Lets Encrypt certificate registration fails, but is apparently succesfull

Discussion in 'ISPConfig 3 Priority Support' started by Alexander Foti, Feb 22, 2021.

Page 1 of 2
  1. Alexander Foti

    Alexander Foti Member HowtoForge Supporter

    Hi all

    (Debian Stretch) ISPConfig 3.2.1

    I have a domain that fails letsencrypt certificate creation in the ISPConfig log:

    Code:
        R=0 ; C=0 ; /root/.acme.sh/acme.sh --issue -d dieselbikeforum.com -d www.dieselbikeforum.com -w /usr/local/ispconfig/interface/acme --always-force-new-domain-key --keylength 4096; R=$? ; if [[ $R -eq 0 || $R -eq 2 ]] ; then /root/.acme.sh/acme.sh --install-cert -d dieselbikeforum.com -d www.dieselbikeforum.com --key-file '/var/www/clients/client1/web25/ssl/dieselbikeforum.com-le.key' --fullchain-file '/var/www/clients/client1/web25/ssl/dieselbikeforum.com-le.crt' --reloadcmd 'systemctl force-reload apache2.service' --log '/var/log/ispconfig/acme.log'; C=$? ; fi ; if [[ $C -eq 0 ]] ; then exit $R ; else exit $C ; fi 
2021-02-22 09:12       Warning    Let's Encrypt SSL Cert for: dieselbikeforum.com could not be issued.
    However, ACME.log shows that the certificate generation is succesfull:

    Code:
    [Mon 22 Feb 09:12:02 GMT 2021] Running cmd: issue
[Mon 22 Feb 09:12:02 GMT 2021] _main_domain='dieselbikeforum.com'
[Mon 22 Feb 09:12:02 GMT 2021] _alt_domains='www.dieselbikeforum.com'
[Mon 22 Feb 09:12:02 GMT 2021] Using config home:/root/.acme.sh
[Mon 22 Feb 09:12:02 GMT 2021] default_acme_server
[Mon 22 Feb 09:12:02 GMT 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Mon 22 Feb 09:12:02 GMT 2021] DOMAIN_PATH='/root/.acme.sh/dieselbikeforum.com'
[Mon 22 Feb 09:12:02 GMT 2021] Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory
[Mon 22 Feb 09:12:02 GMT 2021] _init api for server: https://acme-v02.api.letsencrypt.org/directory
[Mon 22 Feb 09:12:02 GMT 2021] GET
[Mon 22 Feb 09:12:02 GMT 2021] url='https://acme-v02.api.letsencrypt.org/directory'
[Mon 22 Feb 09:12:02 GMT 2021] timeout=
[Mon 22 Feb 09:12:02 GMT 2021] _WGET='wget -q --content-on-error '
[Mon 22 Feb 09:12:02 GMT 2021] ret='0'
[Mon 22 Feb 09:12:03 GMT 2021] ACME_KEY_CHANGE='https://acme-v02.api.letsencrypt.org/acme/key-change'
[Mon 22 Feb 09:12:03 GMT 2021] ACME_NEW_AUTHZ
[Mon 22 Feb 09:12:03 GMT 2021] ACME_NEW_ORDER='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Mon 22 Feb 09:12:03 GMT 2021] ACME_NEW_ACCOUNT='https://acme-v02.api.letsencrypt.org/acme/new-acct'
[Mon 22 Feb 09:12:03 GMT 2021] ACME_REVOKE_CERT='https://acme-v02.api.letsencrypt.org/acme/revoke-cert'
[Mon 22 Feb 09:12:03 GMT 2021] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf'
[Mon 22 Feb 09:12:03 GMT 2021] ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Mon 22 Feb 09:12:03 GMT 2021] ACME_VERSION='2'
[Mon 22 Feb 09:12:03 GMT 2021] Using CA: https://acme-v02.api.letsencrypt.org/directory
[Mon 22 Feb 09:12:03 GMT 2021] _on_before_issue
[Mon 22 Feb 09:12:03 GMT 2021] _chk_main_domain='dieselbikeforum.com'
[Mon 22 Feb 09:12:03 GMT 2021] _chk_alt_domains='www.dieselbikeforum.com'
[Mon 22 Feb 09:12:03 GMT 2021] Le_LocalAddress
[Mon 22 Feb 09:12:03 GMT 2021] d='dieselbikeforum.com'
[Mon 22 Feb 09:12:03 GMT 2021] Check for domain='dieselbikeforum.com'
[Mon 22 Feb 09:12:03 GMT 2021] _currentRoot='/usr/local/ispconfig/interface/acme'
[Mon 22 Feb 09:12:03 GMT 2021] d='www.dieselbikeforum.com'
[Mon 22 Feb 09:12:03 GMT 2021] Check for domain='www.dieselbikeforum.com'
[Mon 22 Feb 09:12:03 GMT 2021] _currentRoot='/usr/local/ispconfig/interface/acme'
[Mon 22 Feb 09:12:03 GMT 2021] d
[Mon 22 Feb 09:12:03 GMT 2021] _saved_account_key_hash is not changed, skip register account.
[Mon 22 Feb 09:12:03 GMT 2021] Read key length:
[Mon 22 Feb 09:12:03 GMT 2021] Creating domain key
[Mon 22 Feb 09:12:03 GMT 2021] Using config home:/root/.acme.sh
[Mon 22 Feb 09:12:03 GMT 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Mon 22 Feb 09:12:03 GMT 2021] Use length 4096
[Mon 22 Feb 09:12:03 GMT 2021] Using RSA: 4096
[Mon 22 Feb 09:12:04 GMT 2021] The domain key is here: /root/.acme.sh/dieselbikeforum.com/dieselbikeforum.com.key
[Mon 22 Feb 09:12:04 GMT 2021] _createcsr
[Mon 22 Feb 09:12:04 GMT 2021] Multi domain='DNS:dieselbikeforum.com,DNS:www.dieselbikeforum.com'
[Mon 22 Feb 09:12:04 GMT 2021] Getting domain auth token for each domain
[Mon 22 Feb 09:12:04 GMT 2021] d='www.dieselbikeforum.com'
[Mon 22 Feb 09:12:04 GMT 2021] d
[Mon 22 Feb 09:12:04 GMT 2021] url='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Mon 22 Feb 09:12:04 GMT 2021] payload='{"identifiers": [{"type":"dns","value":"dieselbikeforum.com"},{"type":"dns","value":"www.dieselbikeforum.com"}]}'
[Mon 22 Feb 09:12:04 GMT 2021] RSA key
[Mon 22 Feb 09:12:04 GMT 2021] HEAD
[Mon 22 Feb 09:12:04 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Mon 22 Feb 09:12:04 GMT 2021] _WGET='wget -q --content-on-error  --read-timeout=3.0  --tries=2  '
[Mon 22 Feb 09:12:04 GMT 2021] Using sed  -i
[Mon 22 Feb 09:12:04 GMT 2021] _ret='0'
[Mon 22 Feb 09:12:04 GMT 2021] POST
[Mon 22 Feb 09:12:04 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Mon 22 Feb 09:12:04 GMT 2021] _WGET='wget -q --content-on-error '
[Mon 22 Feb 09:12:05 GMT 2021] Using sed  -i
[Mon 22 Feb 09:12:05 GMT 2021] _ret='0'
[Mon 22 Feb 09:12:05 GMT 2021] code='201'
[Mon 22 Feb 09:12:05 GMT 2021] Le_LinkOrder='https://acme-v02.api.letsencrypt.org/acme/order/106219648/8056414705'
[Mon 22 Feb 09:12:05 GMT 2021] Le_OrderFinalize='https://acme-v02.api.letsencrypt.org/acme/finalize/106219648/8056414705'
[Mon 22 Feb 09:12:05 GMT 2021] url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/11062596093'
[Mon 22 Feb 09:12:05 GMT 2021] payload
[Mon 22 Feb 09:12:05 GMT 2021] POST
[Mon 22 Feb 09:12:05 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/11062596093'
[Mon 22 Feb 09:12:05 GMT 2021] _WGET='wget -q --content-on-error '
[Mon 22 Feb 09:12:06 GMT 2021] Using sed  -i
[Mon 22 Feb 09:12:06 GMT 2021] _ret='0'
[Mon 22 Feb 09:12:06 GMT 2021] code='200'
[Mon 22 Feb 09:12:06 GMT 2021] url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/11062596094'
[Mon 22 Feb 09:12:06 GMT 2021] payload
[Mon 22 Feb 09:12:06 GMT 2021] POST
[Mon 22 Feb 09:12:06 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/11062596094'
[Mon 22 Feb 09:12:06 GMT 2021] _WGET='wget -q --content-on-error '
[Mon 22 Feb 09:12:07 GMT 2021] Using sed  -i
[Mon 22 Feb 09:12:07 GMT 2021] _ret='0'
[Mon 22 Feb 09:12:07 GMT 2021] code='200'
[Mon 22 Feb 09:12:07 GMT 2021] d='dieselbikeforum.com'
[Mon 22 Feb 09:12:07 GMT 2021] Getting webroot for domain='dieselbikeforum.com'
[Mon 22 Feb 09:12:07 GMT 2021] _w='/usr/local/ispconfig/interface/acme'
[Mon 22 Feb 09:12:07 GMT 2021] _currentRoot='/usr/local/ispconfig/interface/acme'
[Mon 22 Feb 09:12:07 GMT 2021] entry='"type":"http-01","status":"valid","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/11062596093/L4cQsw","token":"KFl1krmKcPYXOM2UMk6T6v2Pn9iOORi5UXccoGZdcJc","validationRecord":[{"url":"http://dieselbikeforum.com/.well-known/acme-challenge/KFl1krmKcPYXOM2UMk6T6v2Pn9iOORi5UXccoGZdcJc","hostname":"dieselbikeforum.com","port":"80","addressesResolved":["82.163.246.206"],"addressUsed":"82.163.246.206"'
[Mon 22 Feb 09:12:07 GMT 2021] token='KFl1krmKcPYXOM2UMk6T6v2Pn9iOORi5UXccoGZdcJc'
[Mon 22 Feb 09:12:07 GMT 2021] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/11062596093/L4cQsw'
[Mon 22 Feb 09:12:07 GMT 2021] keyauthorization='KFl1krmKcPYXOM2UMk6T6v2Pn9iOORi5UXccoGZdcJc.TRICoQfTieya0qIii0Vh6LjY46VxkQMqQWxT5YnBXz8'
[Mon 22 Feb 09:12:07 GMT 2021] dieselbikeforum.com is already verified.
[Mon 22 Feb 09:12:07 GMT 2021] keyauthorization='verified_ok'
[Mon 22 Feb 09:12:07 GMT 2021] dvlist='dieselbikeforum.com#verified_ok#https://acme-v02.api.letsencrypt.org/acme/chall-v3/11062596093/L4cQsw#http-01#/usr/local/ispconfig/interface/acme'
[Mon 22 Feb 09:12:07 GMT 2021] d='www.dieselbikeforum.com'
[Mon 22 Feb 09:12:07 GMT 2021] Getting webroot for domain='www.dieselbikeforum.com'
[Mon 22 Feb 09:12:07 GMT 2021] _w='/usr/local/ispconfig/interface/acme'
[Mon 22 Feb 09:12:07 GMT 2021] _currentRoot='/usr/local/ispconfig/interface/acme'
[Mon 22 Feb 09:12:07 GMT 2021] entry='"type":"http-01","status":"valid","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/11062596094/9teQwQ","token":"Cu3ZCmv-Bsx3RgHLjKiZWXpLMxHzsVkP3IstJ-O4xdM","validationRecord":[{"url":"http://www.dieselbikeforum.com/.well-known/acme-challenge/Cu3ZCmv-Bsx3RgHLjKiZWXpLMxHzsVkP3IstJ-O4xdM","hostname":"www.dieselbikeforum.com","port":"80","addressesResolved":["82.163.246.206"],"addressUsed":"82.163.246.206"'
[Mon 22 Feb 09:12:07 GMT 2021] token='Cu3ZCmv-Bsx3RgHLjKiZWXpLMxHzsVkP3IstJ-O4xdM'
[Mon 22 Feb 09:12:07 GMT 2021] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/11062596094/9teQwQ'
[Mon 22 Feb 09:12:07 GMT 2021] keyauthorization='Cu3ZCmv-Bsx3RgHLjKiZWXpLMxHzsVkP3IstJ-O4xdM.TRICoQfTieya0qIii0Vh6LjY46VxkQMqQWxT5YnBXz8'
[Mon 22 Feb 09:12:07 GMT 2021] www.dieselbikeforum.com is already verified.
[Mon 22 Feb 09:12:07 GMT 2021] keyauthorization='verified_ok'
[Mon 22 Feb 09:12:07 GMT 2021] dvlist='www.dieselbikeforum.com#verified_ok#https://acme-v02.api.letsencrypt.org/acme/chall-v3/11062596094/9teQwQ#http-01#/usr/local/ispconfig/interface/acme'
[Mon 22 Feb 09:12:07 GMT 2021] d
[Mon 22 Feb 09:12:07 GMT 2021] vlist='dieselbikeforum.com#verified_ok#https://acme-v02.api.letsencrypt.org/acme/chall-v3/11062596093/L4cQsw#http-01#/usr/local/ispconfig/interface/acme,www.dieselbikeforum.com#verified_ok#https://acme-v02.api.letsencrypt.org/acme/chall-v3/11062596094/9teQwQ#http-01#/usr/local/ispconfig/interface/acme,'
[Mon 22 Feb 09:12:07 GMT 2021] d='dieselbikeforum.com'
[Mon 22 Feb 09:12:07 GMT 2021] dieselbikeforum.com is already verified, skip http-01.
[Mon 22 Feb 09:12:07 GMT 2021] d='www.dieselbikeforum.com'
[Mon 22 Feb 09:12:07 GMT 2021] www.dieselbikeforum.com is already verified, skip http-01.
[Mon 22 Feb 09:12:07 GMT 2021] ok, let's start to verify
[Mon 22 Feb 09:12:07 GMT 2021] dieselbikeforum.com is already verified, skip http-01.
[Mon 22 Feb 09:12:07 GMT 2021] www.dieselbikeforum.com is already verified, skip http-01.
[Mon 22 Feb 09:12:07 GMT 2021] pid
[Mon 22 Feb 09:12:07 GMT 2021] No need to restore nginx, skip.
[Mon 22 Feb 09:12:07 GMT 2021] _clearupdns
[Mon 22 Feb 09:12:07 GMT 2021] dns_entries
[Mon 22 Feb 09:12:07 GMT 2021] skip dns.
[Mon 22 Feb 09:12:07 GMT 2021] Verify finished, start to sign.
[Mon 22 Feb 09:12:07 GMT 2021] i='2'
[Mon 22 Feb 09:12:07 GMT 2021] j='27'
[Mon 22 Feb 09:12:07 GMT 2021] Lets finalize the order.
[Mon 22 Feb 09:12:07 GMT 2021] Le_OrderFinalize='https://acme-v02.api.letsencrypt.org/acme/finalize/106219648/8056414705'
[Mon 22 Feb 09:12:07 GMT 2021] url='https://acme-v02.api.letsencrypt.org/acme/finalize/106219648/8056414705'
[Mon 22 Feb 09:12:07 GMT 2021] payload='{"csr": "MIIEujCCAqICAQAwHjEcMBoGA1UEAwwTZGllc2VsYmlrZWZvcnVtLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANZzh2Rk7wjuUWMPJ3LNs3yrEl7Az-b9af6WiKiSPX1oa7so8fGtRCU52gEM66qARt29OG99dKyM98YmiOASMmvdVc5IyCZQEK91QFd-BqsukjnSJTxrHdwbiryp4tR0cFFpswh60WcZpBYVwAD9P6qXc1cYdldWWS3a5aJw8kxxvMN81n8Ti3woqII92THsak309CitoDqoNZZQNgK9WynkC3OLIFcVo4CcG9OpRBmo8SIRTyXD0j7lRlF2Zwuz6LvDBfAaUc6tMAcoDH4xJxDTyp4t-6HJTfKs-rOluUr2qraLRnanNpAi2fGRBDISk_8bsb0eLuu72qvUDeZqcrog6867XqOTXSTIJgwWsUd2GEQEOCLPxJ4DxVycXdbCEeKxGpl4Wk0YZg-HkdgnerBfrY6ELpqz_FouCtz6a4IOCbo0_Zk6lspJZXo6SgqFktltZERrglNgLlKVhBiFkFpLyas5EI2eX_Qy41yx9Ag14XwPcBABKr8AGqH0dmfu2zFxjaP3jNrqpvq5aL08E30bDA6xfUQbZX8rZdjDqsmjctEKthho4REcXeh_BoxCLdARaATX8hWtNhqDf0BsFk1g4SQaPjUCQrvIh2IQLjZi1DQl79bmEF4gZ4lR11bwuuBqncwltTW62WGzGxIsJKsQsc3zdEHLpb1yaJuQEK2bAgMBAAGgVzBVBgkqhkiG9w0BCQ4xSDBGMAsGA1UdDwQEAwIF4DA3BgNVHREEMDAughNkaWVzZWxiaWtlZm9ydW0uY29tghd3d3cuZGllc2VsYmlrZWZvcnVtLmNvbTANBgkqhkiG9w0BAQsFAAOCAgEAE3dfFJ5dNWnkBQ5-W85Qn_zbxVWxgTUY0FdLYRllnQaYFdcKFaOS-KK77rXipvZw0mtprz2fE02T5IV5UOD1BhVDtM4Pj90xZWw-QlJ-44DrQ6Ogcvi7qPD0aLEPPlmMH0OfGCTfeqFVcqn8jf_KRet9WZ8Kf40afbiVnl4vSYWU6tzB77QGnwWhki9CpjHKzri4Phojld7Cq8hInvwQSveAPOubqgnKUGte3oKpj-prgQtVE_UGvLAfX3W2rgbGuh5wfw4RJxjiiYWFcG4eBkaXEelgzGbNDBsr5442fTXR2ruVQA6IpWA97Nddzoc1-xoaspZu2SgOxmgTImZaAYJNfC7HADgKXcJb3w7RxeaT-dusJSMUgJFrCoGuEQ8llfv4J-KgIkZrOhI1sY5bt_q4QTpoz9h6kkGomjCzHwiX7psFB6yscnB4aIPDxlCGcgw5lgdj7JIYo0Vem0E0Xu7-E6SW2ndcbR7Xxmbgq78rEMFBCkj5ILP7A8RAPsDMzQ-Y3HNlXDM2vylRlQILlvMWGasj6u8OPPn_dsY_JaQT5rLoysFZ75pOClROZXqPA9X-2Hfhdg3PKlOo9-GYtuQ9TziTyW5DAsL2oR37vekBZ1Xy6-aYsDbnc-w6QU71yg0VHYZgX-pUrx_Em3tmw0acGeOKd-SxPcjfxzFCf4s"}'
[Mon 22 Feb 09:12:07 GMT 2021] POST
[Mon 22 Feb 09:12:07 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/finalize/106219648/8056414705'
[Mon 22 Feb 09:12:07 GMT 2021] _WGET='wget -q --content-on-error '
[Mon 22 Feb 09:12:08 GMT 2021] Using sed  -i
[Mon 22 Feb 09:12:08 GMT 2021] _ret='0'
[Mon 22 Feb 09:12:08 GMT 2021] code='200'
[Mon 22 Feb 09:12:08 GMT 2021] Order status is valid.
[Mon 22 Feb 09:12:08 GMT 2021] Le_LinkCert='https://acme-v02.api.letsencrypt.org/acme/cert/03b310d81cbb1797ec396ed9cf03612e168d'
[Mon 22 Feb 09:12:08 GMT 2021] Downloading cert.
[Mon 22 Feb 09:12:08 GMT 2021] Le_LinkCert='https://acme-v02.api.letsencrypt.org/acme/cert/03b310d81cbb1797ec396ed9cf03612e168d'
[Mon 22 Feb 09:12:08 GMT 2021] url='https://acme-v02.api.letsencrypt.org/acme/cert/03b310d81cbb1797ec396ed9cf03612e168d'
[Mon 22 Feb 09:12:08 GMT 2021] payload
[Mon 22 Feb 09:12:08 GMT 2021] POST
[Mon 22 Feb 09:12:08 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/cert/03b310d81cbb1797ec396ed9cf03612e168d'
[Mon 22 Feb 09:12:08 GMT 2021] _WGET='wget -q --content-on-error '
[Mon 22 Feb 09:12:09 GMT 2021] Using sed  -i
[Mon 22 Feb 09:12:09 GMT 2021] _ret='0'
[Mon 22 Feb 09:12:09 GMT 2021] code='200'
[Mon 22 Feb 09:12:09 GMT 2021] Found cert chain
[Mon 22 Feb 09:12:09 GMT 2021] _end_n='36'
[Mon 22 Feb 09:12:09 GMT 2021] Le_LinkCert='https://acme-v02.api.letsencrypt.org/acme/cert/03b310d81cbb1797ec396ed9cf03612e168d'
[Mon 22 Feb 09:12:09 GMT 2021] Cert success.
[Mon 22 Feb 09:12:09 GMT 2021] Your cert is in  /root/.acme.sh/dieselbikeforum.com/dieselbikeforum.com.cer
[Mon 22 Feb 09:12:09 GMT 2021] Your cert key is in  /root/.acme.sh/dieselbikeforum.com/dieselbikeforum.com.key
[Mon 22 Feb 09:12:09 GMT 2021] v2 chain.
[Mon 22 Feb 09:12:09 GMT 2021] The intermediate CA cert is in  /root/.acme.sh/dieselbikeforum.com/ca.cer
[Mon 22 Feb 09:12:09 GMT 2021] And the full chain certs is there:  /root/.acme.sh/dieselbikeforum.com/fullchain.cer
[Mon 22 Feb 09:12:09 GMT 2021] _on_issue_success
[Mon 22 Feb 09:12:09 GMT 2021] Lets find script dir.
[Mon 22 Feb 09:12:09 GMT 2021] _SCRIPT_='/root/.acme.sh/acme.sh'
[Mon 22 Feb 09:12:09 GMT 2021] _script='/root/.acme.sh/acme.sh'
[Mon 22 Feb 09:12:09 GMT 2021] _script_home='/root/.acme.sh'
[Mon 22 Feb 09:12:09 GMT 2021] Using default home:/root/.acme.sh
[Mon 22 Feb 09:12:09 GMT 2021] Using config home:/root/.acme.sh
[Mon 22 Feb 09:12:09 GMT 2021] Running cmd: installcert
[Mon 22 Feb 09:12:09 GMT 2021] Using config home:/root/.acme.sh
[Mon 22 Feb 09:12:09 GMT 2021] default_acme_server
[Mon 22 Feb 09:12:09 GMT 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Mon 22 Feb 09:12:10 GMT 2021] DOMAIN_PATH='/root/.acme.sh/dieselbikeforum.com'
[Mon 22 Feb 09:12:10 GMT 2021] Installing key to:/var/www/clients/client1/web25/ssl/dieselbikeforum.com-le.key
    The certfiles, are actually in place as well:

    Code:
    root@**********:/var/www/clients/client1/web25/ssl# ls
dieselbikeforum.com-le.bundle  dieselbikeforum.com-le.crt  dieselbikeforum.com-le.key
    Any ideas?
     
    Alexander Foti, Feb 22, 2021
    #1
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Th0m, Feb 22, 2021
    #2
  3. Alexander Foti

    Alexander Foti Member HowtoForge Supporter

    No luck, both www. and the domainroot resolve and serve correctly. I tried generating just for dieselbikeforum.com without the www auto subdomain, no difference.
     
    Alexander Foti, Feb 22, 2021
    #3
  4. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Please read the FAQ, as there it is described what to do if following the standard steps did not help.
     
    Th0m, Feb 22, 2021
    #4
  5. Alexander Foti

    Alexander Foti Member HowtoForge Supporter

    This appears to be the root cause:

    Code:
    exec: R=0 ; C=0 ; /root/.acme.sh/acme.sh --issue  -d dieselbikeforum.com -w /usr/local/ispconfig/interface/acme --always-force-new-domain-key --keylength 4096; R=$? ; if [[ $R -eq 0 || $R -eq 2 ]] ; then /root/.acme.sh/acme.sh --install-cert  -d dieselbikeforum.com --key-file '/var/www/clients/client1/web25/ssl/dieselbikeforum.com-le.key' --fullchain-file '/var/www/clients/client1/web25/ssl/dieselbikeforum.com-le.crt' --reloadcmd 'systemctl force-reload apache2.service' --log '/var/log/ispconfig/acme.log'; C=$? ; fi ; if [[ $C -eq 0 ]] ; then exit $R ; else exit $C  ; fi
/root/.acme.sh/acme.sh: line 5498: /var/www/clients/client1/web25/ssl/dieselbikeforum.com-le.key: No such file or directory
    however, the file does exist......
     
    Alexander Foti, Feb 22, 2021
    #5
  6. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Try this:
    - Disable LE
    - Go to the SSL tab, and select "Delete certificate as action". Hit save.
    - Enable LE
     
    Th0m, Feb 22, 2021
    #6
  7. Alexander Foti

    Alexander Foti Member HowtoForge Supporter

    Code:
    22.02.2021-10:54 - DEBUG - Create Let's Encrypt SSL Cert for: dieselbikeforum.com
22.02.2021-10:54 - DEBUG - Let's Encrypt SSL Cert domains:
22.02.2021-10:54 - DEBUG - exec: R=0 ; C=0 ; /root/.acme.sh/acme.sh --issue  -d dieselbikeforum.com -d www.dieselbikeforum.com -w /usr/local/ispconfig/interface/acme --always-force-new-domain-key --keylength 4096; R=$? ; if [[ $R -eq 0 || $R -eq 2 ]] ; then /root/.acme.sh/acme.sh --install-cert  -d dieselbikeforum.com -d www.dieselbikeforum.com --key-file '/var/www/clients/client1/web25/ssl/dieselbikeforum.com-le.key' --fullchain-file '/var/www/clients/client1/web25/ssl/dieselbikeforum.com-le.crt' --reloadcmd 'systemctl force-reload apache2.service' --log '/var/log/ispconfig/acme.log'; C=$? ; fi ; if [[ $C -eq 0 ]] ; then exit $R ; else exit $C  ; fi
22.02.2021-10:54 - WARNING - Let's Encrypt SSL Cert for: dieselbikeforum.com could not be issued.
22.02.2021-10:54 - WARNING - R=0 ; C=0 ; /root/.acme.sh/acme.sh --issue  -d dieselbikeforum.com -d www.dieselbikeforum.com -w /usr/local/ispconfig/interface/acme --always-force-new-domain-key --keylength 4096; R=$? ; if [[ $R -eq 0 || $R -eq 2 ]] ; then /root/.acme.sh/acme.sh --install-cert  -d dieselbikeforum.com -d www.dieselbikeforum.com --key-file '/var/www/clients/client1/web25/ssl/dieselbikeforum.com-le.key' --fullchain-file '/var/www/clients/client1/web25/ssl/dieselbikeforum.com-le.crt' --reloadcmd 'systemctl force-reload apache2.service' --log '/var/log/ispconfig/acme.log'; C=$? ; fi ; if [[ $C -eq 0 ]] ; then exit $R ; else exit $C  ; fi
22.02.2021-10:54 - DEBUG - safe_exec cmd: which 'apache2ctl' 2> /dev/null - return code: 0
22.02.2021-10:54 - DEBUG - safe_exec cmd: which 'apache2ctl' 2> /dev/null - return code: 0
22.02.2021-10:54 - DEBUG - safe_exec cmd: chattr -i '/var/www/php-fcgi-scripts/web25/.php-fcgi-starter' - return code: 0
22.02.2021-10:54 - DEBUG - Creating fastcgi starter script: /var/www/php-fcgi-scripts/web25/.php-fcgi-starter
22.02.2021-10:54 - DEBUG - safe_exec cmd: chattr +i '/var/www/php-fcgi-scripts/web25/.php-fcgi-starter' - return code: 0
22.02.2021-10:54 - DEBUG - Writing the vhost file: /etc/apache2/sites-available/dieselbikeforum.com.vhost
22.02.2021-10:54 - DEBUG - Removing symlink: /etc/apache2/sites-enabled/100-dieselbikeforum.com.vhost->/etc/apache2/sites-available/dieselbikeforum.com.vhost
22.02.2021-10:54 - DEBUG - Creating symlink: /etc/apache2/sites-enabled/900-dieselbikeforum.com.vhost->/etc/apache2/sites-available/dieselbikeforum.com.vhost
22.02.2021-10:54 - DEBUG - Apache status is: running
22.02.2021-10:54 - DEBUG - Calling function 'restartHttpd' from module 'web_module'.
22.02.2021-10:54 - DEBUG - Restarting httpd: systemctl restart apache2.service
22.02.2021-10:54 - DEBUG - Apache restart return value is: 0
22.02.2021-10:54 - DEBUG - Apache online status after restart is: running
22.02.2021-10:54 - DEBUG - Processed datalog_id 2911
22.02.2021-10:54 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
22.02.2021-10:55 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'.
22.02.2021-10:55 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
22.02.2021-10:56 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'.
22.02.2021-10:56 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
22.02.2021-10:57 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'.
22.02.2021-10:57 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
    and the acme log:
    Code:
    [Mon 22 Feb 10:54:02 GMT 2021] Running cmd: issue
[Mon 22 Feb 10:54:02 GMT 2021] _main_domain='dieselbikeforum.com'
[Mon 22 Feb 10:54:02 GMT 2021] _alt_domains='www.dieselbikeforum.com'
[Mon 22 Feb 10:54:02 GMT 2021] Using config home:/root/.acme.sh
[Mon 22 Feb 10:54:02 GMT 2021] default_acme_server
[Mon 22 Feb 10:54:02 GMT 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Mon 22 Feb 10:54:02 GMT 2021] DOMAIN_PATH='/root/.acme.sh/dieselbikeforum.com'
[Mon 22 Feb 10:54:02 GMT 2021] Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory
[Mon 22 Feb 10:54:02 GMT 2021] _init api for server: https://acme-v02.api.letsencrypt.org/directory
[Mon 22 Feb 10:54:02 GMT 2021] GET
[Mon 22 Feb 10:54:02 GMT 2021] url='https://acme-v02.api.letsencrypt.org/directory'
[Mon 22 Feb 10:54:02 GMT 2021] timeout=
[Mon 22 Feb 10:54:02 GMT 2021] _WGET='wget -q --content-on-error '
[Mon 22 Feb 10:54:02 GMT 2021] ret='0'
[Mon 22 Feb 10:54:03 GMT 2021] ACME_KEY_CHANGE='https://acme-v02.api.letsencrypt.org/acme/key-change'
[Mon 22 Feb 10:54:03 GMT 2021] ACME_NEW_AUTHZ
[Mon 22 Feb 10:54:03 GMT 2021] ACME_NEW_ORDER='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Mon 22 Feb 10:54:03 GMT 2021] ACME_NEW_ACCOUNT='https://acme-v02.api.letsencrypt.org/acme/new-acct'
[Mon 22 Feb 10:54:03 GMT 2021] ACME_REVOKE_CERT='https://acme-v02.api.letsencrypt.org/acme/revoke-cert'
[Mon 22 Feb 10:54:03 GMT 2021] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf'
[Mon 22 Feb 10:54:03 GMT 2021] ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Mon 22 Feb 10:54:03 GMT 2021] ACME_VERSION='2'
[Mon 22 Feb 10:54:03 GMT 2021] Le_NextRenewTime='1619084126'
[Mon 22 Feb 10:54:03 GMT 2021] _saved_domain='dieselbikeforum.com'
[Mon 22 Feb 10:54:03 GMT 2021] _saved_alt='no'
[Mon 22 Feb 10:54:03 GMT 2021] Domains have changed.
[Mon 22 Feb 10:54:03 GMT 2021] Using CA: https://acme-v02.api.letsencrypt.org/directory
[Mon 22 Feb 10:54:03 GMT 2021] _on_before_issue
[Mon 22 Feb 10:54:03 GMT 2021] _chk_main_domain='dieselbikeforum.com'
[Mon 22 Feb 10:54:03 GMT 2021] _chk_alt_domains='www.dieselbikeforum.com'
[Mon 22 Feb 10:54:03 GMT 2021] Le_LocalAddress
[Mon 22 Feb 10:54:03 GMT 2021] d='dieselbikeforum.com'
[Mon 22 Feb 10:54:03 GMT 2021] Check for domain='dieselbikeforum.com'
[Mon 22 Feb 10:54:03 GMT 2021] _currentRoot='/usr/local/ispconfig/interface/acme'
[Mon 22 Feb 10:54:03 GMT 2021] d='www.dieselbikeforum.com'
[Mon 22 Feb 10:54:03 GMT 2021] Check for domain='www.dieselbikeforum.com'
[Mon 22 Feb 10:54:03 GMT 2021] _currentRoot='/usr/local/ispconfig/interface/acme'
[Mon 22 Feb 10:54:03 GMT 2021] d
[Mon 22 Feb 10:54:03 GMT 2021] _saved_account_key_hash is not changed, skip register account.
[Mon 22 Feb 10:54:03 GMT 2021] Read key length:4096
[Mon 22 Feb 10:54:03 GMT 2021] Creating domain key
[Mon 22 Feb 10:54:03 GMT 2021] Using config home:/root/.acme.sh
[Mon 22 Feb 10:54:03 GMT 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Mon 22 Feb 10:54:03 GMT 2021] Use length 4096
[Mon 22 Feb 10:54:03 GMT 2021] Using RSA: 4096
[Mon 22 Feb 10:54:07 GMT 2021] The domain key is here: /root/.acme.sh/dieselbikeforum.com/dieselbikeforum.com.key
[Mon 22 Feb 10:54:07 GMT 2021] _createcsr
[Mon 22 Feb 10:54:07 GMT 2021] Multi domain='DNS:dieselbikeforum.com,DNS:www.dieselbikeforum.com'
[Mon 22 Feb 10:54:07 GMT 2021] Getting domain auth token for each domain
[Mon 22 Feb 10:54:08 GMT 2021] d='www.dieselbikeforum.com'
[Mon 22 Feb 10:54:08 GMT 2021] d
[Mon 22 Feb 10:54:08 GMT 2021] url='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Mon 22 Feb 10:54:08 GMT 2021] payload='{"identifiers": [{"type":"dns","value":"dieselbikeforum.com"},{"type":"dns","value":"www.dieselbikeforum.com"}]}'
[Mon 22 Feb 10:54:08 GMT 2021] RSA key
[Mon 22 Feb 10:54:08 GMT 2021] HEAD
[Mon 22 Feb 10:54:08 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Mon 22 Feb 10:54:08 GMT 2021] _WGET='wget -q --content-on-error  --read-timeout=3.0  --tries=2  '
[Mon 22 Feb 10:54:08 GMT 2021] Using sed  -i
[Mon 22 Feb 10:54:08 GMT 2021] _ret='0'
[Mon 22 Feb 10:54:08 GMT 2021] POST
[Mon 22 Feb 10:54:08 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Mon 22 Feb 10:54:08 GMT 2021] _WGET='wget -q --content-on-error '
[Mon 22 Feb 10:54:09 GMT 2021] Using sed  -i
[Mon 22 Feb 10:54:09 GMT 2021] _ret='0'
[Mon 22 Feb 10:54:09 GMT 2021] code='201'
[Mon 22 Feb 10:54:09 GMT 2021] Le_LinkOrder='https://acme-v02.api.letsencrypt.org/acme/order/106219648/8057734308'
[Mon 22 Feb 10:54:09 GMT 2021] Le_OrderFinalize='https://acme-v02.api.letsencrypt.org/acme/finalize/106219648/8057734308'
[Mon 22 Feb 10:54:09 GMT 2021] url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/11062596093'
[Mon 22 Feb 10:54:09 GMT 2021] payload
[Mon 22 Feb 10:54:09 GMT 2021] POST
[Mon 22 Feb 10:54:09 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/11062596093'
[Mon 22 Feb 10:54:09 GMT 2021] _WGET='wget -q --content-on-error '
[Mon 22 Feb 10:54:10 GMT 2021] Using sed  -i
[Mon 22 Feb 10:54:10 GMT 2021] _ret='0'
[Mon 22 Feb 10:54:10 GMT 2021] code='200'
[Mon 22 Feb 10:54:10 GMT 2021] url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/11062596094'
[Mon 22 Feb 10:54:10 GMT 2021] payload
[Mon 22 Feb 10:54:10 GMT 2021] POST
[Mon 22 Feb 10:54:10 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/11062596094'
[Mon 22 Feb 10:54:10 GMT 2021] _WGET='wget -q --content-on-error '
[Mon 22 Feb 10:54:11 GMT 2021] Using sed  -i
[Mon 22 Feb 10:54:11 GMT 2021] _ret='0'
[Mon 22 Feb 10:54:11 GMT 2021] code='200'
[Mon 22 Feb 10:54:11 GMT 2021] d='dieselbikeforum.com'
[Mon 22 Feb 10:54:11 GMT 2021] Getting webroot for domain='dieselbikeforum.com'
[Mon 22 Feb 10:54:11 GMT 2021] _w='/usr/local/ispconfig/interface/acme'
[Mon 22 Feb 10:54:11 GMT 2021] _currentRoot='/usr/local/ispconfig/interface/acme'
[Mon 22 Feb 10:54:11 GMT 2021] entry='"type":"http-01","status":"valid","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/11062596093/L4cQsw","token":"KFl1krmKcPYXOM2UMk6T6v2Pn9iOORi5UXccoGZdcJc","validationRecord":[{"url":"http://dieselbikeforum.com/.well-known/acme-challenge/KFl1krmKcPYXOM2UMk6T6v2Pn9iOORi5UXccoGZdcJc","hostname":"dieselbikeforum.com","port":"80","addressesResolved":["82.163.246.206"],"addressUsed":"82.163.246.206"'
[Mon 22 Feb 10:54:11 GMT 2021] token='KFl1krmKcPYXOM2UMk6T6v2Pn9iOORi5UXccoGZdcJc'
[Mon 22 Feb 10:54:11 GMT 2021] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/11062596093/L4cQsw'
[Mon 22 Feb 10:54:11 GMT 2021] keyauthorization='KFl1krmKcPYXOM2UMk6T6v2Pn9iOORi5UXccoGZdcJc.TRICoQfTieya0qIii0Vh6LjY46VxkQMqQWxT5YnBXz8'
[Mon 22 Feb 10:54:11 GMT 2021] dieselbikeforum.com is already verified.
[Mon 22 Feb 10:54:11 GMT 2021] keyauthorization='verified_ok'
[Mon 22 Feb 10:54:11 GMT 2021] dvlist='dieselbikeforum.com#verified_ok#https://acme-v02.api.letsencrypt.org/acme/chall-v3/11062596093/L4cQsw#http-01#/usr/local/ispconfig/interface/acme'
[Mon 22 Feb 10:54:11 GMT 2021] d='www.dieselbikeforum.com'
[Mon 22 Feb 10:54:11 GMT 2021] Getting webroot for domain='www.dieselbikeforum.com'
[Mon 22 Feb 10:54:11 GMT 2021] _w='/usr/local/ispconfig/interface/acme'
[Mon 22 Feb 10:54:11 GMT 2021] _currentRoot='/usr/local/ispconfig/interface/acme'
[Mon 22 Feb 10:54:11 GMT 2021] entry='"type":"http-01","status":"valid","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/11062596094/9teQwQ","token":"Cu3ZCmv-Bsx3RgHLjKiZWXpLMxHzsVkP3IstJ-O4xdM","validationRecord":[{"url":"http://www.dieselbikeforum.com/.well-known/acme-challenge/Cu3ZCmv-Bsx3RgHLjKiZWXpLMxHzsVkP3IstJ-O4xdM","hostname":"www.dieselbikeforum.com","port":"80","addressesResolved":["82.163.246.206"],"addressUsed":"82.163.246.206"'
[Mon 22 Feb 10:54:11 GMT 2021] token='Cu3ZCmv-Bsx3RgHLjKiZWXpLMxHzsVkP3IstJ-O4xdM'
[Mon 22 Feb 10:54:11 GMT 2021] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/11062596094/9teQwQ'
[Mon 22 Feb 10:54:11 GMT 2021] keyauthorization='Cu3ZCmv-Bsx3RgHLjKiZWXpLMxHzsVkP3IstJ-O4xdM.TRICoQfTieya0qIii0Vh6LjY46VxkQMqQWxT5YnBXz8'
[Mon 22 Feb 10:54:11 GMT 2021] www.dieselbikeforum.com is already verified.
[Mon 22 Feb 10:54:11 GMT 2021] keyauthorization='verified_ok'
[Mon 22 Feb 10:54:11 GMT 2021] dvlist='www.dieselbikeforum.com#verified_ok#https://acme-v02.api.letsencrypt.org/acme/chall-v3/11062596094/9teQwQ#http-01#/usr/local/ispconfig/interface/acme'
[Mon 22 Feb 10:54:11 GMT 2021] d
[Mon 22 Feb 10:54:11 GMT 2021] vlist='dieselbikeforum.com#verified_ok#https://acme-v02.api.letsencrypt.org/acme/chall-v3/11062596093/L4cQsw#http-01#/usr/local/ispconfig/interface/acme,www.dieselbikeforum.com#verified_ok#https://acme-v02.api.letsencrypt.org/acme/chall-v3/11062596094/9teQwQ#http-01#/usr/local/ispconfig/interface/acme,'
[Mon 22 Feb 10:54:11 GMT 2021] d='dieselbikeforum.com'
[Mon 22 Feb 10:54:11 GMT 2021] dieselbikeforum.com is already verified, skip http-01.
[Mon 22 Feb 10:54:11 GMT 2021] d='www.dieselbikeforum.com'
[Mon 22 Feb 10:54:11 GMT 2021] www.dieselbikeforum.com is already verified, skip http-01.
[Mon 22 Feb 10:54:11 GMT 2021] ok, let's start to verify
[Mon 22 Feb 10:54:11 GMT 2021] dieselbikeforum.com is already verified, skip http-01.
[Mon 22 Feb 10:54:11 GMT 2021] www.dieselbikeforum.com is already verified, skip http-01.
[Mon 22 Feb 10:54:11 GMT 2021] pid
[Mon 22 Feb 10:54:11 GMT 2021] No need to restore nginx, skip.
[Mon 22 Feb 10:54:11 GMT 2021] _clearupdns
[Mon 22 Feb 10:54:11 GMT 2021] dns_entries
[Mon 22 Feb 10:54:11 GMT 2021] skip dns.
[Mon 22 Feb 10:54:11 GMT 2021] Verify finished, start to sign.
[Mon 22 Feb 10:54:11 GMT 2021] i='2'
[Mon 22 Feb 10:54:11 GMT 2021] j='27'
[Mon 22 Feb 10:54:11 GMT 2021] Lets finalize the order.
[Mon 22 Feb 10:54:11 GMT 2021] Le_OrderFinalize='https://acme-v02.api.letsencrypt.org/acme/finalize/106219648/8057734308'
[Mon 22 Feb 10:54:11 GMT 2021] url='https://acme-v02.api.letsencrypt.org/acme/finalize/106219648/8057734308'
[Mon 22 Feb 10:54:11 GMT 2021] payload='{"csr": "MIIEujCCAqICAQAwHjEcMBoGA1UEAwwTZGllc2VsYmlrZWZvcnVtLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMKWz8LyQWNEa3uj_MgmYH-d8S4kmSiif6X2XpOOlJTA2BqDeRo5abX0ieYCTTa6-KuwkVJ_5I3oUQdOpKGkx434slB48yaxFSSbG5t-Rhl_xUpw9TIRfthb53HZsoiPJjOQrY5NwE_uLurf0rTEw6tnN84XKZFrFlB7DKwhqaKJ45YL86J2VFPdWMDbOPi0kfxXXyJg6lMUqR06kDGFZjEwF16nWOP7xye9oALfQw7sE2Cf5ImPdN_qKRdwXIsT9RGVOw9OXcJ7BiIIXuPz41opkv3wOnfgoI-fsBSXnbwX4LsbcrvhcNkadZvuqV18iuTUkaq73ubGi_qk7fTyhSlZXQ-4d61qq7HHp9iP5PXojwwDegfJu1N208EkqWkQ5JWfDeUg3WLbi1OWzPxPb5iSezXNOM9xQDu_pbNiPa3YlZgZ5ep_7bXkm_LKFHOmefc9qjrslU-OnWoHaV2s0jHjm1C0lc0zzW088aSZT5unFc62E2bg8sTxK-_R_Ot9PKBylqcpSQ_Q2L00lMkJxEtg632-IOZ6WA0XqDxKP8ejehsOwnDnExmWoSQDJVYlRev4mWXvadtqvK74CEzE8T7yYiGGNm7dbzIs4oueYpkHzsfBu47iK5cOF8pzu6ciUMZGsoD7X2oitGeCpO2KFDG-iwj8qmYY7FLLFHJaaur3AgMBAAGgVzBVBgkqhkiG9w0BCQ4xSDBGMAsGA1UdDwQEAwIF4DA3BgNVHREEMDAughNkaWVzZWxiaWtlZm9ydW0uY29tghd3d3cuZGllc2VsYmlrZWZvcnVtLmNvbTANBgkqhkiG9w0BAQsFAAOCAgEAIbDZ30-8XV5HwPug_uBjfdHLi4GjpCejQvmbI4w21urw9A0zJsXF3ureRGQaOo4STqw9pI095srHI-ukyii9byueTPAIOXM-P8hTPxHyWXUGC0w7DhBPbZKwmjfHOwVGLNKsljptM-3KPc0pvh0DJ4h0z0wujh7kGnfhp_8B2FDtx_pRps0K6fSOH8iHPggoh3q__PevTsZnC04P4Fz14qPAiHMY2IWMNxwaeCJc8uPlRNBR7hMCumcaF71sZI69MmMQjMRRl7IopErYtfMyqk7mod-GTtfImDBA34eyS9i1iv17e_9W4ToJeFTtPNfjdVNpzi7WpK7HhOc3rGGMEqXwKmmwX7H-ti7xhXawrJyPBzjpEj90geWOyw0IA6TsiNtjU2sHGP5DbcPfG_kW_PtzURwJldjIhWPGrfn1e3PV6n5TVz50uk6kdJxZ7QUfEveVhXyRXydPxrkzaTuKYPumBMiBwIyLWjax5we5x8ae8-akLKKJY5nfGB_oCiTVj1GO4UOZPeUvF9054J8IjOypHL66I4MRZtBRJJFvH2UN1aKsJ-zIqKUS7IMmi6pz7Dn_YGp4FAOU_2VJ1QsDcrKvLvaX7pchYbfz7WW_C6Gr3ZkWjTDOa8MxCeurPUwDxqYTacIrCbYTVY_UcwahcXnpbAhb3bA9QixD_PfC2Ec"}'
[Mon 22 Feb 10:54:11 GMT 2021] POST
[Mon 22 Feb 10:54:11 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/finalize/106219648/8057734308'
[Mon 22 Feb 10:54:11 GMT 2021] _WGET='wget -q --content-on-error '
[Mon 22 Feb 10:54:12 GMT 2021] Using sed  -i
[Mon 22 Feb 10:54:12 GMT 2021] _ret='0'
[Mon 22 Feb 10:54:12 GMT 2021] code='200'
[Mon 22 Feb 10:54:12 GMT 2021] Order status is valid.
[Mon 22 Feb 10:54:12 GMT 2021] Le_LinkCert='https://acme-v02.api.letsencrypt.org/acme/cert/04b565908f78824b3971dbbaa17999424aba'
[Mon 22 Feb 10:54:12 GMT 2021] Downloading cert.
[Mon 22 Feb 10:54:12 GMT 2021] Le_LinkCert='https://acme-v02.api.letsencrypt.org/acme/cert/04b565908f78824b3971dbbaa17999424aba'
[Mon 22 Feb 10:54:12 GMT 2021] url='https://acme-v02.api.letsencrypt.org/acme/cert/04b565908f78824b3971dbbaa17999424aba'
[Mon 22 Feb 10:54:12 GMT 2021] payload
[Mon 22 Feb 10:54:12 GMT 2021] POST
[Mon 22 Feb 10:54:12 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/cert/04b565908f78824b3971dbbaa17999424aba'
[Mon 22 Feb 10:54:12 GMT 2021] _WGET='wget -q --content-on-error '
[Mon 22 Feb 10:54:13 GMT 2021] Using sed  -i
[Mon 22 Feb 10:54:13 GMT 2021] _ret='0'
[Mon 22 Feb 10:54:13 GMT 2021] code='200'
[Mon 22 Feb 10:54:13 GMT 2021] Found cert chain
[Mon 22 Feb 10:54:13 GMT 2021] _end_n='36'
[Mon 22 Feb 10:54:13 GMT 2021] Le_LinkCert='https://acme-v02.api.letsencrypt.org/acme/cert/04b565908f78824b3971dbbaa17999424aba'
[Mon 22 Feb 10:54:13 GMT 2021] Cert success.
[Mon 22 Feb 10:54:13 GMT 2021] Your cert is in  /root/.acme.sh/dieselbikeforum.com/dieselbikeforum.com.cer
[Mon 22 Feb 10:54:13 GMT 2021] Your cert key is in  /root/.acme.sh/dieselbikeforum.com/dieselbikeforum.com.key
[Mon 22 Feb 10:54:13 GMT 2021] v2 chain.
[Mon 22 Feb 10:54:13 GMT 2021] The intermediate CA cert is in  /root/.acme.sh/dieselbikeforum.com/ca.cer
[Mon 22 Feb 10:54:13 GMT 2021] And the full chain certs is there:  /root/.acme.sh/dieselbikeforum.com/fullchain.cer
[Mon 22 Feb 10:54:13 GMT 2021] _on_issue_success
[Mon 22 Feb 10:54:13 GMT 2021] Lets find script dir.
[Mon 22 Feb 10:54:13 GMT 2021] _SCRIPT_='/root/.acme.sh/acme.sh'
[Mon 22 Feb 10:54:13 GMT 2021] _script='/root/.acme.sh/acme.sh'
[Mon 22 Feb 10:54:13 GMT 2021] _script_home='/root/.acme.sh'
[Mon 22 Feb 10:54:13 GMT 2021] Using default home:/root/.acme.sh
[Mon 22 Feb 10:54:13 GMT 2021] Using config home:/root/.acme.sh
[Mon 22 Feb 10:54:13 GMT 2021] Running cmd: installcert
[Mon 22 Feb 10:54:13 GMT 2021] Using config home:/root/.acme.sh
[Mon 22 Feb 10:54:13 GMT 2021] default_acme_server
[Mon 22 Feb 10:54:13 GMT 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Mon 22 Feb 10:54:13 GMT 2021] DOMAIN_PATH='/root/.acme.sh/dieselbikeforum.com'
[Mon 22 Feb 10:54:14 GMT 2021] Installing key to:/var/www/clients/client1/web25/ssl/dieselbikeforum.com-le.key
    No complaints in the logs about missing files, in this case it just says "unable to generate certificate" when the log clearly shows no issues with generating it....... maybe an issue with the way ISPconfig is parsing the output of the acme log?
     
    Last edited: Feb 22, 2021
    Alexander Foti, Feb 22, 2021
    #7
  8. Alexander Foti

    Alexander Foti Member HowtoForge Supporter

    to add, other domains renew and implement the certs correctly.
     
    Alexander Foti, Feb 22, 2021
    #8
  9. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    What is the output of
    Code:
    ls -la /var/www/dieselbikeforum.com/ssl
    ?
     
    Th0m, Feb 22, 2021
    #9
  10. Alexander Foti

    Alexander Foti Member HowtoForge Supporter

    Code:
    total 8
drwxr-xr-x  2 root root 4096 Jan 29  2019 .
drwxr-xr-x 11 root root 4096 Dec 14 00:10 ..
lrwxrwxrwx  1 root root   51 Jan 29  2019 dieselbikeforum.com-le.bundle -> /etc/letsencrypt/live/dieselbikeforum.com/chain.pem
lrwxrwxrwx  1 root root   55 Jan 29  2019 dieselbikeforum.com-le.crt -> /etc/letsencrypt/live/dieselbikeforum.com/fullchain.pem
lrwxrwxrwx  1 root root   53 Jan 29  2019 dieselbikeforum.com-le.key -> /etc/letsencrypt/live/dieselbikeforum.com/privkey.pem
     
    Alexander Foti, Feb 22, 2021
    #10
  11. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Th0m, Feb 22, 2021
    #11
  12. Alexander Foti

    Alexander Foti Member HowtoForge Supporter

    I followed this thread originally, to resolve the issue of certificates not being generated (caused by the error " Validations for new domains are disabled in the V1 API ")

    It fixed the problem but of course now we have this one.

    so you say I cannot use both, and I cannot migrate from both, so I am now stuck? What is the solution?
     
    Alexander Foti, Feb 22, 2021
    #12
  13. Alexander Foti

    Alexander Foti Member HowtoForge Supporter

    Additionally, all the logs above reference Acme.sh, so how can you tell that certbot is involved at all?

    From what I can tell, any domains that had a LE cert before I switched will fail to renew, and any domain added after I switched to Certbot will be fine..........
     
    Last edited: Feb 22, 2021
    Alexander Foti, Feb 22, 2021
    #13
  14. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    When did you install this server, did you install acme.sh or certbot?
     
    Th0m, Feb 22, 2021
    #14
  15. Alexander Foti

    Alexander Foti Member HowtoForge Supporter

    Acme.sh, going by the log file timestamps,

    upload_2021-2-22_14-0-33.png

    I carried out the "fix" December 13
     
    Alexander Foti, Feb 22, 2021
    #15
  16. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Because you had a acme.sh log but /etc/letsencrypt is a certbot folder, not acme.sh
     
    Th0m, Feb 22, 2021
    #16
  17. Alexander Foti

    Alexander Foti Member HowtoForge Supporter

    So it looks like I have moved from certbot to Acme.sh in December. hmmmm any ideas on the best way out of this situation?
     
    Alexander Foti, Feb 22, 2021
    #17
  18. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    We will first have to check which sites have a certbot cert, with
    Code:
    ls -la /etc/letsencrypt/live
     
    Th0m, Feb 22, 2021
    #18
  19. Alexander Foti

    Alexander Foti Member HowtoForge Supporter

    Code:
    /var/log/letsencrypt# ls -la /etc/letsencrypt/live
total 96
drwx------ 24 root root 4096 Feb 22 09:04 .
drwxr-xr-x  8 root root 4096 Nov  7  2017 ..
drwxr-xr-x  2 root root 4096 Oct 24 12:59 website1.com
drwxr-xr-x  2 root root 4096 Oct  3 12:49 website2.com
drwxr-xr-x  2 root root 4096 Oct 19 00:55 website3.global
drwxr-xr-x  2 root root 4096 Sep 20 12:22 website4.com
drwxr-xr-x  2 root root 4096 Nov  5  2019 website45.com
drwxr-xr-x  2 root root 4096 Oct 30  2019 website6.co.uk
    Unedited contents in PM
     
    Alexander Foti, Feb 22, 2021
    #19
  20. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Seems like several of your sites have a certbot cert, so removing it will lead to issues. And it seems like you have been using certbot longer.
    Can you do the same for the acme.sh folder:
    Code:
    ls -la /root/.acme.sh
     
    Th0m, Feb 22, 2021
    #20
Page 1 of 2

Share This Page