I have monit up and running on ISPConfig 3.2.9 Ubuntu 22.04 with http only. I am attempting to use the certificate provided by acme.sh for ISPConfig's main url since monit is only on port 2812 of the main url but I can't get it to work. Here is the monitrc file: Code: set httpd port 2812 and # use address localhost allow admin:password # require user 'admin' with password 'monit' #with ssl { # enable SSL/TLS and set path to server certificate # pemfile: /root/.acme.sh/domain.com/domain.pem #} # When I uncomment the ssl section the site does not load, monit reloads without error but the site is not accessible any longer. Again, http without any ssl works fine with domain.com:2812. Do I need to generate a seperate ssl cert with acme.sh? Or any other ideas would be appreciated. I am using domain.com for my real domain of course. Error in monit log: Code: error : HTTP server -- Could not initialize SSL engine
The path to the ssl cert is wrong. monit will not be able to access /root/. Usually the cert gets copied to a directory after creation, check the config file for said certificate in the /root/.acme.sh/domain.com/domain.com.conf file. There should be a line in there where the cert gets copied after creation, use this path in your monit conf or copy the cert over to a folder where monit has access to.
Bingo! Thank you, the correct pem file was in /usr/local/ispconfig/interface/ssl/ispserver.pem I added it to the monit config and all is well.