[SOLVED] Ispconfig placeholder [SERVERNAME]/xxx seems not work error ERR_CERT_COMMON_NAME_INVALID

Discussion in 'Installation/Configuration' started by benjaminweb, Jun 6, 2021.

  1. benjaminweb

    benjaminweb New Member

    Hello Team,
    I installed ispconfig 3.2.4 with nginx on new server with hostname : server1.domaine1.tld and it works pretty well.
    I also installed sites on domaines like : domaine1.tld and domaine2.tld and it works fine for website and webmail.
    However when I try to access to :
    server1.domaine1.tld:8081/webmail or server1.domaine1.tld:8081/phpmyadmin it's ok
    But if I want access by url :
    • domaine1.tld:8081/webmail
    • domaine1.tld:8081/phpmyadmin
    • domaine2.tld:8081/webmail
    • domaine2.tld:8081/phpmyadmin
    It's ko and I have error NET::ERR_CERT_COMMON_NAME_INVALID because server try to use certificat from server1.domaine1.tld.
    I try on main config to use placeholder [SERVERNAME]/phpmyadmin and [SERVERNAME]/webmail but it doesn't work.
    Any idea ?
    PS : other point when I access to webmail with server1.domaine1.tld:8081/webmail url redirect to server1.domaine1.tld:8081/squirrelmail is it normal ?
    thanks for your help :)
    Regards

    Please fin below htf_report.txt :

    ##### SERVER #####
    IP-address (as per hostname): ***.***.***.***
    [WARN] could not determine server's ip address by ifconfig
    [INFO] OS version is Ubuntu 20.04.2 LTS

    [INFO] uptime: 10:53:06 up 8:24, 1 user, load average: 0.08, 0.08, 0.01

    [INFO] memory:
    total used free shared buff/cache available
    Mem: 7.8Gi 1.7Gi 5.4Gi 52Mi 665Mi 5.8Gi
    Swap: 2.0Gi 0B 2.0Gi

    [INFO] systemd failed services status:
    UNIT LOAD ACTIVE SUB DESCRIPTION
    0 loaded units listed.

    [INFO] ISPConfig is installed.

    ##### ISPCONFIG #####
    ISPConfig version is 3.2.4


    ##### VERSION CHECK #####

    [INFO] php (cli) version is 7.4.20
    [INFO] php-cgi (used for cgi php in default vhost!) is version 7.4.20

    ##### PORT CHECK #####


    ##### MAIL SERVER CHECK #####


    ##### RUNNING SERVER PROCESSES #####

    [INFO] I found the following web server(s):
    Unknown process (nginx:) (PID 31496)
    [INFO] I found the following mail server(s):
    Postfix (PID 1327)
    [INFO] I found the following pop3 server(s):
    Dovecot (PID 679)
    [INFO] I found the following imap server(s):
    Dovecot (PID 679)
    [INFO] I found the following ftp server(s):
    PureFTP (PID 682)

    ##### LISTENING PORTS #####
    (only ()
    Local (Address)
    [localhost]:11333 (691/rspamd:)
    [localhost]:11334 (691/rspamd:)
    [localhost]:10023 (607/postgrey)
    [anywhere]:587 (1327/master)
    [localhost]:6379 (498/redis-server)
    [localhost]:11211 (397/memcached)
    [anywhere]:110 (679/dovecot)
    [anywhere]:143 (679/dovecot)
    [anywhere]:80 (31496/nginx:)
    [anywhere]:8080 (31496/nginx:)
    [anywhere]:8081 (31496/nginx:)
    [anywhere]:465 (1327/master)
    [anywhere]:21 (682/pure-ftpd)
    ***.***.***.***:53 (398/named)
    [localhost]:53 (398/named)
    ***.***.***.***:53 (349/systemd-resolve)
    [anywhere]:22 (440/sshd:)
    [anywhere]:25 (1327/master)
    [localhost]:953 (398/named)
    [anywhere]:443 (31496/nginx:)
    [anywhere]:4190 (679/dovecot)
    [anywhere]:993 (679/dovecot)
    [anywhere]:995 (679/dovecot)
    [localhost]:11332 (691/rspamd:)
    *:*:*:*::*:11333 (691/rspamd:)
    *:*:*:*::*:11334 (691/rspamd:)
    *:*:*:*::*:10023 (607/postgrey)
    *:*:*:*::*:3306 (603/mysqld)
    *:*:*:*::*:587 (1327/master)
    *:*:*:*::*:6379 (498/redis-server)
    [localhost]10 (679/dovecot)
    [localhost]43 (679/dovecot)
    *:*:*:*::*:80 (31496/nginx:)
    *:*:*:*::*:8080 (31496/nginx:)
    *:*:*:*::*:8081 (31496/nginx:)
    *:*:*:*::*:465 (1327/master)
    *:*:*:*::*:21 (682/pure-ftpd)
    *:*:*:*::*:53 (398/named)
    *:*:*:*::*:22 (440/sshd:)
    *:*:*:*::*:25 (1327/master)
    *:*:*:*::*:953 (398/named)
    *:*:*:*::*:443 (31496/nginx:)
    *:*:*:*::*:4190 (679/dovecot)
    *:*:*:*::*:993 (679/dovecot)
    *:*:*:*::*:995 (679/dovecot)
    *:*:*:*::*:11332 (691/rspamd:)




    ##### IPTABLES #####
    Chain INPUT (policy DROP)
    target prot opt source destination
    f2b-sshd tcp -- [anywhere]/0 [anywhere]/0 multiport dports 22
    ufw-before-logging-input all -- [anywhere]/0 [anywhere]/0
    ufw-before-input all -- [anywhere]/0 [anywhere]/0
    ufw-after-input all -- [anywhere]/0 [anywhere]/0
    ufw-after-logging-input all -- [anywhere]/0 [anywhere]/0
    ufw-reject-input all -- [anywhere]/0 [anywhere]/0
    ufw-track-input all -- [anywhere]/0 [anywhere]/0

    Chain FORWARD (policy DROP)
    target prot opt source destination
    ufw-before-logging-forward all -- [anywhere]/0 [anywhere]/0
    ufw-before-forward all -- [anywhere]/0 [anywhere]/0
    ufw-after-forward all -- [anywhere]/0 [anywhere]/0
    ufw-after-logging-forward all -- [anywhere]/0 [anywhere]/0
    ufw-reject-forward all -- [anywhere]/0 [anywhere]/0
    ufw-track-forward all -- [anywhere]/0 [anywhere]/0

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination
    ufw-before-logging-output all -- [anywhere]/0 [anywhere]/0
    ufw-before-output all -- [anywhere]/0 [anywhere]/0
    ufw-after-output all -- [anywhere]/0 [anywhere]/0
    ufw-after-logging-output all -- [anywhere]/0 [anywhere]/0
    ufw-reject-output all -- [anywhere]/0 [anywhere]/0
    ufw-track-output all -- [anywhere]/0 [anywhere]/0

    Chain f2b-sshd (1 references)
    target prot opt source destination
    REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable
    REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable
    REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable
    RETURN all -- [anywhere]/0 [anywhere]/0

    Chain ufw-after-forward (1 references)
    target prot opt source destination

    Chain ufw-after-input (1 references)
    target prot opt source destination
    ufw-skip-to-policy-input udp -- [anywhere]/0 [anywhere]/0 udp dpt:137
    ufw-skip-to-policy-input udp -- [anywhere]/0 [anywhere]/0 udp dpt:138
    ufw-skip-to-policy-input tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:139
    ufw-skip-to-policy-input tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:445
    ufw-skip-to-policy-input udp -- [anywhere]/0 [anywhere]/0 udp dpt:67
    ufw-skip-to-policy-input udp -- [anywhere]/0 [anywhere]/0 udp dpt:68
    ufw-skip-to-policy-input all -- [anywhere]/0 [anywhere]/0 ADDRTYPE match dst-type BROADCAST

    Chain ufw-after-logging-forward (1 references)
    target prot opt source destination
    LOG all -- [anywhere]/0 [anywhere]/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "

    Chain ufw-after-logging-input (1 references)
    target prot opt source destination
    LOG all -- [anywhere]/0 [anywhere]/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "

    Chain ufw-after-logging-output (1 references)
    target prot opt source destination

    Chain ufw-after-output (1 references)
    target prot opt source destination

    Chain ufw-before-forward (1 references)
    target prot opt source destination
    ACCEPT all -- [anywhere]/0 [anywhere]/0 ctstate RELATED,ESTABLISHED
    ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 3
    ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 11
    ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 12
    ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 8
    ufw-user-forward all -- [anywhere]/0 [anywhere]/0

    Chain ufw-before-input (1 references)
    target prot opt source destination
    ACCEPT all -- [anywhere]/0 [anywhere]/0
    ACCEPT all -- [anywhere]/0 [anywhere]/0 ctstate RELATED,ESTABLISHED
    ufw-logging-deny all -- [anywhere]/0 [anywhere]/0 ctstate INVALID
    DROP all -- [anywhere]/0 [anywhere]/0 ctstate INVALID
    ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 3
    ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 11
    ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 12
    ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 8
    ACCEPT udp -- [anywhere]/0 [anywhere]/0 udp spt:67 dpt:68
    ufw-not-local all -- [anywhere]/0 [anywhere]/0
    ACCEPT udp -- [anywhere]/0 ***.***.***.*** udp dpt:5353
    ACCEPT udp -- [anywhere]/0 ***.***.***.*** udp dpt:1900
    ufw-user-input all -- [anywhere]/0 [anywhere]/0

    Chain ufw-before-logging-forward (1 references)
    target prot opt source destination

    Chain ufw-before-logging-input (1 references)
    target prot opt source destination

    Chain ufw-before-logging-output (1 references)
    target prot opt source destination

    Chain ufw-before-output (1 references)
    target prot opt source destination
    ACCEPT all -- [anywhere]/0 [anywhere]/0
    ACCEPT all -- [anywhere]/0 [anywhere]/0 ctstate RELATED,ESTABLISHED
    ufw-user-output all -- [anywhere]/0 [anywhere]/0

    Chain ufw-logging-allow (0 references)
    target prot opt source destination
    LOG all -- [anywhere]/0 [anywhere]/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW ALLOW] "

    Chain ufw-logging-deny (2 references)
    target prot opt source destination
    RETURN all -- [anywhere]/0 [anywhere]/0 ctstate INVALID limit: avg 3/min burst 10
    LOG all -- [anywhere]/0 [anywhere]/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "

    Chain ufw-not-local (1 references)
    target prot opt source destination
    RETURN all -- [anywhere]/0 [anywhere]/0 ADDRTYPE match dst-type LOCAL
    RETURN all -- [anywhere]/0 [anywhere]/0 ADDRTYPE match dst-type MULTICAST
    RETURN all -- [anywhere]/0 [anywhere]/0 ADDRTYPE match dst-type BROADCAST
    ufw-logging-deny all -- [anywhere]/0 [anywhere]/0 limit: avg 3/min burst 10
    DROP all -- [anywhere]/0 [anywhere]/0

    Chain ufw-reject-forward (1 references)
    target prot opt source destination

    Chain ufw-reject-input (1 references)
    target prot opt source destination

    Chain ufw-reject-output (1 references)
    target prot opt source destination

    Chain ufw-skip-to-policy-forward (0 references)
    target prot opt source destination
    DROP all -- [anywhere]/0 [anywhere]/0

    Chain ufw-skip-to-policy-input (7 references)
    target prot opt source destination
    DROP all -- [anywhere]/0 [anywhere]/0

    Chain ufw-skip-to-policy-output (0 references)
    target prot opt source destination
    ACCEPT all -- [anywhere]/0 [anywhere]/0

    Chain ufw-track-forward (1 references)
    target prot opt source destination

    Chain ufw-track-input (1 references)
    target prot opt source destination

    Chain ufw-track-output (1 references)
    target prot opt source destination
    ACCEPT tcp -- [anywhere]/0 [anywhere]/0 ctstate NEW
    ACCEPT udp -- [anywhere]/0 [anywhere]/0 ctstate NEW

    Chain ufw-user-forward (1 references)
    target prot opt source destination

    Chain ufw-user-input (1 references)
    target prot opt source destination
    ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:20
    ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:21
    ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:22
    ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:25
    ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:53
    ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:80
    ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:110
    ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:143
    ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:443
    ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:465
    ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:587
    ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:993
    ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:995
    ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:3306
    ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:8080
    ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:8081
    ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:10000
    ACCEPT udp -- [anywhere]/0 [anywhere]/0 udp dpt:53
    ACCEPT udp -- [anywhere]/0 [anywhere]/0 udp dpt:3306

    Chain ufw-user-limit (0 references)
    target prot opt source destination
    LOG all -- [anywhere]/0 [anywhere]/0 limit: avg 3/min burst 5 LOG flags 0 level 4 prefix "[UFW LIMIT BLOCK] "
    REJECT all -- [anywhere]/0 [anywhere]/0 reject-with icmp-port-unreachable

    Chain ufw-user-limit-accept (0 references)
    target prot opt source destination
    ACCEPT all -- [anywhere]/0 [anywhere]/0

    Chain ufw-user-logging-forward (0 references)
    target prot opt source destination

    Chain ufw-user-logging-input (0 references)
    target prot opt source destination

    Chain ufw-user-logging-output (0 references)
    target prot opt source destination

    Chain ufw-user-output (1 references)
    target prot opt source destination




    ##### LET'S ENCRYPT #####
    Certbot is installed in /usr/bin/letsencrypt
     
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    It is not possible to use this on nginx currently. You need to use server1.example.com:8081.
     
  3. benjaminweb

    benjaminweb New Member

    Hi Th0m, many thanks for your anwser. Last question before close the thread, do you know if this feature will be implemented in a futur version ?
    Thanks & Regards
     
  4. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Who knows ;)
    But it is not scheduled.
     
  5. benjaminweb

    benjaminweb New Member

    Thanks :D
    Have a nice day
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Try this instead:

    https://[SERVERNAME]:8081/webmail
    https://[SERVERNAME]:8081/phpmyadmin

    You can use the placeholders on Nginx, but the phpmyadmin and Roundcube applications are on port 8081, that#s why you have to use the port too when using the placeholder.
     

Share This Page