FileNotFoundError: [Errno 2] No such file or directory: 'usr/local/ispconfig/interface/acme'

Hi,
2 problems with LE renewall today 2020-01-17:

1/ CERTBOT reports that certificates expire on 2020-02-19 but THUNDERBIRD reports that certificates expire on 2020-01-17

2/ For certificates ready for renewal, renewall fails with error "FileNotFoundError: [Errno 2] No such file or directory: 'usr/local/ispconfig/interface/acme'"

/var/log/letsencrypt/letsencrypt.log:

Code:

020-01-17 10:20:45,714:DEBUG:certbot.plugins.webroot:Creating root challenges validation dir at usr/local/ispconfig/interface/acme/.well-known/acme-challenge
2020-01-17 10:20:45,714:DEBUG:certbot.error_handler:Encountered exception:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 75, in handle_authorizations
    resp = self._solve_challenges(aauthzrs)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 139, in _solve_challenges
    resp = self.auth.perform(all_achalls)
  File "/usr/lib/python3/dist-packages/certbot/plugins/webroot.py", line 83, in perform
    self._create_challenge_dirs()
  File "/usr/lib/python3/dist-packages/certbot/plugins/webroot.py", line 172, in _create_challenge_dirs
    stat_path = os.stat(path)
FileNotFoundError: [Errno 2] No such file or directory: 'usr/local/ispconfig/interface/acme'

but:

Code:

ks307144 ~ > ll /usr/local/ispconfig/interface/
total 32
drwxr-sr-x  3 ispconfig ispconfig 4096 janv. 19  2019 acme

Access problem ?

 

Have you restarted your mail services after certificate renew?

 

No. When you define a certificate in ISPCONFIG, it doesn't automaticaly manage renewals ?

 

Only for the websites, for all other services you have to take care for yourself.

 

Adding a certbot renew -q in crontab is enough ?

 

enough for what? ISPconfig does an certbot renew automatically which renews all certificates. But it does not restart any mail / ftp / etc services after a new certificate was issued. A "systemctl restart postfix dovecot ..." should do it.

 

Depends on how you use the cert for mail. If you create a symlink for smtpd.{key,cert} to the ssl-crt in /var/ww/client/clientX/weby/ssl, the cert will be renewed. postfix detects this by itself, dovecot needs a restart.

 

Let's Encrypt can stop and start services when renewing certificate. See
https://www.howtoforge.com/communit...ts-of-errors-in-standalone.79363/#post-379833