Letsencrypt SSL only generated when IP adress is selected

Discussion in 'Installation/Configuration' started by progressed36, Feb 28, 2020.

  1. progressed36

    progressed36 Member

    HI there,
    Ive added an extra server to my multiserver setup. The issue i have is whenever i select Lets Encrypt SSL it generates the SSL without a problem. No errors even (debug mode and run server.sh), but when i try to go to the website it does not find the certificate and shows me the first SSL domain on that server. I found out that when selecting a IP address this issue is resolved... but my other servers are set with * and do it without any problem?

    Can somebody explain me what i did wrong or if its a issue?!
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Di not mix IP and * in the IPv4 field on a server. all sites must use * or all sites must use the IP. If you mix it, all traffic will go to the first site which has an IP selected as an IP is a stronger match than a wildcard.
     
  3. progressed36

    progressed36 Member

    I didnt mix it. The first website i made on that server had this problem and all the other websites did two. I normally always use *. Somehow on this new addition to the family it did not work.
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    In this case, it might be that the IP address is used somewhere else in the apache config outside of the files that ispconfig created.
     
  5. progressed36

    progressed36 Member

  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Search the whole /etc/apache2 folder with grep for the IP to find where it is. Also, take care that the hostname of the server is not identical to a website that you host.
     
  7. progressed36

    progressed36 Member

    i just grepped the folders within /etc/apache2/
    Unfortunatly the results are only the vhost files created by ispconfig within sites-available. and the IP's are in there because without the selected public IP it would just fail.

    the moment i choose * it will fail again.
     
  8. till

    till Super Moderator Staff Member ISPConfig Developer

    You have to change all to * and then grep again, otherwise you can't test it as the setup must fail when a single site remains at the IP.

    Or you simply leave it at the IP, there is no drawback compared to using *.
     
  9. progressed36

    progressed36 Member

    I changed them all back to * and offcourse your right... they all work!
    I am curious how come it gave me errors even on the first site on a clean install, but its probably my fault. Thanks!
     
  10. till

    till Super Moderator Staff Member ISPConfig Developer

    Might be that the domain was not ready at the first attempt so LE failed to verify it and in the time you switched to IP it was ready and that's why it got trough then.
     
  11. progressed36

    progressed36 Member

    again. your probably right. my bad!
     

Share This Page