monit working with http only

Discussion in 'Installation/Configuration' started by Robetus, Jan 20, 2023.

Tags:
  1. Robetus

    Robetus Member

    I have monit up and running on ISPConfig 3.2.9 Ubuntu 22.04 with http only. I am attempting to use the certificate provided by acme.sh for ISPConfig's main url since monit is only on port 2812 of the main url but I can't get it to work. Here is the monitrc file:
    Code:
    set httpd port 2812 and
    # use address localhost
       allow admin:password      # require user 'admin' with password 'monit'
    #with ssl {            # enable SSL/TLS and set path to server certificate
    #    pemfile: /root/.acme.sh/domain.com/domain.pem
    #}
    #
    
    When I uncomment the ssl section the site does not load, monit reloads without error but the site is not accessible any longer. Again, http without any ssl works fine with domain.com:2812. Do I need to generate a seperate ssl cert with acme.sh? Or any other ideas would be appreciated. I am using domain.com for my real domain of course.

    Error in monit log:
    Code:
    error    : HTTP server -- Could not initialize SSL engine
    
     
    Last edited: Jan 20, 2023
  2. pyte

    pyte Well-Known Member HowtoForge Supporter

    The path to the ssl cert is wrong. monit will not be able to access /root/. Usually the cert gets copied to a directory after creation, check the config file for said certificate in the /root/.acme.sh/domain.com/domain.com.conf file. There should be a line in there where the cert gets copied after creation, use this path in your monit conf or copy the cert over to a folder where monit has access to.
     
    Robetus likes this.
  3. Robetus

    Robetus Member

    Bingo! Thank you, the correct pem file was in /usr/local/ispconfig/interface/ssl/ispserver.pem
    I added it to the monit config and all is well.
     
    pyte likes this.

Share This Page