Certificates not being created

Discussion in 'Installation/Configuration' started by robbo007, Aug 7, 2024.

  1. robbo007

    robbo007 New Member

    Hi guys,
    I'm going through the guide (https://forum.howtoforge.com/threads/lets-encrypt-error-faq.74179/) as when I click to turn on ssl and letsencrypt it gets disabled automatically after trying to enable. I'm running 3.2 but can't see the acme.log anywhere. not here:
    (When using acme.sh, it can be in /var/log/ispconfig/acme.log or /root/.acme.sh/acme.sh.log)

    I'm going to run ispconfig_update.sh --force to reconfigure services. Will this touch any other settings on the server? I've got most things setup now and don't want to break the configuration ?

    Thanks,
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    You have not read and followed the FAQ until the end yet. Read it until the end of the page, then you know what to do and what you must post to get help (hint: using debug mode and posting the debug output).

    Doing this update makes no sense and can not help with your issue, as it is not related to website certs in any way. And doing an update is safe, unless you manually altered any config file managed by ISPConfig. And if you changed config files managed by ISPConfig, then you must have made your changes update-safe by creating proper custom templates.
     
    Last edited: Aug 7, 2024
  3. robbo007

    robbo007 New Member

    Hi,
    So I went through all the FAQ. I'm on ISPCofnig 3.2 so its using acme.sh. I don't see the logs in the two specified paths in the FAQ. Running the debug gives me the following:

    Code:
    sosaria:/var/log/ispconfig# /usr/local/ispconfig/server/server.sh
    07.08.2024-23:27 - DEBUG [plugins.inc:155] - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'.
    07.08.2024-23:27 - DEBUG [server:224] - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
    finished server.php.
    
    DNS seems to be working now for all the sites. I'm only testing SSL on the main site.
    Regards,
    Rob
     
  4. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    When running debug mode, you need to trigger a action to request a certificate and then run the server.sh script.
     
  5. robbo007

    robbo007 New Member

    Upps. Sorry. Here is the debug after the trigger request:
    Code:
    sosaria:/etc/ssh# /usr/local/ispconfig/server/server.sh
    08.08.2024-00:19 - DEBUG [plugins.inc:155] - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'.
    08.08.2024-00:19 - DEBUG [server:184] - Found 1 changes, starting update process.
    08.08.2024-00:19 - DEBUG [plugins.inc:118] - Calling function 'ssl' from plugin 'apache2_plugin' raised by event 'web_domain_update'.
    08.08.2024-00:19 - DEBUG [plugins.inc:118] - Calling function 'update' from plugin 'apache2_plugin' raised by event 'web_domain_update'.
    08.08.2024-00:19 - DEBUG [system.inc:2436] - safe_exec cmd: chattr -i '/var/www/clients/client0/web15' - return code: 0
    08.08.2024-00:19 - DEBUG [system.inc:2436] - safe_exec cmd: chattr +i '/var/www/clients/client0/web15' - return code: 0
    08.08.2024-00:19 - DEBUG [system.inc:2436] - safe_exec cmd: df -T '/var/www/clients/client0/web15'|awk 'END{print $2,$NF}' - return code: 0
    08.08.2024-00:19 - DEBUG [system.inc:2436] - safe_exec cmd: which 'setquota' 2> /dev/null - return code: 0
    08.08.2024-00:19 - DEBUG [system.inc:2436] - safe_exec cmd: setquota -u 'web15' '0' '0' 0 0 -a &> /dev/null - return code: 0
    setquota: Not setting block grace time on /dev/mmcblk0p2 because softlimit is not exceeded.
    setquota: Not setting inode grace time on /dev/mmcblk0p2 because softlimit is not exceeded.
    08.08.2024-00:19 - DEBUG [system.inc:2436] - safe_exec cmd: setquota -T -u 'web15' 604800 604800 -a &> /dev/null - return code: 0
    08.08.2024-00:19 - DEBUG [system.inc:2436] - safe_exec cmd: chattr +i '/var/www/clients/client0/web15' - return code: 0
    08.08.2024-00:20 - WARNING - Could not verify domain robcraig.com, so excluding it from letsencrypt request.
    08.08.2024-00:21 - WARNING - Could not verify domain www.robcraig.com, so excluding it from letsencrypt request.
    08.08.2024-00:21 - DEBUG [system.inc:2436] - safe_exec cmd: which 'apache2ctl' 2> /dev/null - return code: 0
    08.08.2024-00:21 - DEBUG [system.inc:2436] - safe_exec cmd: which 'apache2ctl' 2> /dev/null - return code: 0
    08.08.2024-00:21 - DEBUG [apache2 plugin.inc:1892] - Writing the vhost file: /etc/apache2/sites-available/robcraig.com.vhost
    08.08.2024-00:21 - DEBUG [system.inc:2436] - safe_exec cmd: which 'apache2ctl' 2> /dev/null - return code: 0
    08.08.2024-00:21 - DEBUG [apache2 plugin.inc:3464] - Writing the PHP-FPM config file: /etc/php/7.2/fpm/pool.d/web15.conf
    08.08.2024-00:21 - DEBUG [services.inc:56] - Calling function 'restartPHP_FPM' from module 'web_module'.
    08.08.2024-00:21 - DEBUG [system.inc:2089] - Trying to use Systemd to restart service
    08.08.2024-00:21 - DEBUG [system.inc:2436] - safe_exec cmd: systemctl is-enabled 'php7.2-fpm' 2>&1 - return code: 0
    08.08.2024-00:21 - DEBUG [web module.inc:316] - Restarting php-fpm: systemctl reload php7.2-fpm.service
    08.08.2024-00:21 - DEBUG [apache2 plugin.inc:2010] - Apache status is: running
    08.08.2024-00:21 - DEBUG [services.inc:56] - Calling function 'restartHttpd' from module 'web_module'.
    08.08.2024-00:21 - DEBUG [system.inc:2089] - Trying to use Systemd to restart service
    08.08.2024-00:21 - DEBUG [system.inc:2436] - safe_exec cmd: systemctl is-enabled 'apache2' 2>&1 - return code: 0
    08.08.2024-00:21 - DEBUG [web module.inc:246] - Restarting httpd: systemctl restart apache2.service
    08.08.2024-00:21 - DEBUG [apache2 plugin.inc:2013] - Apache restart return value is: 0
    08.08.2024-00:21 - DEBUG [apache2 plugin.inc:2024] - Apache online status after restart is: running
    08.08.2024-00:21 - DEBUG [plugins.inc:118] - Calling function 'incronUpdate' from plugin 'z_php_fpm_incron_reload_plugin' raised by event 'web_domain_update'.
    08.08.2024-00:21 - DEBUG [z php fpm incron reload plugin.inc:49] - Document root and PHP version unchanged. Not updating incron configuration.
    08.08.2024-00:21 - DEBUG [modules.inc:240] - Processed datalog_id 382
    08.08.2024-00:21 - DEBUG [server:224] - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
    finished server.php.
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Ok, that's better and something we can work with:

    So both domains get exclude because they can not be reached from your server. This is mentioned as step 4 in the FAQ:

    So you enable the Skip Let's Encrypt Check option and try again.
     
  7. robbo007

    robbo007 New Member

    Thank you. All working :)
     

Share This Page