Creating letsencrypt cert for ispconfig fails

Discussion in 'Installation/Configuration' started by muekno, Jul 12, 2021.

  1. muekno

    muekno Active Member HowtoForge Supporter

    On a customers server I can not create a cert fpr ISPConfig on port 8080.
    Single server system Letsencrypt Certs for 2 new websites are issued without a problem and works fine. ISPConfig 3,.2.5 on port 8080 has a self signed cert. So I tried as I learned an ISPConfig update with --force as it worked on other servers, but I get an self signed cert again. The servers IP is correct resolved by DNS, The reelevant lines from letsencrypt log should be
    Code:
    Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
      Domain: me-web.max-eckstein.de
      Type:   connection
      Detail: Fetching http://me-web.max-eckstein.de/.well-known/acme-challenge/8W3KbYKW1x-7wTxgV1btvl5mOmr3PY2IIp5Zx0ssDMk: Connection refused
    
    Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.
    
    2021-07-12 07:59:56,163:DEBUG:certbot._internal.error_handler:Encountered exception:
    Traceback (most recent call last):
      File "/snap/certbot/1280/lib/python3.8/site-packages/certbot/_internal/auth_handler.py", line 93, in handle_authorizations
        self._poll_authorizations(authzrs, max_retries, best_effort)
      File "/snap/certbot/1280/lib/python3.8/site-packages/certbot/_internal/auth_handler.py", line 181, in _poll_authorizations
        raise errors.AuthorizationError('Some challenges have failed.')
    certbot.errors.AuthorizationError: Some challenges have failed.
    
    2021-07-12 07:59:56,163:DEBUG:certbot._internal.error_handler:Calling registered functions
    2021-07-12 07:59:56,164:INFO:certbot._internal.auth_handler:Cleaning up challenges
    2021-07-12 07:59:56,164:DEBUG:certbot._internal.plugins.webroot:Removing /usr/local/ispconfig/interface/acme/.well-known/acme-challenge/8W3KbYKW1x-7wTxgV1btvl5mOmr3PY2IIp5Zx0ssDMk
    2021-07-12 07:59:56,164:DEBUG:certbot._internal.plugins.webroot:All challenges cleaned up
    2021-07-12 07:59:56,164:DEBUG:certbot._internal.log:Exiting abnormally:
    Traceback (most recent call last):
      File "/snap/certbot/1280/bin/certbot", line 8, in <module>
        sys.exit(main())
      File "/snap/certbot/1280/lib/python3.8/site-packages/certbot/main.py", line 15, in main
        return internal_main.main(cli_args)
      File "/snap/certbot/1280/lib/python3.8/site-packages/certbot/_internal/main.py", line 1574, in main
        return config.func(config, plugins)
      File "/snap/certbot/1280/lib/python3.8/site-packages/certbot/_internal/main.py", line 1435, in certonly
        lineage = _get_and_save_cert(le_client, config, domains, certname, lineage)
      File "/snap/certbot/1280/lib/python3.8/site-packages/certbot/_internal/main.py", line 128, in _get_and_save_cert
        lineage = le_client.obtain_and_enroll_certificate(domains, certname)
      File "/snap/certbot/1280/lib/python3.8/site-packages/certbot/_internal/client.py", line 445, in obtain_and_enroll_certificate
        cert, chain, key, _ = self.obtain_certificate(domains)
      File "/snap/certbot/1280/lib/python3.8/site-packages/certbot/_internal/client.py", line 375, in obtain_certificate
        orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
      File "/snap/certbot/1280/lib/python3.8/site-packages/certbot/_internal/client.py", line 425, in _get_order_and_authorizations
        authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
      File "/snap/certbot/1280/lib/python3.8/site-packages/certbot/_internal/auth_handler.py", line 93, in handle_authorizations
        self._poll_authorizations(authzrs, max_retries, best_effort)
      File "/snap/certbot/1280/lib/python3.8/site-packages/certbot/_internal/auth_handler.py", line 181, in _poll_authorizations
        raise errors.AuthorizationError('Some challenges have failed.')
    certbot.errors.AuthorizationError: Some challenges have failed.
    2021-07-12 07:59:56,166:ERROR:certbot._internal.log:Some challenges have failed
    Do not know whats going wrong, as ports 80, 443 and 8080 are mapped to the correct private address and I can access the websites with valid certs and the ISPConfig portal via external server https://address:8080 al well with https://servername.domain.tld:8080 but with a unsecure warning in case of the self signed cert.
    Server ist DEBIN 10 latest patches

    Thanks for any help
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

  3. muekno

    muekno Active Member HowtoForge Supporter

    http://me-web.max-eckstein.de works fine and showed the default apache site index.html under /var/www. I created a new index.html and did a refresh and it showed the new page.
    As written the certs for the web sites max-eckstein.de www.max-eckstein.de as mezargen.de and www.mezargen.de were created fine while the last 2 are redirected to max-eckstein.de working fine. you can try yourself http://me-web.max-eckstein.de will show text "dummy website", while the http;//max-eckstein.de and the 3 others will be rerdirected to https://max-eckstein.de as configured and will show "hello world"
    thanks for your quick response

    P.S. the DNS entry for me-web.max-eckstein.de was created last friday so thats should be enough time
     

Share This Page