Hello. I've had a working Ispconfig 3 (3.2.9p1) with SSL access for a while now on Debian 11. I have now installed roundcube on it based on the following description: https://www.howtoforge.com/install-ispconfig-3-roundcube-plugins-on-debian-10/#prerequisites The roundcube working good with http://ip_address/webmail, but I get HTTP ERROR 500 with https://ip_address/webmail The website and the ispconfig admin panel working great with SSL/HTTPS. What could be the problem or what could have been left out?
Of course because IP has no SSL. You should try accessing via https://your.ispconfig.tld/webmail instead.
Ohh my god. It is working, but...I try https://servername/webmail. This is not good. Then I try https://servername:8080/webmail. This work. I just don't understand this. It is totally illogical for me to have to enter the port of the admin panel. How to reconfigure it to use https://servername/webmail without :8080?
I have never used port with /webmail. But indeed, some users on this forum state it is needed. Perhaps port must be entered if web server is nginx? If you had shown common issues report from https://forum.howtoforge.com/threads/please-read-before-posting.58408/ inquiring minds would know which web server is running.
I not entered port number. I uses Apache with newest ispconfig3. Your asked the following: Code: ##### SERVER ##### IP-address (as per hostname): ***.***.***.*** [WARN] could not determine server's ip address by ifconfig [INFO] OS version is Debian GNU/Linux 11 (bullseye) [INFO] uptime: 07:36:31 up 15:19, 2 users, load average: 0,04, 0,05, 0,00 [INFO] memory: total used free shared buff/cache available Mem: 3,8Gi 2,2Gi 121Mi 63Mi 1,6Gi 1,3Gi Swap: 2,4Gi 53Mi 2,4Gi [INFO] systemd failed services status: UNIT LOAD ACTIVE SUB DESCRIPTION 0 loaded units listed. [INFO] ISPConfig is installed. ##### ISPCONFIG ##### ISPConfig version is 3.2.9p1 ##### VERSION CHECK ##### [INFO] php (cli) version is 7.4.33 [INFO] php-cgi (used for cgi php in default vhost!) is version 7.4.33 ##### PORT CHECK ##### [WARN] Port 22 (SSH server) seems NOT to be listening ##### MAIL SERVER CHECK ##### ##### RUNNING SERVER PROCESSES ##### [INFO] I found the following web server(s): Apache 2 (PID 3066) [INFO] I found the following mail server(s): Postfix (PID 1159) [INFO] I found the following pop3 server(s): Dovecot (PID 559) [INFO] I found the following imap server(s): Dovecot (PID 559) [INFO] I found the following ftp server(s): PureFTP (PID 969) ##### LISTENING PORTS ##### (only () Local (Address) [localhost]:10023 (440/postgrey) [localhost]:10024 (605/amavisd-new) [localhost]:10025 (1159/master) [localhost]:10026 (605/amavisd-new) [localhost]:3306 (717/mariadbd) [localhost]:10027 (1159/master) [anywhere]:587 (1159/master) [localhost]:11211 (563/memcached) [anywhere]:110 (559/dovecot) [anywhere]:143 (559/dovecot) [anywhere]:465 (1159/master) [anywhere]:21 (969/pure-ftpd) ***.***.***.***:53 (564/named) ***.***.***.***:53 (564/named) ***.***.***.***:53 (564/named) ***.***.***.***:53 (564/named) ***.***.***.***:53 (564/named) ***.***.***.***:53 (564/named) ***.***.***.***:53 (564/named) ***.***.***.***:53 (564/named) [localhost]:53 (564/named) [localhost]:53 (564/named) [localhost]:53 (564/named) [localhost]:53 (564/named) [anywhere]:25 (1159/master) [localhost]:953 (564/named) [anywhere]:8571 (602/sshd:) [anywhere]:993 (559/dovecot) [anywhere]:995 (559/dovecot) *:*:*:*::*:10023 (440/postgrey) *:*:*:*::*:10024 (605/amavisd-new) *:*:*:*::*:10026 (605/amavisd-new) *:*:*:*::*:587 (1159/master) [localhost]10 (559/dovecot) [localhost]43 (559/dovecot) *:*:*:*::*:8080 (3066/apache2) *:*:*:*::*:80 (3066/apache2) *:*:*:*::*:8081 (3066/apache2) *:*:*:*::*:465 (1159/master) *:*:*:*::*:21 (969/pure-ftpd) *:*:*:*::*:53 (564/named) *:*:*:*::*:53 (564/named) *:*:*:*::*:53 (564/named) *:*:*:*::*:53 (564/named) *:*:*:*::*689f:9aff:fec7:53 (564/named) *:*:*:*::*689f:9aff:fec7:53 (564/named) *:*:*:*::*689f:9aff:fec7:53 (564/named) *:*:*:*::*689f:9aff:fec7:53 (564/named) *:*:*:*::*c8d3:b5ff:fe44:53 (564/named) *:*:*:*::*c8d3:b5ff:fe44:53 (564/named) *:*:*:*::*c8d3:b5ff:fe44:53 (564/named) *:*:*:*::*c8d3:b5ff:fe44:53 (564/named) *:*:*:*::*:25 (1159/master) *:*:*:*::*:953 (564/named) *:*:*:*::*:443 (3066/apache2) *:*:*:*::*:8571 (602/sshd:) *:*:*:*::*:993 (559/dovecot) *:*:*:*::*:5665 (1007/icinga2) *:*:*:*::*:995 (559/dovecot) ##### IPTABLES ##### Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination ##### LET'S ENCRYPT ##### acme.sh is installed in /root/.acme.sh/acme.sh
The roundcube doesnt have vhost setup under /etc/apache2/sites-available. Only domain.vhost, but I can't find any reference to port 8080 in it.
Webmail is set up on port 8081 by default. so its URL is always https://yourserverhostname.tld:8081/webmail/ Port 8081 is the apps vhost. On Apache it also works on some other ports depending on your setup, as /webmail is a global alias, that#s why you could also reach it on port 8080. If you don't like it, you must manually configure it by enabling the SSL default vhost of the Linux distribution or by creating a separate website for webmail. Roundcube is not a website, so there should be no file for roundcube in that folder. RoundCube is a global alias and the RoundCube package puts its configuration in the apache conf-available folder and enables it via symlink in conf-enabled. Older systems use apache conf.d folder instead. Port 8080 is ISPConfig GUI which ahs it#s own config file, do not touch that. Port 8080 is not related to a website you might have created for your domain, so it#s to be expected that port 8080 is not in your domains vhost file.
How can I do this? Insert <VirtualHost *:443> section with <IfModule mod_ssl.c> section to the /etc/apache2/sites-available/apps.vhost?
Do not manually edit the apps vhost or ISPConfig vhost. Either enable the default-ssl vhost of the Linux distribution using a2ensite on Debian and Ubuntu or create a website for webmail and install a webmail client of your choice into that website.
Indeed; as they will be overwriiten on ISPConfig update. So if you truly need to customize them simply copy the original templates to ISPConfig conf-custom folder and edit them in there instead. You can also use a reverse proxy for them so you don't have to customize the original templates unnecessarily.
I enabled on Debian 11 with a2ensite default-ssl.conf, but doesnt work without port number. get same message: HTTP ERROR 500
You should consider using webmail how it's intended to be used (on port 8081) until you know Apache Linux setups better, as ISPConfig uses a plain standard Apache setup based on the packages and config files of the underlying Linux distribution. Basically, this whole thread is not about Roundcube not working with https, it's just that you initially used the wrong URL to access it and after that was sorted out, you did not like to access it the way it's supposed to be accessed. Enabling other ways to access it is possible as mentioned many times, but it requires knowledge, and that's why ISPConfig sets up an easy way to access it on port 8081 by default. And when you get an error when doing something on a Linux system, the next step should be to look up the error in the log file of the service the error occurred in to fix that.
