HORRIBLE week continues!!!

Rereun the update:

cd /tmp
wget https://www.ispconfig.org/downloads/ISPConfig-3.1.15p3.tar.gz
tar xvfz ISPConfig-3.1.15p3.tar.gz
cd ispconfig3_install/install
php -q update.php

and this time, don't enter a password when you create a new SSL cert for the ISPConfig GUI.

 

You can just rerun the update to generate a new certificate and hit enter for no passphrase.

 

What kind of SSL cert did you use before for the ns9? Was it an LE cert? if yes, then you can not generate a new cert using the ispconfig updater as an le cert is a manually configured symlink outside of ispconfig.

probably in the ispconfig.vhost. But I don't know your exact setup, so might be that the ns9 vhost is affected too.

 

This would be plain wrong as it does not cause any damage under normal circumstances on systems that are installed according to perfect server guide.

Disable the symlinks of the ns9 vhost and ispconfig vhost in apache sites-enabled directory and then restart apache. When the sites are up again, check if the paths to the ssl certs in those two files are correct and if any of them points to a password protected cert.

 

First, try removing the /etc/apache2/sites-enabled/000-ispconfig.vhost symlink and see if apache will start. If so, customer sites are up and you can work on the certificate for the panel.

 

Nevermind, already done, I'm slow in responding today.

 

This does not matter as it might be that you replaced the SSL cert of the ns9 site trough their symlinks with a different SSL cert.

 

And I asked you to remove the ns9 and ispconfig vhost symlinks only and not 000-isp* as this would remove the ispconfig.conf symlink as well which might cause your other sites to fail.

 

That's ok, but not what I asked you to do. I asked you to remove (or copy one level higher if you prefer that) the symlink for the ispconfig vhost and the ns9 vhost, you have to do that for BOTH vhosts and to NOT copy or remove the ispconfig.conf symlink. Then restart apache.

If it would have been a standard install, it would have worked. Due to the use of Let's encrypt and symlinks, there seem to be some interference between le and the SSL cert.

That's what I guessed, it's not a le cert, its the manually created cert which overwrote the le cert trough the symlinks that point the ispconfig cert to le on your system.

You wiped out the SSL cert used by the whole system, so all services are affected by that that use the cert.

 

Have you tried what Till suggested in #2, run the update but select no when asked if you want to create a new SSL cert?

 

you can try these commands to create a new self signed SSL cert for ispconfig:

Code:

cd /usr/local/ispconfig/interface/ssl
mv ispserver.crt ispserver.crt-$(date +"%y%m%d%H%M%S").bak
mv ispserver.key ispserver.key-$(date +"%y%m%d%H%M%S").bak
mv ispserver.pem ispserver.pem-$(date +"%y%m%d%H%M%S").bak
openssl genrsa -des3 -out ispserver.key 4096
openssl req -new -key ispserver.key -out ispserver.csr
openssl x509 -req -days 3650 -in ispserver.csr \
-signkey ispserver.key -out ispserver.crt
openssl rsa -in ispserver.key -out ispserver.key.insecure
mv ispserver.key ispserver.key.secure
mv ispserver.key.insecure ispserver.key
cat ispserver.{key,crt} > ispserver.pem
chmod 600 ispserver.pem

this should give you a new self-signed SSL cert for ispconfig. Then copy back the ispconfig vhost symlink, restart apache, login to ispconfig, disable the letsencrypt checkbox in the ns9 website, press save, enable the le checkbox for ns9 vhost again, press save, then check if ns9 works again with a new and correct le cert. if that's ok, run the commands:

Code:

mv ispserver.crt ispserver.crt-$(date +"%y%m%d%H%M%S").bak
mv ispserver.key ispserver.key-$(date +"%y%m%d%H%M%S").bak
mv ispserver.pem ispserver.pem-$(date +"%y%m%d%H%M%S").bak
ln -s /etc/letsencrypt/live/$(hostname -f)/fullchain.pem ispserver.crt
ln -s /etc/letsencrypt/live/$(hostname -f)/privkey.pem ispserver.key
cat ispserver.{key,crt} > ispserver.pem
chmod 600 ispserver.pem

to enable le back for ispconfig and the other services.