[SOLVED:] Migration Toolkit resulted in sites giving PR_END_OF_FILE_ERROR when accessing them

Discussion in 'Plugins/Modules/Addons' started by axxies, Apr 23, 2021.

  1. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Have you enabled debug mode for the server? Did you enable LE for a site after disabling the cronjob?
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    I guess that's something that needs to be fixed in ISPConfig itself, the code that generates the acme cert must check if there are symlinks for the files and delete them before acme.sh is run.
     
  3. axxies

    axxies Member

    I tried both to enable SSL and LE at the same time, and to fisrt enable SSL, let the ISPC3 cronjob run and then check LE and let the cronjob run again. Both failed to create a certificate.

    There is one thing I found in /root/.acme.sh/http.header : it says nginx, but my server is an Apache2 server.

    Code:
    HTTP/2 200
    server: nginx
    date: Fri, 23 Apr 2021 14:19:35 GMT
    content-type: application/json
    content-length: 186
    boulder-requester: 120293510
    cache-control: public, max-age=0, no-cache
    link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
    link: <https://acme-v02.api.letsencrypt.org/acme/authz-v3/12566273403>;rel="up"
    location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/12562673403/U5HWQg
    replay-nonce: <some-stuff-that-seem-unique-hence-I-deleted-it>
    x-frame-options: DENY
    strict-transport-security: max-age=604800
    
    
     
    Last edited: Apr 23, 2021
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Please post the full debug output from server.sh that you got after enabling LE in the website again.

    I guess the server from LE is nginx, as that#s a request from your server to LE and not from LE to your system.
     
  5. axxies

    axxies Member

    till likes this.
  6. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    See my comment there:
     
    axxies likes this.
  7. axxies

    axxies Member

    I know. Of course I also know that the DNS must be updated to have it point to the right server :) , it was just that I misinterpreted when this should/could be done. My bad.
     
  8. axxies

    axxies Member

    May I ask one thing? Now since the time between the finalized migration and this time right now, mails has come in to the source server, websites have been updated with order info etc and I need that in the target server. Is there an easy way to do some resync of the server before I update the DNS with the new IPs. The TTLs are set to 1 minute now so it should go fairly fast once ready.
     
  9. till

    till Super Moderator Staff Member ISPConfig Developer

    Please see here: https://www.howtoforge.com/tutorial...sk-to-ispconfig-31-single-server/#resync-data
     
    axxies likes this.

Share This Page