[SOLVED ]New install, letsencrypt/https seems inactive

Discussion in 'ISPConfig 3 Priority Support' started by millpark10, Mar 13, 2022.

  1. millpark10

    millpark10 Member HowtoForge Supporter

    Hi
    Installed new server promptly following,
    https://www.howtoforge.com/tutorial/ubuntu-lts-minimal-server/
    https://www.howtoforge.com/tutorial...l-pureftpd-bind-postfix-doveot-and-ispconfig/
    Installation worked without any visible problems.

    I must have missed something, or made some mistake, probably with Letsencrypt or
    in handling the certificate.
    I created a client, a site, a webdomain and a maildomain. (domain from dyndns.org)

    Cannot go to website with https://, i get
    SSL_ERROR_RX_RECORD_TOO_LONG

    When trying to reach roundcube webmail with https:// i get
    SSL_ERROR_RX_RECORD_TOO_LONG (of course same issue as above)

    When logged in to webmail with http:// and trying to send mail i get
    SMTP Error (250): Authentication failed.

    When trying to send a mail from another site(on another mail server) i get
    Diagnostic-Code: smtp; 530 5.7.0 Must issue a STARTTLS command first

    In /etc/roundcube/config.inc.php i have
    $config['smtp_server'] = 'localhost';
    $config['smtp_port'] = 25;

    I tried to find a solution in
    Let’s Encrypt Error FAQ
    All I tested so far is to
    enable the option "Skip Letsencrypt check"

    Please point me in a direction to start searching for what I did wrong.

    In htf_report,
    [WARN] Port 8080 (ISPConfig) seems NOT to be listening
    Is configured for 18080 instead on my server

    //millpark10
    Code:
    # cat htf_report.txt
    
    ##### SERVER #####
    IP-address (as per hostname): ***.***.***.***
    [WARN] could not determine server's ip address by ifconfig
    [INFO] OS version is Ubuntu 20.04.4 LTS
     
    [INFO] uptime:  21:02:59 up 9 days,  7:41,  1 user,  load average: 0.24, 0.40, 0.36
     
    [INFO] memory:
                  total        used        free      shared  buff/cache   available
    Mem:          3.3Gi       1.6Gi       338Mi        18Mi       1.3Gi       1.4Gi
    Swap:         3.3Gi       320Mi       3.0Gi
     
    [INFO] systemd failed services status:
      UNIT                      LOAD   ACTIVE SUB    DESCRIPTION                             
    ● fwupd-refresh.service     loaded failed failed Refresh fwupd metadata and update motd   
    ● fwupd.service             loaded failed failed Firmware update daemon                   
    ● snap.lxd.activate.service loaded failed failed Service for snap application lxd.activate
    
    LOAD   = Reflects whether the unit definition was properly loaded.
    ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
    SUB    = The low-level unit activation state, values depend on unit type.
    
    3 loaded units listed.
    
    [INFO] ISPConfig is installed.
    
    ##### ISPCONFIG #####
    ISPConfig version is 3.2.7p1
    
    
    ##### VERSION CHECK #####
    
    [INFO] php (cli) version is 7.4.3
    [INFO] php-cgi (used for cgi php in default vhost!) is version 7.4.3
    
    ##### PORT CHECK #####
    
    [WARN] Port 8080 (ISPConfig) seems NOT to be listening
    
    ##### MAIL SERVER CHECK #####
    
    [WARN] I found no "submission" entry in your postfix master.cf
    [INFO] this is not critical, but if you want to offer port 587 for smtp connections you have to enable this.
    
    ##### RUNNING SERVER PROCESSES #####
    
    [INFO] I found the following web server(s):
        Apache 2 (PID 1854722)
    [INFO] I found the following mail server(s):
        Postfix (PID 1853526)
    [INFO] I found the following pop3 server(s):
        Dovecot (PID 1852909)
    [INFO] I found the following imap server(s):
        Dovecot (PID 1852909)
    [INFO] I found the following ftp server(s):
        PureFTP (PID 1512)
    
    ##### LISTENING PORTS #####
    (only        ()
    Local        (Address)
    [anywhere]:993        (1852909/dovecot)
    [anywhere]:995        (1852909/dovecot)
    [localhost]:10023        (1125/postgrey)
    [localhost]:10024        (1614/amavisd-new)
    [localhost]:10025        (1853526/master)
    [localhost]:10026        (1614/amavisd-new)
    [localhost]:10027        (1853526/master)
    [localhost]:11211        (644/memcached)
    [anywhere]:110        (1852909/dovecot)
    [anywhere]:143        (1852909/dovecot)
    [anywhere]:465        (1853526/master)
    [anywhere]:21        (1512/pure-ftpd)
    ***.***.***.***:53        (645/named)
    [localhost]:53        (645/named)
    ***.***.***.***:53        (585/systemd-resolve)
    [anywhere]:22        (777/sshd:)
    [anywhere]:25        (1853526/master)
    [localhost]:953        (645/named)
    [localhost]8080        (1854722/apache2)
    *:*:*:*::*:993        (1852909/dovecot)
    *:*:*:*::*:995        (1852909/dovecot)
    *:*:*:*::*:10024        (1614/amavisd-new)
    *:*:*:*::*:3306        (35120/mysqld)
    *:*:*:*::*:10026        (1614/amavisd-new)
    [localhost]10        (1852909/dovecot)
    [localhost]43        (1852909/dovecot)
    *:*:*:*::*:80        (1854722/apache2)
    *:*:*:*::*:8081        (1854722/apache2)
    *:*:*:*::*:465        (1853526/master)
    *:*:*:*::*:21        (1512/pure-ftpd)
    *:*:*:*::*b6b5:2fff:fe91:53        (645/named)
    *:*:*:*::*:53        (645/named)
    *:*:*:*::*:22        (777/sshd:)
    *:*:*:*::*:25        (1853526/master)
    *:*:*:*::*:953        (645/named)
    *:*:*:*::*:443        (1854722/apache2)
    
    
    
    
    ##### IPTABLES #####
    Chain INPUT (policy ACCEPT)
    target     prot opt source               destination         
    f2b-pure-ftpd  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 21
    
    Chain FORWARD (policy ACCEPT)
    target     prot opt source               destination         
    
    Chain OUTPUT (policy ACCEPT)
    target     prot opt source               destination         
    
    Chain f2b-pure-ftpd (1 references)
    target     prot opt source               destination         
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    
    
    
    ##### LET'S ENCRYPT #####
    Certbot is installed in /usr/bin/letsencrypt
    
    
    root@alice:/home/ett
     
  2. ledufakademy

    ledufakademy Member

    i have got issue too , but not due to ispconfig : i think LE' is having issue. (or you probably make too many try ...)

    give a try to :
    - System \ Server Config \ <your_web_server> then "Web" tab.
    - Goto "SSL Settings" , and tick " Skip Lets Encrypt Check "

    ...but perhap i'm wrong.
     
    Last edited: Mar 14, 2022
  3. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

  4. ledufakademy

    ledufakademy Member

  5. till

    till Super Moderator Staff Member ISPConfig Developer

    That's perfectly fine, as the FAQ is for certbot and acme.sh. Start with the first step of the FAQ and follow all steps until you find the issue, incl. the final debug mode step.
     
  6. millpark10

    millpark10 Member HowtoForge Supporter

    Thank you for pointing (but I still don't understand all steps in the FAQ, eg how to check if certbot or acme is installed and working?)
    Issue solved, i think.(how do I mark the thread solved?)
    At last I got https:// to work on the website.
    Found a checkbox under -sites-domain- "Let's Encrypt SSL" not checked, very strange, it WAS checked before.
    So that went well.
    Roundcube now working, found a pound(#) still in front of "submission" in /etc/postfix/master.cf,
    most certainly a miss during install.:(
    removed the # and did
    service apache2 restart
    service dovecot restart
    service postfix restart
    Website is https and roundcube can send and receive mail!
    :)
    //millpark10
     

Share This Page