lets encrypt with no apache server

Discussion in 'General' started by Paul C, Jun 25, 2023.

  1. Paul C

    Paul C New Member

    I'm trying to setup a multi server setup with 2 servers. The breakdown of the servers is as follows.
    1. Panel, Web, DNS1
    2. Mail, DNS2

    The issue I'm having is with the second server. It is unable to create the lets encrypt certificate due to their being no apache server for to validate it with. How can I create a valid lets encrypt certificate on the second server?
     
    Paul C, Jun 25, 2023
    #1
  2. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    Usually e-mail server has webmail, Roundcube, so web server is installed for that.
    But I am sure let's encrypt client can be issued without web server on the host. How did you install the two servers? Did you create LE certificate during ISPConfig install or later?
    You should start with this to get some context: https://forum.howtoforge.com/threads/please-read-before-posting.58408/
     
    Taleman, Jun 25, 2023
    #2
    ahrasis likes this.
  3. till

    till Super Moderator Staff Member ISPConfig Developer

    Creating a LE cert should work without apache or Nginx, so most likely, your issue is not related to the absence of a web server. Which exact errors did you get during installation and which errors did you get in the acme.sh or certbot log file?
     
    till, Jun 25, 2023
    #3
  4. ahrasis

    ahrasis Well-Known Member HowtoForge Supporter

    Yes. We obtain let's encrypt certs using standalone parameter for ISPConfig server without web service.

    The ISPConfig code supposedly will open port 80 on the server if it was closed and close it back after the let's encrypt certs were successfully obtained.

    As @till said, check the log of your LE client to troubleshoot the problem.
     
    ahrasis, Jun 25, 2023
    #4
  5. Paul C

    Paul C New Member

    I tried to create the certifcate during the installation with the auto installer. I also tried to create the certificate when I ran the ispconfig_update.sh script.

    This is the error I received on screen after running ispconfig_update.sh.

    Code:
    Checking / creating certificate for mail1.topgunhosting.ca
Using certificate path /root/.acme.sh/mail1.topgunhosting.ca
Using apache for certificate validation
acme.sh is installed, overriding certificate path to use /root/.acme.sh/mail1.topgunhosting.ca
[Sat 24 Jun 2023 07:38:25 PM PDT] mail1.topgunhosting.ca:Verify error:23.92.26.120: Fetching http://mail1.topgunhosting.ca/.well-known/acme-challenge/ydZZUvudiq0OZ4LOBXljdrrWY2j-nSbVwfAiorfsOFo: Timeout during connect (likely firewall problem)
[Sat 24 Jun 2023 07:38:25 PM PDT] Please check log file for more details: /var/log/ispconfig/acme.log
    Here is the acme.log log file.

    Code:
    [Sun 25 Jun 2023 04:40:56 AM PDT] Running cmd: setdefaultca
[Sun 25 Jun 2023 04:40:56 AM PDT] Changed default CA to: https://acme-v02.api.letsencrypt.org/directory
[Sun 25 Jun 2023 04:40:56 AM PDT] Lets find script dir.
[Sun 25 Jun 2023 04:40:56 AM PDT] _SCRIPT_='/root/.acme.sh/acme.sh'
[Sun 25 Jun 2023 04:40:56 AM PDT] _script='/root/.acme.sh/acme.sh'
[Sun 25 Jun 2023 04:40:56 AM PDT] _script_home='/root/.acme.sh'
[Sun 25 Jun 2023 04:40:56 AM PDT] Using config home:/root/.acme.sh
[Sun 25 Jun 2023 04:40:56 AM PDT] Running cmd: issue
[Sun 25 Jun 2023 04:40:56 AM PDT] _main_domain='mail1.topgunhosting.ca'
[Sun 25 Jun 2023 04:40:56 AM PDT] _alt_domains='no'
[Sun 25 Jun 2023 04:40:56 AM PDT] Using config home:/root/.acme.sh
[Sun 25 Jun 2023 04:40:56 AM PDT] default_acme_server='https://acme-v02.api.letsencrypt.org/directory'
[Sun 25 Jun 2023 04:40:56 AM PDT] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Sun 25 Jun 2023 04:40:56 AM PDT] DOMAIN_PATH='/root/.acme.sh/mail1.topgunhosting.ca'
[Sun 25 Jun 2023 04:40:56 AM PDT] Le_NextRenewTime
[Sun 25 Jun 2023 04:40:56 AM PDT] Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory
[Sun 25 Jun 2023 04:40:56 AM PDT] _init api for server: https://acme-v02.api.letsencrypt.org/directory
[Sun 25 Jun 2023 04:40:56 AM PDT] GET
[Sun 25 Jun 2023 04:40:56 AM PDT] url='https://acme-v02.api.letsencrypt.org/directory'
[Sun 25 Jun 2023 04:40:56 AM PDT] timeout=
[Sun 25 Jun 2023 04:40:56 AM PDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sun 25 Jun 2023 04:40:56 AM PDT] ret='0'
[Sun 25 Jun 2023 04:40:56 AM PDT] ACME_KEY_CHANGE='https://acme-v02.api.letsencrypt.org/acme/key-change'
[Sun 25 Jun 2023 04:40:56 AM PDT] ACME_NEW_AUTHZ
[Sun 25 Jun 2023 04:40:56 AM PDT] ACME_NEW_ORDER='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Sun 25 Jun 2023 04:40:56 AM PDT] ACME_NEW_ACCOUNT='https://acme-v02.api.letsencrypt.org/acme/new-acct'
[Sun 25 Jun 2023 04:40:56 AM PDT] ACME_REVOKE_CERT='https://acme-v02.api.letsencrypt.org/acme/revoke-cert'
[Sun 25 Jun 2023 04:40:56 AM PDT] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf'
[Sun 25 Jun 2023 04:40:56 AM PDT] ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Sun 25 Jun 2023 04:40:56 AM PDT] Using CA: https://acme-v02.api.letsencrypt.org/directory
[Sun 25 Jun 2023 04:40:56 AM PDT] _on_before_issue
[Sun 25 Jun 2023 04:40:56 AM PDT] _chk_main_domain='mail1.topgunhosting.ca'
[Sun 25 Jun 2023 04:40:56 AM PDT] _chk_alt_domains
[Sun 25 Jun 2023 04:40:56 AM PDT] Le_LocalAddress
[Sun 25 Jun 2023 04:40:56 AM PDT] d='mail1.topgunhosting.ca'
[Sun 25 Jun 2023 04:40:56 AM PDT] Check for domain='mail1.topgunhosting.ca'
[Sun 25 Jun 2023 04:40:56 AM PDT] _currentRoot='/usr/local/ispconfig/interface/acme'
[Sun 25 Jun 2023 04:40:56 AM PDT] d
[Sun 25 Jun 2023 04:40:56 AM PDT] _saved_account_key_hash is not changed, skip register account.
[Sun 25 Jun 2023 04:40:56 AM PDT] Read key length:4096
[Sun 25 Jun 2023 04:40:56 AM PDT] _createcsr
[Sun 25 Jun 2023 04:40:56 AM PDT] Single domain='mail1.topgunhosting.ca'
[Sun 25 Jun 2023 04:40:56 AM PDT] Getting domain auth token for each domain
[Sun 25 Jun 2023 04:40:56 AM PDT] d
[Sun 25 Jun 2023 04:40:56 AM PDT] url='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Sun 25 Jun 2023 04:40:56 AM PDT] payload='{"identifiers": [{"type":"dns","value":"mail1.topgunhosting.ca"}]}'
[Sun 25 Jun 2023 04:40:56 AM PDT] EC key
[Sun 25 Jun 2023 04:40:56 AM PDT] HEAD
[Sun 25 Jun 2023 04:40:56 AM PDT] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Sun 25 Jun 2023 04:40:56 AM PDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g  -I  '
[Sun 25 Jun 2023 04:40:56 AM PDT] _ret='0'
[Sun 25 Jun 2023 04:40:56 AM PDT] POST
[Sun 25 Jun 2023 04:40:56 AM PDT] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Sun 25 Jun 2023 04:40:56 AM PDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sun 25 Jun 2023 04:40:57 AM PDT] _ret='0'
[Sun 25 Jun 2023 04:40:57 AM PDT] code='201'
[Sun 25 Jun 2023 04:40:57 AM PDT] Le_LinkOrder='https://acme-v02.api.letsencrypt.org/acme/order/1173238027/190834619327'
[Sun 25 Jun 2023 04:40:57 AM PDT] Le_OrderFinalize='https://acme-v02.api.letsencrypt.org/acme/finalize/1173238027/190834619327'
[Sun 25 Jun 2023 04:40:57 AM PDT] url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/239894879887'
[Sun 25 Jun 2023 04:40:57 AM PDT] payload
[Sun 25 Jun 2023 04:40:57 AM PDT] POST
[Sun 25 Jun 2023 04:40:57 AM PDT] _post_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/239894879887'
[Sun 25 Jun 2023 04:40:57 AM PDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sun 25 Jun 2023 04:40:57 AM PDT] _ret='0'
[Sun 25 Jun 2023 04:40:57 AM PDT] code='200'
[Sun 25 Jun 2023 04:40:57 AM PDT] d='mail1.topgunhosting.ca'
[Sun 25 Jun 2023 04:40:57 AM PDT] Getting webroot for domain='mail1.topgunhosting.ca'
[Sun 25 Jun 2023 04:40:57 AM PDT] _w='/usr/local/ispconfig/interface/acme'
[Sun 25 Jun 2023 04:40:57 AM PDT] _currentRoot='/usr/local/ispconfig/interface/acme'
[Sun 25 Jun 2023 04:40:57 AM PDT] entry='"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA","token":"_krhhUQgjlDa4RGhzjqnrYsLO_u3OZgeILj3cTTfIrE"'
[Sun 25 Jun 2023 04:40:57 AM PDT] token='_krhhUQgjlDa4RGhzjqnrYsLO_u3OZgeILj3cTTfIrE'
[Sun 25 Jun 2023 04:40:57 AM PDT] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:40:57 AM PDT] keyauthorization='_krhhUQgjlDa4RGhzjqnrYsLO_u3OZgeILj3cTTfIrE.hjiRaeevgTKPkiC9uTPKoxDlcV3g4ot8sMFm_imf_j8'
[Sun 25 Jun 2023 04:40:57 AM PDT] dvlist='mail1.topgunhosting.ca#_krhhUQgjlDa4RGhzjqnrYsLO_u3OZgeILj3cTTfIrE.hjiRaeevgTKPkiC9uTPKoxDlcV3g4ot8sMFm_imf_j8#https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA#http-01#/usr/local/ispconfig/interface/acme'
[Sun 25 Jun 2023 04:40:57 AM PDT] d
[Sun 25 Jun 2023 04:40:57 AM PDT] vlist='mail1.topgunhosting.ca#_krhhUQgjlDa4RGhzjqnrYsLO_u3OZgeILj3cTTfIrE.hjiRaeevgTKPkiC9uTPKoxDlcV3g4ot8sMFm_imf_j8#https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA#http-01#/usr/local/ispconfig/interface/acme,'
[Sun 25 Jun 2023 04:40:57 AM PDT] d='mail1.topgunhosting.ca'
[Sun 25 Jun 2023 04:40:57 AM PDT] ok, let's start to verify
[Sun 25 Jun 2023 04:40:57 AM PDT] Verifying: mail1.topgunhosting.ca
[Sun 25 Jun 2023 04:40:57 AM PDT] d='mail1.topgunhosting.ca'
[Sun 25 Jun 2023 04:40:57 AM PDT] keyauthorization='_krhhUQgjlDa4RGhzjqnrYsLO_u3OZgeILj3cTTfIrE.hjiRaeevgTKPkiC9uTPKoxDlcV3g4ot8sMFm_imf_j8'
[Sun 25 Jun 2023 04:40:57 AM PDT] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:40:57 AM PDT] _currentRoot='/usr/local/ispconfig/interface/acme'
[Sun 25 Jun 2023 04:40:57 AM PDT] wellknown_path='/usr/local/ispconfig/interface/acme/.well-known/acme-challenge'
[Sun 25 Jun 2023 04:40:57 AM PDT] writing token:_krhhUQgjlDa4RGhzjqnrYsLO_u3OZgeILj3cTTfIrE to /usr/local/ispconfig/interface/acme/.well-known/acme-challenge/_krhhUQgjlDa4RGhzjqnrYsLO_u3OZgeILj3cTTfIrE
[Sun 25 Jun 2023 04:40:57 AM PDT] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:40:57 AM PDT] payload='{}'
[Sun 25 Jun 2023 04:40:57 AM PDT] POST
[Sun 25 Jun 2023 04:40:57 AM PDT] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:40:57 AM PDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sun 25 Jun 2023 04:40:57 AM PDT] _ret='0'
[Sun 25 Jun 2023 04:40:57 AM PDT] code='200'
[Sun 25 Jun 2023 04:40:57 AM PDT] trigger validation code: 200
[Sun 25 Jun 2023 04:40:57 AM PDT] Pending, The CA is processing your order, please just wait. (1/30)
[Sun 25 Jun 2023 04:40:57 AM PDT] sleep 2 secs to verify again
[Sun 25 Jun 2023 04:40:59 AM PDT] checking
[Sun 25 Jun 2023 04:40:59 AM PDT] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:40:59 AM PDT] payload
[Sun 25 Jun 2023 04:40:59 AM PDT] POST
[Sun 25 Jun 2023 04:40:59 AM PDT] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:40:59 AM PDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sun 25 Jun 2023 04:40:59 AM PDT] _ret='0'
[Sun 25 Jun 2023 04:40:59 AM PDT] code='200'
[Sun 25 Jun 2023 04:40:59 AM PDT] Pending, The CA is processing your order, please just wait. (2/30)
[Sun 25 Jun 2023 04:40:59 AM PDT] sleep 2 secs to verify again
[Sun 25 Jun 2023 04:41:01 AM PDT] checking
[Sun 25 Jun 2023 04:41:01 AM PDT] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:01 AM PDT] payload
[Sun 25 Jun 2023 04:41:01 AM PDT] POST
[Sun 25 Jun 2023 04:41:01 AM PDT] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:01 AM PDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sun 25 Jun 2023 04:41:01 AM PDT] _ret='0'
[Sun 25 Jun 2023 04:41:01 AM PDT] code='200'
[Sun 25 Jun 2023 04:41:01 AM PDT] Pending, The CA is processing your order, please just wait. (3/30)
[Sun 25 Jun 2023 04:41:01 AM PDT] sleep 2 secs to verify again
[Sun 25 Jun 2023 04:41:03 AM PDT] checking
[Sun 25 Jun 2023 04:41:04 AM PDT] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:04 AM PDT] payload
[Sun 25 Jun 2023 04:41:04 AM PDT] POST
[Sun 25 Jun 2023 04:41:04 AM PDT] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:04 AM PDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sun 25 Jun 2023 04:41:04 AM PDT] _ret='0'
[Sun 25 Jun 2023 04:41:04 AM PDT] code='200'
[Sun 25 Jun 2023 04:41:04 AM PDT] Pending, The CA is processing your order, please just wait. (4/30)
[Sun 25 Jun 2023 04:41:04 AM PDT] sleep 2 secs to verify again
[Sun 25 Jun 2023 04:41:06 AM PDT] checking
[Sun 25 Jun 2023 04:41:06 AM PDT] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:06 AM PDT] payload
[Sun 25 Jun 2023 04:41:06 AM PDT] POST
[Sun 25 Jun 2023 04:41:06 AM PDT] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:06 AM PDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sun 25 Jun 2023 04:41:06 AM PDT] _ret='0'
[Sun 25 Jun 2023 04:41:06 AM PDT] code='200'
[Sun 25 Jun 2023 04:41:06 AM PDT] Pending, The CA is processing your order, please just wait. (5/30)
[Sun 25 Jun 2023 04:41:06 AM PDT] sleep 2 secs to verify again
[Sun 25 Jun 2023 04:41:08 AM PDT] checking
[Sun 25 Jun 2023 04:41:08 AM PDT] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:08 AM PDT] payload
[Sun 25 Jun 2023 04:41:08 AM PDT] POST
[Sun 25 Jun 2023 04:41:08 AM PDT] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:08 AM PDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sun 25 Jun 2023 04:41:08 AM PDT] _ret='0'
[Sun 25 Jun 2023 04:41:08 AM PDT] code='200'
[Sun 25 Jun 2023 04:41:08 AM PDT] Pending, The CA is processing your order, please just wait. (6/30)
[Sun 25 Jun 2023 04:41:08 AM PDT] sleep 2 secs to verify again
[Sun 25 Jun 2023 04:41:10 AM PDT] checking
[Sun 25 Jun 2023 04:41:10 AM PDT] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:10 AM PDT] payload
[Sun 25 Jun 2023 04:41:10 AM PDT] POST
[Sun 25 Jun 2023 04:41:10 AM PDT] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:10 AM PDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sun 25 Jun 2023 04:41:10 AM PDT] _ret='0'
[Sun 25 Jun 2023 04:41:10 AM PDT] code='200'
[Sun 25 Jun 2023 04:41:10 AM PDT] Pending, The CA is processing your order, please just wait. (7/30)
[Sun 25 Jun 2023 04:41:10 AM PDT] sleep 2 secs to verify again
[Sun 25 Jun 2023 04:41:12 AM PDT] checking
[Sun 25 Jun 2023 04:41:12 AM PDT] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:12 AM PDT] payload
[Sun 25 Jun 2023 04:41:12 AM PDT] POST
[Sun 25 Jun 2023 04:41:12 AM PDT] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:12 AM PDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sun 25 Jun 2023 04:41:13 AM PDT] _ret='0'
[Sun 25 Jun 2023 04:41:13 AM PDT] code='200'
[Sun 25 Jun 2023 04:41:13 AM PDT] Pending, The CA is processing your order, please just wait. (8/30)
[Sun 25 Jun 2023 04:41:13 AM PDT] sleep 2 secs to verify again
[Sun 25 Jun 2023 04:41:15 AM PDT] checking
[Sun 25 Jun 2023 04:41:15 AM PDT] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:15 AM PDT] payload
[Sun 25 Jun 2023 04:41:15 AM PDT] POST
[Sun 25 Jun 2023 04:41:15 AM PDT] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:15 AM PDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sun 25 Jun 2023 04:41:15 AM PDT] _ret='0'
[Sun 25 Jun 2023 04:41:15 AM PDT] code='200'
[Sun 25 Jun 2023 04:41:15 AM PDT] Pending, The CA is processing your order, please just wait. (9/30)
[Sun 25 Jun 2023 04:41:15 AM PDT] sleep 2 secs to verify again
[Sun 25 Jun 2023 04:41:17 AM PDT] checking
[Sun 25 Jun 2023 04:41:17 AM PDT] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:17 AM PDT] payload
[Sun 25 Jun 2023 04:41:17 AM PDT] POST
[Sun 25 Jun 2023 04:41:17 AM PDT] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:17 AM PDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sun 25 Jun 2023 04:41:17 AM PDT] _ret='0'
[Sun 25 Jun 2023 04:41:17 AM PDT] code='200'
[Sun 25 Jun 2023 04:41:17 AM PDT] Pending, The CA is processing your order, please just wait. (10/30)
[Sun 25 Jun 2023 04:41:17 AM PDT] sleep 2 secs to verify again
[Sun 25 Jun 2023 04:41:19 AM PDT] checking
[Sun 25 Jun 2023 04:41:19 AM PDT] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:19 AM PDT] payload
[Sun 25 Jun 2023 04:41:19 AM PDT] POST
[Sun 25 Jun 2023 04:41:19 AM PDT] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:19 AM PDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sun 25 Jun 2023 04:41:19 AM PDT] _ret='0'
[Sun 25 Jun 2023 04:41:19 AM PDT] code='200'
[Sun 25 Jun 2023 04:41:19 AM PDT] mail1.topgunhosting.ca:Verify error:23.92.26.120: Fetching http://mail1.topgunhosting.ca/.well-known/acme-challenge/_krhhUQgjlDa4RGhzjqnrYsLO_u3OZgeILj3cTTfIrE: Timeout during connect (likely firewall problem)
[Sun 25 Jun 2023 04:41:19 AM PDT] pid
[Sun 25 Jun 2023 04:41:19 AM PDT] No need to restore nginx, skip.
[Sun 25 Jun 2023 04:41:19 AM PDT] _clearupdns
[Sun 25 Jun 2023 04:41:19 AM PDT] dns_entries
[Sun 25 Jun 2023 04:41:19 AM PDT] skip dns.
[Sun 25 Jun 2023 04:41:19 AM PDT] _on_issue_err
[Sun 25 Jun 2023 04:41:19 AM PDT] Please check log file for more details: /var/log/ispconfig/acme.log
[Sun 25 Jun 2023 04:41:19 AM PDT] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:19 AM PDT] payload='{}'
[Sun 25 Jun 2023 04:41:19 AM PDT] POST
[Sun 25 Jun 2023 04:41:19 AM PDT] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/239894879887/oriGGA'
[Sun 25 Jun 2023 04:41:19 AM PDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sun 25 Jun 2023 04:41:19 AM PDT] _ret='0'
[Sun 25 Jun 2023 04:41:19 AM PDT] code='400'
     
    Paul C, Jun 26, 2023
    #5
  6. ahrasis

    ahrasis Well-Known Member HowtoForge Supporter

    Are you sure you didn't have web server installed (i.e. nginx in this case and as also webroot was used instead of standalone as shown in the log)? Do check that and its logs as well.

    This error is a "Timeout". Meaning the Let's Encrypt server could not reach your domain.
     
    Last edited: Jun 26, 2023
    ahrasis, Jun 26, 2023
    #6
  7. Paul C

    Paul C New Member

    I looked and found nginx was not installed. However the apache server was installed. It had been pulled in by roundcube. I uninstalled both and executed "ispconfig_update.sh --force" again. This time the certificate was created with no error.

    Thank you for the suggestion and pointing the way.
     
    Paul C, Jun 26, 2023
    #7
    ahrasis likes this.

Share This Page