Let's Encrypt not working after clean install

Discussion in 'ISPConfig 3 Priority Support' started by Thijs Koetsier, Jul 23, 2024.

Tags:
  1. Thijs Koetsier

    Thijs Koetsier New Member HowtoForge Supporter

    Sorry in advance if this is answered before. I tried looking for this issue, but couldn't find related info, so I'm asking now.

    I have installed ISPconfig on a clean Ubuntu 24.04 LTS installation using the Perfect Server Automated Installation as listed here:
    https://www.howtoforge.com/ispconfig-autoinstall-debian-ubuntu/.
    Then I used the migration tool as listed here:
    https://www.howtoforge.com/tutorial...fig-31-single-server?utm_source=pocket_shared

    I cannot create certificates using letsencrypt. In the interface I can click on both boxes SSL and Let's Encrypt SSL, the system waits for the job to start and afterwards keeps the boxes checked, but the domain still only http and in file in sites-available only shows the :80 part and no other SSL specific- files are created. The domain is set up correctly in the DNS and pointing to the server on which I'm trying to create the certificate.

    When using certbot on the command line of the server for the specific domain, a letsencyrpt certificate is created, and a corresponding file "....-vhost-le-ssl.conf" is created. In itself certbot seems to be working, it doesn't seem to be triggered by ISPconfig.

    I'm hoping I missed something during install/configuring and hope someone can point me in the right direction.
     
    Thijs Koetsier, Jul 23, 2024
    #1
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    This will cause LE certs in ISPConfig to fail for this site in the future and damage the whole setup. Never use certbot manually on the command line for a site in ISPConfig, certbot is unable to edit the vhost files correctly and damages them in a way that the site can not be managed anymore, even apache can stop woking completely. You should have followed the Let's encrypt error FAQ instead to solve your issue: https://forum.howtoforge.com/threads/lets-encrypt-error-faq.74179/

    You must take care now to clean up your system from the damage that certbot has caused by deleting all certs and config files in Apache and Nginx that certbot created or modified. Especially all *vhost-le-ssl.conf must be removed, and all symlinks to them, plus you must manually delete all certs that you created with certbot for a site in ISPConfig as they fail to renew and block LE in ISPConfig.

    After you have completed all the cleanup, you can fix the original error by following the Let's Encrypt error FAQ. The most likely reason for your issue is that migration mode is still on. See the Let's Encrypt error FAQ for that; it's mentioned there, too.
     
    till, Jul 23, 2024
    #2
  3. Thijs Koetsier

    Thijs Koetsier New Member HowtoForge Supporter

    Thanks for your prompt reply till. I figured this must be a fault by my own making somewhere.
    I'll just do a clean reinstall repeating the steps stated above and migrate again, making sure I'll look into the migration mode.
     
    Thijs Koetsier, Jul 23, 2024
    #3
    till likes this.
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    I don't think a reinstall is needed; you just have to clean up the certbot changes. But if you are unsure what certbot has changed, a reinstall is the safe solution, of course.
     
    till, Jul 23, 2024
    #4
    Thijs Koetsier likes this.
  5. Thijs Koetsier

    Thijs Koetsier New Member HowtoForge Supporter

    That did the trick, thank you for your response!
     
    Thijs Koetsier, Jul 23, 2024
    #5
    till likes this.

Share This Page