Let's Encrypt SSL Certificate will not install.

Discussion in 'ISPConfig 3 Priority Support' started by Wade John Beckett, Nov 21, 2024 at 7:42 AM.

  1. Wade John Beckett

    Wade John Beckett Member HowtoForge Supporter

    Hello,
    I trust you are well.

    I am fairly stumped here. I have a site on my ISPConfig 3 server with about 5 other sites. All of the other sites are getting a Let's Encrypt SSL certificate fine, but belvederelodge.ie simply won't issue even though it shows as issued in ISPConfig 3.

    I am not sure which logs to check either.
     

    Attached Files:

  2. till

    till Super Moderator Staff Member ISPConfig Developer

  3. Wade John Beckett

    Wade John Beckett Member HowtoForge Supporter

    Hi Till,
    I trust you are well.

    Thank you so much. I have been through the article step by step, and I cannot seem to identify the issue. All other sites are issuing fine.

    When I get to the final steps regarding enabling debug mode, I am now seeing the following on this particular site:

    Code:
     CONFIGURATION ERROR
    2024-11-21 14:44 :
    Job for apache2.service failed because the control process exited with error code.
    See "systemctl status apache2.service" and "journalctl -xeu apache2.service" for details.
    
    I though something might have been wrong with this site that it is not issuing the certificate.

    I then tried deleting the site and recreating it, but the problem still persists.

    Again, all other sites are fine, it is just one site that is not working.
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    As mentioned in the instructions, please post the debug output to get help if you could not find the reason yourself.
     
  5. Wade John Beckett

    Wade John Beckett Member HowtoForge Supporter

    Code:
    root@trinity:~# /usr/local/ispconfig/server/server.sh
    21.11.2024-17:30 - DEBUG [z php fpm incron reload plugin.inc:31] - You must install incron in order to use this plugin
    21.11.2024-17:30 - DEBUG [plugins.inc:155] - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'.
    21.11.2024-17:30 - DEBUG [server:224] - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
    finished server.php.
    
    I also found this in the Let's encrypt log:
    Code:
    [Thu Nov 21 04:25:02 PM UTC 2024] LE_WORKING_DIR='/root/.acme.sh'
    [Thu Nov 21 04:25:02 PM UTC 2024] Running cmd: issue
    [Thu Nov 21 04:25:02 PM UTC 2024] _main_domain='belvederelodge.ie'
    [Thu Nov 21 04:25:02 PM UTC 2024] _alt_domains='www.belvederelodge.ie'
    [Thu Nov 21 04:25:02 PM UTC 2024] Using config home: /root/.acme.sh
    [Thu Nov 21 04:25:02 PM UTC 2024] default_acme_server='https://acme-v02.api.letsencrypt.org/directory'
    [Thu Nov 21 04:25:02 PM UTC 2024] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
    [Thu Nov 21 04:25:02 PM UTC 2024] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
    [Thu Nov 21 04:25:02 PM UTC 2024] _ACME_SERVER_PATH='directory'
    [Thu Nov 21 04:25:02 PM UTC 2024] DOMAIN_PATH='/root/.acme.sh/belvederelodge.ie'
    [Thu Nov 21 04:25:02 PM UTC 2024] '/usr/local/ispconfig/interface/acme' does not contain 'dns'
    [Thu Nov 21 04:25:02 PM UTC 2024] Le_NextRenewTime='1737268870'
    [Thu Nov 21 04:25:02 PM UTC 2024] _saved_domain='belvederelodge.ie'
    [Thu Nov 21 04:25:02 PM UTC 2024] _saved_alt='www.belvederelodge.ie'
    [Thu Nov 21 04:25:02 PM UTC 2024] _normized_saved_domains='belvederelodge.ie,www.belvederelodge.ie,'
    [Thu Nov 21 04:25:02 PM UTC 2024] _normized_domains='belvederelodge.ie,www.belvederelodge.ie,'
    [Thu Nov 21 04:25:02 PM UTC 2024] Domains not changed.
    [Thu Nov 21 04:25:02 PM UTC 2024] Skipping. Next renewal time is: 2025-01-19T06:41:10Z
    [Thu Nov 21 04:25:02 PM UTC 2024] Add '--force' to force renewal.
    [Thu Nov 21 04:25:02 PM UTC 2024] Let's find the script directory.
    [Thu Nov 21 04:25:02 PM UTC 2024] _SCRIPT_='/root/.acme.sh/acme.sh'
    [Thu Nov 21 04:25:02 PM UTC 2024] _script='/root/.acme.sh/acme.sh'
    [Thu Nov 21 04:25:02 PM UTC 2024] _script_home='/root/.acme.sh'
    [Thu Nov 21 04:25:02 PM UTC 2024] Using default home: /root/.acme.sh
    [Thu Nov 21 04:25:02 PM UTC 2024] Using config home: /root/.acme.sh
    [Thu Nov 21 04:25:02 PM UTC 2024] LE_WORKING_DIR='/root/.acme.sh'
    [Thu Nov 21 04:25:02 PM UTC 2024] Running cmd: installcert
    [Thu Nov 21 04:25:02 PM UTC 2024] Using config home: /root/.acme.sh
    [Thu Nov 21 04:25:02 PM UTC 2024] default_acme_server='https://acme-v02.api.letsencrypt.org/directory'
    [Thu Nov 21 04:25:02 PM UTC 2024] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
    [Thu Nov 21 04:25:02 PM UTC 2024] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
    [Thu Nov 21 04:25:02 PM UTC 2024] _ACME_SERVER_PATH='directory'
    [Thu Nov 21 04:25:02 PM UTC 2024] DOMAIN_PATH='/root/.acme.sh/belvederelodge.ie'
    [Thu Nov 21 04:25:02 PM UTC 2024] Installing key to: /var/www/clients/client3/web11/ssl/belvederelodge.ie-le.key
    [Thu Nov 21 04:25:02 PM UTC 2024] Installing full chain to: /var/www/clients/client3/web11/ssl/belvederelodge.ie-le.crt
    [Thu Nov 21 04:25:02 PM UTC 2024] Running reload cmd: systemctl force-reload apache2.service
    [Thu Nov 21 04:25:02 PM UTC 2024] Reload successful
    [Thu Nov 21 05:25:02 PM UTC 2024] LE_WORKING_DIR='/root/.acme.sh'
    [Thu Nov 21 05:25:02 PM UTC 2024] Running cmd: issue
    [Thu Nov 21 05:25:02 PM UTC 2024] _main_domain='belvederelodge.ie'
    [Thu Nov 21 05:25:02 PM UTC 2024] _alt_domains='www.belvederelodge.ie'
    [Thu Nov 21 05:25:02 PM UTC 2024] Using config home: /root/.acme.sh
    [Thu Nov 21 05:25:02 PM UTC 2024] default_acme_server='https://acme-v02.api.letsencrypt.org/directory'
    [Thu Nov 21 05:25:02 PM UTC 2024] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
    [Thu Nov 21 05:25:02 PM UTC 2024] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    You must tick the Let's encrypt checkbox again before you run server.sh.
     

Share This Page