches the server name [Fri Apr 07 23:11:27.118364 2023] [ssl:warn] [pid 2019:tid 140179945122880] AH01909: SSL.baixai.com.br:443:0 server certificate does NOT include an ID which matches the server name [Fri Apr 07 23:11:30.009703 2023] [ssl:warn] [pid 2019:tid 140179945122880] AH01909: SSL.baixai.com.br:443:0 server certificate does NOT include an ID which matches the server name [Fri Apr 07 23:11:30.059870 2023] [ssl:warn] [pid 2019:tid 140179945122880] AH01909: SSL.baixai.com.br:443:0 server certificate does NOT include an ID which matches the server name [Fri Apr 07 23:11:36.134303 2023] [ssl:warn] [pid 2019:tid 140179945122880] AH01909: SSL.baixai.com.br:443:0 server certificate does NOT include an ID which matches the server name [Fri Apr 07 23:11:36.528202 2023] [ssl:warn] [pid 2019:tid 140179945122880] AH01909: SSL.baixai.com.br:443:0 server certificate does NOT include an ID which matches the server name [Fri Apr 07 23:11:36.649195 2023] [ssl:warn] [pid 2019:tid 140179945122880] AH01909: SSL.baixai.com.br:443:0 server certificate does NOT include an ID which matches the server name [Fri Apr 07 23:11:36.914092 2023] [ssl:warn] [pid 2019:tid 140179945122880] AH01909: SSL.baixai.com.br:443:0 server certificate does NOT include an ID which matches the server name

aaPanel_Kern

henriquelucas
Hello, this actually does not affect the use
You can find the relevant site to change SSL.baixai.com.br to baixai.com.br. Can solve the prompt problem
When https is offline, can use other websites to access normally? such as mobile network
Do you use a scanning tool to check whether port 443 of https is normal?
https://dnschecker.org/port-scanner.php

henriquelucas

I used and yes port 443 is open.

henriquelucas

I have 5 websites on my server. Neither one of them works https

aaPanel_Kern

When https is offline, can use other websites to access normally? such as mobile network

henriquelucas

I tried accessing the mobile network, but the same problem.

henriquelucas

As for accessing other sites outside my server, they work normally.

henriquelucas

aaPanel_Kern

henriquelucas
Is it normal to check the log and error log of the website when you cannot access it? Does the latest log have your IP in the log?

henriquelucas

By https does not appear my ip. already when I access the http ai appears. Would you like access to my panel to check?

aaPanel_Kern

henriquelucas
Hi, can you give us your aapanel information? The server makes a snapshot backup first, if possible, please send it to kern@aapanel.com.
It is recommended to fill in the following
Post link:
SSH IP address, account password and port:
aapanel login link address and account password:

No post link will not be able to know which user's information is, and the problem will not be processed

henriquelucas

aaPanel_Kern Sent, confirm recipient?

aaPanel_Kern

henriquelucas

Port 443 is blocked. Please check whether port 443 is open in the security group of the server provider?
ssh password cannot log in

aaPanel_Kern

Now it works again, did you do anything?

henriquelucas

I did not do nothing

henriquelucas

The first letter of the password is upper case

aaPanel_Kern

henriquelucas
I don't see what the problem is so far. It is recommended that you use this website to check whether the port can be accessed when you cannot access it?
https://dnschecker.org/port-scanner.php
Also check whether the server is accessible inside: curl -kv https://127.0.0.1 or curl -kv https://domain

henriquelucas

ti@pontods:~$ curl -kv https://127.0.0.1

Trying 127.0.0.1:443...
TCP_NODELAY set
Connected to 127.0.0.1 (127.0.0.1) port 443 (#0)
ALPN, offering h2
ALPN, offering http/1.1
successfully set certificate verify locations:
CAfile: /etc/ssl/certs/ca-certificates.crt
CApath: /etc/ssl/certs
TLSv1.3 (OUT), TLS handshake, Client hello (1):
TLSv1.3 (IN), TLS handshake, Server hello (2):
TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
TLSv1.3 (IN), TLS handshake, Certificate (11):
TLSv1.3 (IN), TLS handshake, CERT verify (15):
TLSv1.3 (IN), TLS handshake, Finished (20):
TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
TLSv1.3 (OUT), TLS handshake, Finished (20):
SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
ALPN, server accepted to use h2
Server certificate:
subject: CN=agoracariri.com.br
start date: Apr 2 15:44:00 2023 GMT
expire date: Jul 1 15:43:59 2023 GMT
issuer: C=US; O=Let's Encrypt; CN=R3
SSL certificate verify ok.
Using HTTP2, server supports multi-use
Connection state changed (HTTP/2 confirmed)
Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
Using Stream ID: 1 (easy handle 0x55ac1e2a8240)

GET / HTTP/2
Host: 127.0.0.1
user-agent: curl/7.68.0
accept: /

TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
old SSL session ID is stale, removing
Connection state changed (MAX_CONCURRENT_STREAMS == 100)!
< HTTP/2 200
< expires: Thu, 19 Nov 1981 08:52:00 GMT
< cache-control: no-store, no-cache, must-revalidate
< pragma: no-cache
< link: https://agoracariri.com.br/wp-json/; rel="https://api.w.org/"
< set-cookie: PHPSESSID=9rso6a779fk1omtch1pdr8f3te; path=/
< vary: Accept-Encoding
< content-type: text/html; charset=UTF-8
< date: Tue, 11 Apr 2023 03:44:45 GMT
< server: Apache

henriquelucas

I don't understand why the port keeps working and stopping several times.