i understand well 20.03.2020-14:56 - DEBUG - Calling function 'check_phpini_changes' from plugin ' webserver_plugin' raised by action 'server_plugins_loaded'. 20.03.2020-14:56 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispcon fig_lock finished. w/o activity if i disable SSL 20.03.2020-15:01 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'. 20.03.2020-15:01 - DEBUG - Found 1 changes, starting update process. 20.03.2020-15:01 - DEBUG - Calling function 'ssl' from plugin 'apache2_plugin' raised by event 'web_domain_update'. 20.03.2020-15:01 - DEBUG - Calling function 'update' from plugin 'apache2_plugin' raised by event 'web_domain_update'. 20.03.2020-15:01 - DEBUG - safe_exec cmd: chattr -i '/var/www/clients/client2/web36' - return code: 0 20.03.2020-15:01 - DEBUG - safe_exec cmd: chattr +i '/var/www/clients/client2/web36' - return code: 0 20.03.2020-15:01 - DEBUG - safe_exec cmd: df -T '/var/www/clients/client2/web36'|awk 'END{print $2,$NF}' - return code: 0 20.03.2020-15:01 - DEBUG - safe_exec cmd: which 'setquota' 2> /dev/null - return code: 0 20.03.2020-15:01 - DEBUG - safe_exec cmd: setquota -u 'web36' '0' '0' 0 0 -a &> /dev/null - return code: 0 20.03.2020-15:01 - DEBUG - safe_exec cmd: setquota -T -u 'web36' 604800 604800 -a &> /dev/null - return code: 0 20.03.2020-15:01 - DEBUG - safe_exec cmd: chattr +i '/var/www/clients/client2/web36' - return code: 0 20.03.2020-15:01 - DEBUG - safe_exec cmd: which 'apache2ctl' 2> /dev/null - return code: 0 20.03.2020-15:01 - DEBUG - Writing the vhost file: /etc/apache2/sites-available/mail......com.vhost 20.03.2020-15:01 - DEBUG - Apache status is: running 20.03.2020-15:01 - DEBUG - Calling function 'restartHttpd' from module 'web_module'. 20.03.2020-15:01 - DEBUG - Restarting httpd: systemctl restart apache2.service 20.03.2020-15:01 - DEBUG - Apache restart return value is: 0 20.03.2020-15:01 - DEBUG - Apache online status after restart is: running 20.03.2020-15:01 - DEBUG - Processed datalog_id 1398 20.03.2020-15:01 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock finished. and when i enable ssl:
20.03.2020-15:07 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'. 20.03.2020-15:07 - DEBUG - Found 1 changes, starting update process. 20.03.2020-15:07 - DEBUG - Calling function 'ssl' from plugin 'apache2_plugin' raised by event 'web_domain_update'. 20.03.2020-15:07 - DEBUG - Calling function 'update' from plugin 'apache2_plugin' raised by event 'web_domain_update'. 20.03.2020-15:07 - DEBUG - safe_exec cmd: chattr -i '/var/www/clients/client2/web36' - return code: 0 20.03.2020-15:07 - DEBUG - safe_exec cmd: chattr +i '/var/www/clients/client2/web36' - return code: 0 20.03.2020-15:07 - DEBUG - safe_exec cmd: df -T '/var/www/clients/client2/web36'|awk 'END{print $2,$NF}' - return code: 0 20.03.2020-15:07 - DEBUG - safe_exec cmd: which 'setquota' 2> /dev/null - return code: 0 20.03.2020-15:07 - DEBUG - safe_exec cmd: setquota -u 'web36' '0' '0' 0 0 -a &> /dev/null - return code: 0 20.03.2020-15:07 - DEBUG - safe_exec cmd: setquota -T -u 'web36' 604800 604800 -a &> /dev/null - return code: 0 20.03.2020-15:07 - DEBUG - safe_exec cmd: chattr +i '/var/www/clients/client2/web36' - return code: 0 20.03.2020-15:07 - DEBUG - safe_exec cmd: which 'apache2ctl' 2> /dev/null - return code: 0 20.03.2020-15:07 - DEBUG - Writing the vhost file: /etc/apache2/sites-available/mail......com.vhost 20.03.2020-15:07 - DEBUG - Apache status is: running 20.03.2020-15:07 - DEBUG - Calling function 'restartHttpd' from module 'web_module'. 20.03.2020-15:07 - DEBUG - Restarting httpd: systemctl restart apache2.service 20.03.2020-15:07 - DEBUG - Apache restart return value is: 0 20.03.2020-15:07 - DEBUG - Apache online status after restart is: running 20.03.2020-15:07 - DEBUG - Processed datalog_id 1399 20.03.2020-15:07 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock finished. do i do it now?
Yes, that's the requested output. Please post or attach the file /etc/apache2/sites-available/mail......com.vhost from your server. And please post the result of the commands: hostname and hostname -f
Just as info, I removed the above post just for privacy reasons. Ok, so the hostname id not identical to the affected site. The site which has this issue has no SSL section. For this site, you enabled SSL but not lets encrypt, right? if you do not enable let's encrypt, you have to create a SSL cert on the SSL tab, did you do that?
yes i do it. if llike, you can try to access this site ( its enabled with SSL), but you going to be redirect to a diferent site. if a remove SSL settings, You can see you again (HTTP MODE). this problem affect to every new site
but i understand, i didi SSL, but i dont fill ssl cert tab now this is the server.sh when i did it 20.03.2020-19:41 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'. 20.03.2020-19:41 - DEBUG - Found 1 changes, starting update process. 20.03.2020-19:41 - DEBUG - Calling function 'ssl' from plugin 'apache2_plugin' raised by event 'web_domain_update'. Generating RSA private key, 2048 bit long modulus (2 primes) .................................................................................+++++ ..............................................................+++++ e is 65537 (0x010001) 20.03.2020-19:41 - DEBUG - safe_exec cmd: openssl genrsa -des3 -rand '/var/www/clients/client2/web36/ssl/random_file' -passout pass:'59909ac6a9b706e' -out '/var/www/clients/client2/web36/ssl/mail.sigtattoo.com.key.org' 2048 - return code: 0 Ignoring -days; not generating a certificate 20.03.2020-19:41 - DEBUG - safe_exec cmd: openssl req -new -sha256 -passin pass:'59909ac6a9b706e' -passout pass:'59909ac6a9b706e' -key '/var/www/clients/client2/web36/ssl/mail.sigtattoo.com.key.org' -out '/var/www/clients/client2/web36/ssl/mail.sigtattoo.com.csr' -days '3650' -config '/var/www/clients/client2/web36/ssl/openssl.conf' - return code: 0 writing RSA key 20.03.2020-19:41 - DEBUG - safe_exec cmd: openssl rsa -passin pass:'59909ac6a9b706e' -in '/var/www/clients/client2/web36/ssl/mail.sigtattoo.com.key.org' -out '/var/www/clients/client2/web36/ssl/mail.sigtattoo.com.key' - return code: 0 20.03.2020-19:41 - DEBUG - safe_exec cmd: openssl req -x509 -passin pass:'59909ac6a9b706e' -passout pass:'59909ac6a9b706e' -key '/var/www/clients/client2/web36/ssl/mail.sigtattoo.com.key.org' -in '/var/www/clients/client2/web36/ssl/mail.sigtattoo.com.csr' -out '/var/www/clients/client2/web36/ssl/mail.sigtattoo.com.crt' -days '3650' -config '/var/www/clients/client2/web36/ssl/openssl.conf' - return code: 0 20.03.2020-19:41 - DEBUG - Creating self-signed SSL Cert for: mail.sigtattoo.com 20.03.2020-19:41 - DEBUG - Calling function 'update' from plugin 'apache2_plugin' raised by event 'web_domain_update'. 20.03.2020-19:41 - DEBUG - safe_exec cmd: chattr -i '/var/www/clients/client2/web36' - return code: 0 20.03.2020-19:41 - DEBUG - safe_exec cmd: chattr +i '/var/www/clients/client2/web36' - return code: 0 20.03.2020-19:41 - DEBUG - safe_exec cmd: df -T '/var/www/clients/client2/web36'|awk 'END{print $2,$NF}' - return code: 0 20.03.2020-19:41 - DEBUG - safe_exec cmd: which 'setquota' 2> /dev/null - return code: 0 20.03.2020-19:41 - DEBUG - safe_exec cmd: setquota -u 'web36' '0' '0' 0 0 -a &> /dev/null - return code: 0 20.03.2020-19:41 - DEBUG - safe_exec cmd: setquota -T -u 'web36' 604800 604800 -a &> /dev/null - return code: 0 20.03.2020-19:41 - DEBUG - safe_exec cmd: chattr +i '/var/www/clients/client2/web36' - return code: 0 20.03.2020-19:41 - DEBUG - safe_exec cmd: which 'apache2ctl' 2> /dev/null - return code: 0 20.03.2020-19:41 - DEBUG - Enable SSL for: mail.sigtattoo.com 20.03.2020-19:41 - DEBUG - Writing the vhost file: /etc/apache2/sites-available/mail.sigtattoo.com.vhost 20.03.2020-19:41 - DEBUG - Apache status is: running 20.03.2020-19:41 - DEBUG - Calling function 'restartHttpd' from module 'web_module'. 20.03.2020-19:41 - DEBUG - Restarting httpd: systemctl restart apache2.service 20.03.2020-19:41 - DEBUG - Apache restart return value is: 0 20.03.2020-19:41 - DEBUG - Apache online status after restart is: running 20.03.2020-19:41 - DEBUG - Processed datalog_id 1400 20.03.2020-19:41 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock finished.
now i feel like a stupid. i did it a hundred time, but this time i forget it i check 3 new sites and work with sll w/o a problems, but when i activate LE, i get this: 20.03.2020-19:50 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'. 20.03.2020-19:50 - DEBUG - Found 1 changes, starting update process. 20.03.2020-19:50 - DEBUG - Calling function 'ssl' from plugin 'apache2_plugin' raised by event 'web_domain_update'. 20.03.2020-19:50 - DEBUG - Calling function 'update' from plugin 'apache2_plugin' raised by event 'web_domain_update'. 20.03.2020-19:50 - DEBUG - safe_exec cmd: chattr -i '/var/www/clients/client2/web36' - return code: 0 20.03.2020-19:50 - DEBUG - safe_exec cmd: chattr +i '/var/www/clients/client2/web36' - return code: 0 20.03.2020-19:50 - DEBUG - safe_exec cmd: df -T '/var/www/clients/client2/web36'|awk 'END{print $2,$NF}' - return code: 0 20.03.2020-19:50 - DEBUG - safe_exec cmd: which 'setquota' 2> /dev/null - return code: 0 20.03.2020-19:50 - DEBUG - safe_exec cmd: setquota -u 'web36' '0' '0' 0 0 -a &> /dev/null - return code: 0 20.03.2020-19:50 - DEBUG - safe_exec cmd: setquota -T -u 'web36' 604800 604800 -a &> /dev/null - return code: 0 20.03.2020-19:50 - DEBUG - safe_exec cmd: chattr +i '/var/www/clients/client2/web36' - return code: 0 20.03.2020-19:50 - DEBUG - Verified domain mail.sigtattoo.com should be reachable for letsencrypt. 20.03.2020-19:50 - WARNING - Could not verify domain www.mail.sigtattoo.com, so excluding it from letsencrypt request. 20.03.2020-19:50 - DEBUG - Create Let's Encrypt SSL Cert for: mail.sigtattoo.com 20.03.2020-19:50 - DEBUG - Let's Encrypt SSL Cert domains: --domains mail.sigtattoo.com 20.03.2020-19:50 - DEBUG - exec: /usr/bin/letsencrypt certonly -n --text --agree-tos --expand --authenticator webroot --server https://acme-v02.api.letsencrypt.org/directory --rsa-key-size 4096 --email [email protected] --domains mail.sigtattoo.com --webroot-path /usr/local/ispconfig/interface/acme Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator webroot, Installer None Missing command line flag or config entry for this setting: Please choose an account Choices: ['mnsvr.digiiberica.es@2019-03-07T12:32:07Z (39db)', 'mnsvr.digiiberica.es@2019-03-10T15:10:26Z (a0ae)'] 20.03.2020-19:50 - DEBUG - safe_exec cmd: which 'apache2ctl' 2> /dev/null - return code: 0 20.03.2020-19:50 - WARNING - Let's Encrypt SSL Cert for: mail.sigtattoo.com could not be issued. 20.03.2020-19:50 - WARNING - /usr/bin/letsencrypt certonly -n --text --agree-tos --expand --authenticator webroot --server https://acme-v02.api.letsencrypt.org/directory --rsa-key-size 4096 --email [email protected] --domains mail.sigtattoo.com --webroot-path /usr/local/ispconfig/interface/acme 20.03.2020-19:50 - DEBUG - safe_exec cmd: which 'apache2ctl' 2> /dev/null - return code: 0 20.03.2020-19:50 - DEBUG - Writing the vhost file: /etc/apache2/sites-available/mail.sigtattoo.com.vhost 20.03.2020-19:50 - DEBUG - Apache status is: running 20.03.2020-19:50 - DEBUG - Calling function 'restartHttpd' from module 'web_module'. 20.03.2020-19:50 - DEBUG - Restarting httpd: systemctl restart apache2.service 20.03.2020-19:50 - DEBUG - Apache restart return value is: 0 20.03.2020-19:50 - DEBUG - Apache online status after restart is: running 20.03.2020-19:50 - DEBUG - Processed datalog_id 1403 20.03.2020-19:50 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock finished.
ok, without an SSL cert, SSL can't get enabled. Did you fill in all fields (the small ones at the top, not the large fields) and choose 'create certificate' as action? Please post a screenshot so I can check which exact values you used.
i did it!! every is work 3 diferent sites (new) ,and a site with HOSTNAME domain too!! i hate buffers and cache of the modern browsers!!!. i always forget to clean before to recheck any change!
CONFIRMED LE IS PROBLEM server .sh report 20.03.2020-20:02 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'. 20.03.2020-20:02 - DEBUG - Found 1 changes, starting update process. 20.03.2020-20:02 - DEBUG - Calling function 'ssl' from plugin 'apache2_plugin' raised by event 'web_domain_update'. 20.03.2020-20:02 - DEBUG - Calling function 'update' from plugin 'apache2_plugin' raised by event 'web_domain_update'. 20.03.2020-20:02 - DEBUG - safe_exec cmd: chattr -i '/var/www/clients/client2/web37' - return code: 0 20.03.2020-20:02 - DEBUG - safe_exec cmd: chattr +i '/var/www/clients/client2/web37' - return code: 0 20.03.2020-20:02 - DEBUG - safe_exec cmd: df -T '/var/www/clients/client2/web37'|awk 'END{print $2,$NF}' - return code: 0 20.03.2020-20:02 - DEBUG - safe_exec cmd: which 'setquota' 2> /dev/null - return code: 0 20.03.2020-20:02 - DEBUG - safe_exec cmd: setquota -u 'web37' '0' '0' 0 0 -a &> /dev/null - return code: 0 20.03.2020-20:02 - DEBUG - safe_exec cmd: setquota -T -u 'web37' 604800 604800 -a &> /dev/null - return code: 0 20.03.2020-20:02 - DEBUG - safe_exec cmd: chattr +i '/var/www/clients/client2/web37' - return code: 0 20.03.2020-20:02 - DEBUG - Verified domain mnsvr.digiiberica.es should be reachable for letsencrypt. 20.03.2020-20:02 - DEBUG - Create Let's Encrypt SSL Cert for: mnsvr.digiiberica.es 20.03.2020-20:02 - DEBUG - Let's Encrypt SSL Cert domains: --domains mnsvr.digiiberica.es 20.03.2020-20:02 - DEBUG - exec: /usr/bin/letsencrypt certonly -n --text --agree-tos --expand --authenticator webroot --server https://acme-v02.api.letsencrypt.org/directory --rsa-key-size 4096 --email [email protected] --domains mnsvr.digiiberica.es --webroot-path /usr/local/ispconfig/interface/acme Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator webroot, Installer None Missing command line flag or config entry for this setting: Please choose an account Choices: ['mnsvr.digiiberica.es@2019-03-07T12:32:07Z (39db)', 'mnsvr.digiiberica.es@2019-03-10T15:10:26Z (a0ae)'] 20.03.2020-20:02 - DEBUG - safe_exec cmd: which 'apache2ctl' 2> /dev/null - return code: 0 20.03.2020-20:02 - WARNING - Let's Encrypt SSL Cert for: mnsvr.digiiberica.es could not be issued. 20.03.2020-20:02 - WARNING - /usr/bin/letsencrypt certonly -n --text --agree-tos --expand --authenticator webroot --server https://acme-v02.api.letsencrypt.org/directory --rsa-key-size 4096 --email [email protected] --domains mnsvr.digiiberica.es --webroot-path /usr/local/ispconfig/interface/acme 20.03.2020-20:02 - DEBUG - safe_exec cmd: which 'apache2ctl' 2> /dev/null - return code: 0 20.03.2020-20:02 - DEBUG - Writing the vhost file: /etc/apache2/sites-available/mnsvr.digiiberica.es.vhost 20.03.2020-20:02 - DEBUG - Apache status is: running 20.03.2020-20:02 - DEBUG - Calling function 'restartHttpd' from module 'web_module'. 20.03.2020-20:02 - DEBUG - Restarting httpd: systemctl restart apache2.service 20.03.2020-20:02 - DEBUG - Apache restart return value is: 0 20.03.2020-20:02 - DEBUG - Apache online status after restart is: running 20.03.2020-20:02 - DEBUG - Processed datalog_id 1408 20.03.2020-20:02 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock finished. how can you debug it????
See let's encrypt FAQ, the link has been posted by taleman and me in this thread. Especially the letsencrypt.log should contain useful details on why LE refused to create the certificate.
Look at the end with the tail command: tail -n 1000 logfile.log shows the last 1000 lines of the file with the name logfile.log
i really dont find error, but if i can honest, i dont find any sense to this log. if you can take a view, tx in advance
The problem is that letsencrypt service can not resolve your domain name: If I do a dig to that domain name, I do not get a result. There exists no A/AAAA record for that domain. Did you misspell it? How long after you have registered that domain?
This site is down. i think domain is gone (its not mine) i am surrender with this problem, and i prefer to rebuild everything from begin. i have another computer ( exact clon of my server), and in a couple of hour i installl server and "perfect server guide". i made updates from ubuntu, and when i finished. i tested client, sire, ssl , LE and everything worked great BUT with this process i got a ispconfig 3.1 server. when i tried to made ispconfig_update.sh for get the last version of IPSC, it took a long time , and when it finished, i got a error of apache when i tried " systemctl status apache2.service" i got: ● apache2.service - The Apache HTTP Server Loaded: loaded (/lib/systemd/system/apache2.service; enabled; vendor preset: Drop-In: /lib/systemd/system/apache2.service.d └─apache2-systemd.conf Active: failed (Result: exit-code) since Tue 2020-03-24 12:08:30 CET; 9min ag Process: 1173 ExecStart=/usr/sbin/apachectl start (code=exited, status=1/FAILU mar 24 12:08:30 mnsvr systemd[1]: Starting The Apache HTTP Server... mar 24 12:08:30 mnsvr apachectl[1173]: AH00548: NameVirtualHost has no effect an mar 24 12:08:30 mnsvr apachectl[1173]: AH00526: Syntax error on line 6 of /etc/a mar 24 12:08:30 mnsvr apachectl[1173]: Port must be specified mar 24 12:08:30 mnsvr apachectl[1173]: Action 'start' failed. mar 24 12:08:30 mnsvr apachectl[1173]: The Apache error log may have more inform mar 24 12:08:30 mnsvr systemd[1]: apache2.service: Control process exited, code= mar 24 12:08:30 mnsvr systemd[1]: apache2.service: Failed with result 'exit-code mar 24 12:08:30 mnsvr systemd[1]: Failed to start The Apache HTTP Server. off course , now server its down. i had a similar error in my main server when i installl 3.1.15 similar error in 2 diferent servers???????? can i remove complete ISP config and retried with 3.1 form the "guide"? tx in advance