NET::ERR_CERT_DATE_INVALID: Issuer: R3 Expires on: 28 giu 2022

Discussion in 'Installation/Configuration' started by Walterpet, Jun 28, 2022.

  1. Walterpet

    Walterpet Member

    Good Morning,
    this morning I woke up with a surprise: one of my websites reports this error: NET::ERR_CERT_DATE_INVALID: Issuer: R3 Expires on: 28 Jun 2022
    I tried to make a new configuration but the ISP Config panel related to the site does not take the check of Let’s Encrypt
    All other server websites are ok
    I did a site/server check on ssllabs and reported: Grade T

    How can I fix it?

    Best regards,
    Walter
     
  2. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    ahrasis likes this.
  3. Walterpet

    Walterpet Member

    Code:
    ##### SERVER #####
    IP-address (as per hostname): ***.***.***.***
    [WARN] could not determine server's ip address by ifconfig
    ls listing to help show OS:
    
    Could not detect uptime.
    Could not detect memory usage.
    [INFO] ISPConfig is installed.
    
    ##### ISPCONFIG #####
    ISPConfig version is 3.2.8p1
    
    
    ##### VERSION CHECK #####
    
    [INFO] php (cli) version is 7.4.4
    
    ##### PORT CHECK #####
    
    [WARN] Port 8080 (ISPConfig) seems NOT to be listening
    [WARN] Port 8081 (ISPConfig Apps) seems NOT to be listening
    [WARN] Port 80 (Webserver) seems NOT to be listening
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    You have a website in ISPConfig for the same domain that is used as the system#s hostname and the SSL cert for this website renewed, but ISPConfig still uses the old cert, right? And your system uses acme.sh as Let's encrypt client?
     
  5. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    Strange OS you have on that host. It is missing commands that usually are there and the script could not detect what OS it is.
     
  6. Walterpet

    Walterpet Member

    Non so cosa usi, il server è stato installato da un tuo collaboratore.
    quali comandi devo dare per capire di più?

    I don’t know what it uses, the server was set up by one of your collaborators.
    what commands must I give to understand more?
     
  7. Walterpet

    Walterpet Member

    Server: srv.promitalia.org (Ubuntu 18.04.6 LTS (Bionic Beaver)) ISPConfig 3.2.8p1
     
  8. Walterpet

    Walterpet Member

    Pls, reply me.
    I have great problem in my server
     
  9. till

    till Super Moderator Staff Member ISPConfig Developer

    Run the command:

    hostname -f

    to get the hostname. Then check in ISPConfig to see if you have a website for this exact hostname.

    then run the command:

    ls /etc/letsencrypt

    and post the result.
     
  10. till

    till Super Moderator Staff Member ISPConfig Developer

  11. Walterpet

    Walterpet Member

    ls /etc/letsencrypt
    accounts archive cli.ini csr keys live renewal renewal-hooks
    Code:
    ls /etc/letsencrypt
    accounts  archive  cli.ini  csr  keys  live  renewal  renewal-hooks
    
     
  12. Walterpet

    Walterpet Member

    ls /etc/letsencrypt
    accounts archive cli.ini csr keys live renewal renewal-hooks
     
  13. till

    till Super Moderator Staff Member ISPConfig Developer

    I asked you for the result of two commands and you posted just the ls output.
     
  14. Walterpet

    Walterpet Member

    root@srv ~ # hostname -f
    srv.promitalia.org
    root@srv ~ # ls /etc/letsencrypt
    accounts archive cli.ini csr keys live renewal renewal-hooks
     
  15. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    Check in ISPConfig Panel if there is website https://srv.promitalia.org/. It seems there is.
    If there is, like @till wrote in #4 it may be certificates are a bit confused and this needs to be sorted out.
     
  16. Walterpet

    Walterpet Member

    I checked and that’s what I wrote
    Consider that on that server I have 19 other websites and they all work well
     
  17. till

    till Super Moderator Staff Member ISPConfig Developer

    Please post the output of:

    ls /root/.acme.sh/
     
  18. Walterpet

    Walterpet Member

    root@srv ~ # ls /root/.acme.sh/
    account.conf dnsapi notify
    acme.sh ecoferro.eu pettinati.com
    acme.sh.env exciclisti.it procalcionapoli.it
    assomodelle.it fotociclismo.it promitalia.org
    ca goldengirls.it promoitaliasport.it
    calciodonne.it http.header puntociclismo.it
    casaledisanminiato.com lecerbaie.it srv.promitalia.org
    chemicalflap.com magistraturasanmartino.it womensport.it
    cicliste.eu matildevitillo.it
    deploy mipeg.it
     
  19. till

    till Super Moderator Staff Member ISPConfig Developer

    Run:

    ispconfig_update.sh --force

    and choose to create a new SSL cert when the ISPConfig updater asks.
     
  20. Walterpet

    Walterpet Member

    Restarting services ...
    PHP Warning: Packets out of order. Expected 1 received 0. Packet size=30 in /tm p/update_runner.sh.2JwkAhlVTn/install/lib/mysql.lib.php on line 207
    Update finished.
     

Share This Page