Let´s encrypt SSL not activating

Discussion in 'ISPConfig 3 Priority Support' started by djesys, Jan 13, 2025.

  1. djesys

    djesys Member HowtoForge Supporter

    Hi there,
    I set up ISPCONFIG with the automated install script on ubuntu with nginx. Everything is working well, except Let´sencrypt - SSL, which won´t stick when activating it on my Wordpress site. I went through the Let´s encrypt error FAQ and can confirm that:

    - the client seems installed, as I have acme.sh
    - i am on ISPConfig Version: 3.2.12p1
    - server is exposed on WAN with fixed IP
    - DNS is correct, I can open WP by using just http://
    - server migration mode is deactivated

    I was looking for acme.sh or letsencrypt log files but could not find any, so I decided to come here. I am sure it´s nothing big.
    Thanks for your time !
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    The Let's Encrypt error FAQ includes what to do in that case:

     
  3. djesys

    djesys Member HowtoForge Supporter

    Thanks Till,

    The error is: 13.01.2025-13:50 - WARNING - Could not verify domain xxxxx.com, so excluding it from letsencrypt request.

    The domain is active and working. I can open the WP site just using http://xxxxx.com ... why would it complain ?
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    The server tries to reach the domain and it is not reachable from your server. What happens if you run e.g.:

    cd /tmp
    wget http://xxxxx.com

    on the server itself?
     
  5. djesys

    djesys Member HowtoForge Supporter

    it resolves the IP but times out...but I can open http://xxxxx.com in my browser ???
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Most likely, your server is behind a NAT router, and the router blocks requests from the server to the domain's IP. In this case, enable the 'Skip let's Encrypt check" checkbox as mentioned in the LE error FAQ.
     
  7. djesys

    djesys Member HowtoForge Supporter

    This worked. Thank you very much. can close
     

Share This Page