Hello, On master (3.2.12) letsencrypt is not working, when i try to generate SSL the website back without. In server monitoring logs i got the error "Unable to read logfile" The /var/log/ispconfig has not acme.log file I can check and solve it ? Additional info: i'm on a haproxy failover, is it possible to use letsencrypt with cname option on ispconfig ?
Follow this checklist step-by-step to find out why you do not get a LE cert: https://forum.howtoforge.com/threads/lets-encrypt-error-faq.74179/
Thanks Till, Probably due to HAproxy, my ispconfig in "private" side Cronjob log: Sun Oct 13 13:51:08 UTC 2024 [Sun Oct 13 13:51:08 UTC 2024] staging.xxxxx.com: Invalid status. Verification error details: During secondary validation: Remote PerformValidation RPC failed Sun Oct 13 13:51:08 UTC 2024 [Sun Oct 13 13:51:08 UTC 2024] Please add '--debug' or '--log' to see more information. Sun Oct 13 13:51:08 UTC 2024 [Sun Oct 13 13:51:08 UTC 2024] See: acmesh-official/acme.sh/wiki/How-to-debug-acme.sh is it possible to launch script manually or to have a cname option ?
Please follow the debug procedure explained in the Let's encrypt error FAQ and post the output you get from the server.sh. No, ISPConfig supports only http auth. You must configure your proxy to forward all requests for the domain to the ISPconfig website.
Most likely your HAProxy is in the way. Is HTTP traffic redirected to HTTPS (in HAProxy or your server)? Is your HAProxy then configured to passhrough HTTPS traffic o your server or does it operate as SSL endpoint and re-establishes a new HTTPS connection to your server? If HAProxy is an SSL endpoint then that could cause LE auth issues.
As @till said unless you mean cname record vs A record, which both could work if you are not behind a blocking proxy.