Let's Encrypt certs are not issued

Discussion in 'ISPConfig 3 Priority Support' started by cmks, Mar 23, 2021.

  1. cmks

    cmks Member HowtoForge Supporter

    Dear,
    we have a new server in an ISPConfig v3.2.3 multiserver enviroment:
    Code:
    root@v10006:/var/log/ispconfig# lsb_release -a
    No LSB modules are available.
    Distributor ID:    Debian
    Description:    Debian GNU/Linux 10 (buster)
    Release:    10
    Codename:    buster
    
    root@v10006:/var/log/ispconfig# php -v
    PHP 7.3.27-1~deb10u1 (cli) (built: Feb 13 2021 16:31:40) ( NTS )
    Copyright (c) 1997-2018 The PHP Group
    Zend Engine v3.3.27, Copyright (c) 1998-2018 Zend Technologies
        with Zend OPcache v7.3.27-1~deb10u1, Copyright (c) 1999-2018, by Zend Technologies
    
    I configured a domain and webserver for this site. After checking the Let's Encrypt SSL checkbox, one config command is queued and as long it is in the queue the checkboxes (SSL & LE) staying cheked. After the queue is executed the checkboxes are unchecked, but neither an entry in /root/.acme.sh/acme.sh.log is logged nor is any error reported by /usr/local/ispconfig/server/server.sh.
    Code:
    root@v10006:/var/log/ispconfig# ll /root/.acme.sh/
    insgesamt 248K
    drwx------ 7 root root 4,0K Mär 22 18:03 .
    drwx------ 8 root root 4,0K Mär 23 15:57 ..
    -rw-r--r-- 1 root root  225 Mär 23 15:31 account.conf
    -rwxr-xr-x 1 root root 205K Mär 22 16:18 acme.sh
    -rw-r--r-- 1 root root   78 Mär 22 16:18 acme.sh.env
    drwxr-xr-x 3 root root 4,0K Mär 22 18:03 ca
    drwxr-xr-x 2 root root 4,0K Mär 22 16:18 deploy
    drwxr-xr-x 2 root root 4,0K Mär 22 16:18 dnsapi
    -rw-r--r-- 1 root root  490 Mär 23 15:31 http.header
    drwxr-xr-x 2 root root 4,0K Mär 22 16:18 notify
    drwxr-xr-x 2 root root 4,0K Mär 22 23:11 v10006.xxxx.de
    
    Code:
    root@v10006:/var/log/ispconfig# /usr/local/ispconfig/server/server.sh
    finished server.php.
    
    Issuing a cert with acme.sh @ console works as expected
    Code:
    root@v10006:~# acme.sh --issue -d v10006.xxxx.de --webroot /usr/local/ispconfig/interface/acme/
    How to debug this issue?

    Regards
    cmks
     
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

  3. cmks

    cmks Member HowtoForge Supporter

  4. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Please read the full FAQ. It describes how to enable debug mode before running the server.sh script, which you have not done.
     
  5. cmks

    cmks Member HowtoForge Supporter

    Thanks for that hint :confused:
    I should take more time to read all words of a post...
    Now I got some useful output to investigate.

    Assuming it has nothing to do with my issue, I want to know if this part of output should concerning me in any way?

    Code:
    /usr/local/ispconfig/server/server.sh
    23.03.2021-17:42 - DEBUG - Unable to register function 'process' from plugin 'software_update_plugin' for event 'software_update_inst_insert'
    23.03.2021-17:42 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'.
    23.03.2021-17:42 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
    finished server.php.
    
    Again, thank you
    cmks
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    No, that's fine. It shows just that there is nothing to do for the script.

    To debug your issue, enable the Let's encrypt checkbox in the website were you like to have a Let's encrypt ssl cert, press save, then run server.sh on the shell and post the result.
     
  7. cmks

    cmks Member HowtoForge Supporter

    I got the issue - it was an typo in the DNS zone which averted verifying the cert.
     
    till likes this.

Share This Page