Mailserver-SSL not renewing

Discussion in 'Installation/Configuration' started by Yel4144, Dec 1, 2024.

  1. Yel4144

    Yel4144 New Member

    Hi.
    This morning I had the problem that mails could not be send: Everytime a mail has beens sent from Google using ISPC-Smtp TLS error Non-Deliveryreports were received.
    I found out that '/etc/postfix' contained smtpd.cert and smtp.key linking to '/usr/local/ispconfig/interface/ssl' (ispserver.crt and ispserver.key).
    Letsencrypt updated the files in '/root/.acme.sh/hostname/'. The files there are from sept 1st.
    After deleting the 2 link-files, relinking them directly to '/root/.acme.sh/hostname/fullchain.cer and '/root/.acme.sh/hostname/hostname.key, restarting postfix and dovecot it worked again.
    I persume there must be a script copying the actual cert and key into '/usr/local/ispconfig/interface/ssl'. Where is this script? In '/usr/local/ispconfig/server/scripts/letsencrypt_renew_hook.sh' I see that '/root/.acme.sh/hostname/' is checked as 'lelive'-variable, but I don't see the crt and key being copied as ispserver.crt and ispserver.key. Might this be the problem?
    Thanks for your help!
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Just a guess, did you maybe created a website for the hostname and activated SSL for it? As this causes the SSL cert renewal for the hostname in ISPConfig to fail as the cert gets then renewed for this website only and not for the other services like ISPConfig.
     
  3. till

    till Super Moderator Staff Member ISPConfig Developer

    The script is acme.sh itself.
     

Share This Page