Lets Encrypt error after upgrade to debian 10.3

Discussion in 'Server Operation' started by ewkilian, May 12, 2020.

  1. ewkilian

    ewkilian Member

    Hi,
    I have upgrade my Debian to 10.3
    and now my lets encrypt don't run.

    In the log I can see Log : https://pastebin.com/10Ftp3sq

    Have you a suggest to help me ? thank you very mutch
     
    Last edited: May 12, 2020
  2. ewkilian

    ewkilian Member

    If a execute certbot --apache and choice the domain, the certificate is OK, I can use httpS. But I think that doesn't work when I check SSL and Letsencrypt with ISPCONFIG
     
  3. till

    till Super Moderator Staff Member ISPConfig Developer

    You can not manage the site anymore in ISPConfig, neither SSL nor any other options will work if you used this option for a site. You have to undo all changes that certbot made to get it working again.

    Regarding your original error, LE was not able to reach the domain on your server and for that reason, the cert could not be issued. Check that the domain and all subdomains that you configured for it in ISPConfig are really pointing to the right server and that you did not redirect requests to the LE token to a different path or URL.
     
  4. ewkilian

    ewkilian Member

    Thank you. I see the error. but I don't understand.
    I see : /etc/letsencrypt/live/aks-services.fr
    But in the log I can see :
    certbot.errors.FailedChallenges: Failed authorization procedure. ak-services.fr (http-01):
    The Letter 'S' is missing. and on ISPCONFIG I see the 'S'
    On the path :
    /etc/letsencrypt/renewal# ls
    I see :
    "www.aks-services.fr-0001.conf"
    "www.aks-services.fr.conf"

    where can I find the chain with "ak-services.fr" ? that I can add the missing 'S'.

    Thank You.

    PS : I don't think I changed have modify the URL, It's work since a long time. I can't explain it to myself
     
  5. till

    till Super Moderator Staff Member ISPConfig Developer

    Check in ispconfig that there is really no subdomain or alias domain for this website which uses the wrong domain name.
     

Share This Page