Looking on /var/log/letsencrypt/letsencrypt.log. It looks like I allways have a problem with Lets Encrypt? Code: 2020-01-06 10:58:02,341:DEBUG:certbot._internal.main:certbot version: 1.0.0 2020-01-06 10:58:02,342:DEBUG:certbot._internal.main:Arguments: ['-n', '--text', '--agree-tos', '--expand', '--authenticator', 'webroot', '--server', 'https://acme-v02.api.letsencrypt.org/directory', '--rsa-key-size', '4096', '--email', '[email protected]', '--webroot-map', '{"monsite.fr":"\\/usr\\/local\\/ispconfig\\/interface\\/acme","www.monsite.fr":"\\/usr\\/local\\/ispconfig\\/interface\\/acme"}'] 2020-01-06 10:58:02,342:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2020-01-06 10:58:02,353:DEBUG:certbot._internal.log:Root logging level set at 20 2020-01-06 10:58:02,353:INFO:certbot._internal.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log 2020-01-06 10:58:02,354:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None 2020-01-06 10:58:02,358:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot Description: Place files in webroot directory Interfaces: IAuthenticator, IPlugin Entry point: webroot = certbot._internal.plugins.webroot:Authenticator Initialized: <certbot._internal.plugins.webroot.Authenticator object at 0x7f4b1ecd4250> Prep: True 2020-01-06 10:58:02,358:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot._internal.plugins.webroot.Authenticator object at 0x7f4b1ecd4250> and installer None 2020-01-06 10:58:02,358:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None 2020-01-06 10:58:02,363:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(status=None, terms_of_service_agreed=None, agreement=None, only_return_existing=None, contact=(), key=None, external_account_binding=None), uri=u'https://acme-v02.api.letsencrypt.org/acme/acct/75004720', new_authzr_uri=None, terms_of_service=None), 4f1d1e5543366f52bc37ba6497ef8b79, Meta(creation_host=u'ns3009231.ip-151-80-21.eu', creation_dt=datetime.datetime(2020, 1, 2, 14, 12, 52, tzinfo=<UTC>)))> 2020-01-06 10:58:02,363:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory. 2020-01-06 10:58:02,365:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443 2020-01-06 10:58:03,008:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 658 2020-01-06 10:58:03,010:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Mon, 06 Jan 2020 09:58:02 GMT Content-Type: application/json Content-Length: 658 Connection: keep-alive Cache-Control: public, max-age=0, no-cache X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "IxwDsPJ0elc": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417", "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change", "meta": { "caaIdentities": [ "letsencrypt.org" ], "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf", "website": "https://letsencrypt.org" }, "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct", "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce", "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order", "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert" } 2020-01-06 10:58:03,024:DEBUG:certbot._internal.cert_manager:Renewal conf file /etc/letsencrypt/renewal/www.monsite.fr.conf is broken. Skipping. 2020-01-06 10:58:03,025:DEBUG:certbot._internal.cert_manager:Traceback was: Traceback (most recent call last): File "/opt/eff.org/certbot/venv/local/lib/python2.7/site-packages/certbot/_internal/cert_manager.py", line 382, in _search_lineages candidate_lineage = storage.RenewableCert(renewal_file, cli_config) File "/opt/eff.org/certbot/venv/local/lib/python2.7/site-packages/certbot/_internal/storage.py", line 446, in __init__ "file reference".format(self.configfile)) CertStorageError: renewal config file {} is missing a required file reference 2020-01-06 10:58:03,031:INFO:certbot._internal.renewal:Cert not yet due for renewal 2020-01-06 10:58:03,031:INFO:certbot._internal.main:Keeping the existing certificate 2020-01-06 10:58:03,463:DEBUG:certbot._internal.main:certbot version: 1.0.0 2020-01-06 10:58:03,464:DEBUG:certbot._internal.main:Arguments: ['--domains', 'monsite.fr', '--domains', 'www.monsite.fr'] 2020-01-06 10:58:03,464:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2020-01-06 10:58:03,476:DEBUG:certbot._internal.log:Root logging level set at 20 2020-01-06 10:58:03,476:INFO:certbot._internal.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log 2020-01-06 10:58:03,486:WARNING:certbot._internal.cert_manager:Renewal configuration file /etc/letsencrypt/renewal/www.monsite.fr.conf produced an unexpected error: renewal config file {} is missing a required file reference. Skipping. 2020-01-06 10:58:03,486:DEBUG:certbot._internal.cert_manager:Traceback was: Traceback (most recent call last): File "/opt/eff.org/certbot/venv/local/lib/python2.7/site-packages/certbot/_internal/cert_manager.py", line 79, in certificates renewal_candidate = storage.RenewableCert(renewal_file, config) File "/opt/eff.org/certbot/venv/local/lib/python2.7/site-packages/certbot/_internal/storage.py", line 446, in __init__ "file reference".format(self.configfile)) CertStorageError: renewal config file {} is missing a required file reference 2020-01-06 10:58:03,496:DEBUG:urllib3.connectionpool:Starting new HTTP connection (1): ocsp.int-x3.letsencrypt.org:80 2020-01-06 10:58:03,654:DEBUG:urllib3.connectionpool:http://ocsp.int-x3.letsencrypt.org:80 "POST / HTTP/1.1" 200 527 2020-01-06 10:58:03,656:DEBUG:certbot._internal.ocsp:OCSP response for certificate /etc/letsencrypt/live/www.monsite.fr-0001/cert.pem is signed by the certificate's issuer. 2020-01-06 10:58:03,661:DEBUG:certbot._internal.ocsp:OCSP certificate status for /etc/letsencrypt/live/www.monsite.fr-0001/cert.pem is: OCSPCertStatus.GOOD I specify that I have changed absolutely nothing since Florian's help on my problem.
Okay, My mistake, I thought I could connect with addresses like "imap.mydomail.tld". That work when i connect with my server FQDN . About my SSL certificates, do you think there is still an error with my Let's encrypt renewal? I unchecked then re-checked SSL/LS in "Web Domain". The checkbox remains checked, SSL is working, but "letsencrypt.log" have several strange logs? Will I have problems with renewal? Maybe I need to reply this in my other thread or re-contact Florian?
You should ask Florian to re-check the file /etc/letsencrypt/renewal/www.monsite.fr.conf if it is incomplete or contains errors.
Ok. Thank you very much for your help, Till. Have a nice day. [EDIT] I have edited my previous messages to anonymize my infos.