Letsencrypt Failure

Discussion in 'General' started by jon, Aug 17, 2023.

  1. jon

    jon Member

    Noticed a new site wasn't getting a LE SSL cert, so I ran the server.php cron manually. This is the output:

    root@ellen:/tmp/ispconfig3_install/install# /usr/local/ispconfig/server/server.sh
    setquota: Error getting quota information to update.
    setquota: Error getting quota information to update.
    PHP Deprecated: explode(): Passing null to parameter #2 ($string) of type string is deprecated in /usr/local/ispconfig/server/lib/classes/letsencrypt.inc.php on line 47
    Saving debug log to /var/log/letsencrypt/letsencrypt.log
    Some challenges have failed.
    Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
    PHP Deprecated: explode(): Passing null to parameter #2 ($string) of type string is deprecated in /usr/local/ispconfig/server/lib/classes/letsencrypt.inc.php on line 47
    PHP Warning: Trying to access array offset on value of type bool in /usr/local/ispconfig/server/lib/classes/letsencrypt.inc.php on line 512
    PHP Warning: Trying to access array offset on value of type bool in /usr/local/ispconfig/server/lib/classes/letsencrypt.inc.php on line 517
    PHP Warning: Trying to access array offset on value of type bool in /usr/local/ispconfig/server/lib/classes/letsencrypt.inc.php on line 518
    PHP Deprecated: file_exists(): Passing null to parameter #1 ($filename) of type string is deprecated in /usr/local/ispconfig/server/lib/classes/letsencrypt.inc.php on line 526
    finished server.php.
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Here you have the reason:

    which means that certbot was likely not able to reach the domain you tried getting a SSL cert for, but details can be found in the Let's encrypt log file /var/log/letsencrypt/letsencrypt.log

    Btw. which Operating system, PHP version and ISPConfig version do you use on this server?
     
  3. jon

    jon Member

    Here is the log. I've replaced the domain with example.tld. I do know the domain is accessible, however the www.cloud.example.tld does not exist.

    2023-08-17 11:43:27,265:DEBUG:certbot._internal.main:certbot version: 2.1.0
    2023-08-17 11:43:27,265:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/bin/certbot
    2023-08-17 11:43:27,265:DEBUG:certbot._internal.main:Arguments: ['--domains', 'cloud.example.tld', '--domains', 'www.cloud.example.tld']
    2023-08-17 11:43:27,265:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#dns-cloudflare,PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
    2023-08-17 11:43:27,305:DEBUG:certbot._internal.log:Root logging level set at 30
    2023-08-17 11:43:27,383:DEBUG:certbot._internal.display.obj:Notifying user: Found the following matching certs:

    Running Debian Bookworm, PHP 8.1 ISPConfig 3.2.11
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    You can not get SSL certs for non-existing domains. If you do not want to use www subdomain, set auto-subdomain to none in website settings.
     
    ahrasis and jon like this.
  5. till

    till Super Moderator Staff Member ISPConfig Developer

    Btw. the Let#s encrypt error FAQ mentions this as well:

    https://forum.howtoforge.com/threads/lets-encrypt-error-faq.74179/

     
    ahrasis likes this.
  6. jon

    jon Member

    Oh man, I knew it was something simple. I should have known that.
    Thank you!
     

Share This Page