Bad certificate for www.avored.com

[lhsazevedo]

The SSL certificate served at www.avored.com is only valid for avored.com (without www), thus, a user browsing the former is presented with an warning like this:

Possible solution

Install a valid certificate for www.avored.com
Bonus: Redirect all www requests to non-www (or the other way around)

[indpurvesh]

@lhsazevedo
Now the idea was that just to use the domain name itself and it should redirect if you are trying to access www.avored.com => avored.com

I will double check the nginx.conf file.

[lhsazevedo]

I think a valid certificate is still needed to stabilish a connection on the https/www domain and redirect to https/non-www one

Here's a simplified copy of a nginx.conf i'm running right now:

server {
    server_name www.mydomain.example;

    # ...

    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/mydomain.example-0001/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/mydomain.example-0001/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}

# Redirect https to https+www
server {
    listen 443 ssl http2;
    server_name mydomain.example;

    return 301 https://www.mydomain.example$request_uri;

    ssl_certificate /etc/letsencrypt/live/mydomain.example-0001/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/mydomain.example-0001/privkey.pem; # managed by Certbot
}

# Redirect http+www to https+www
server {
    if ($host = www.mydomain.example) {
        return 301 https://$host$request_uri;
    } # managed by Certbot

    server_name www.mydomain.example;
    listen 80;
    return 404; # managed by Certbot
}

# Redirect http to https+www 
server {
    if ($host = mydomain.example) {
        return 301 https://$host$request_uri;
    } # managed by Certbot

    server_name mydomain.example;
    listen 80;
    return 404; # managed by Certbot
}