So I've setup a new Debian Stretch installation as shown on: https://www.howtoforge.com/tutorial/debian-9-stretch-minimal-server/ Then used the automated script to install ISPConfig 3.1 as shown here: https://www.howtoforge.com/tutorial/ispconfig-automated-install-script/ Everything works as expected but I have a couple of questions: 1. Is the SSL certificate meant to be a Let's Encrypt certificate for the main admin as the one I have is a selfsigned one even though Let's Encrypt is installed and working on other domains? 2. The Let's Encrypt certificates weren't being generated so I did it as suggested here and got the following output: https://www.faqforge.com/linux/debugging-ispconfig-3-server-actions-in-case-of-a-failure/ Code: Saving debug log to /var/log/letsencrypt/letsencrypt.log Obtaining a new certificate Performing the following challenges: http-01 challenge for example.co.uk http-01 challenge for www.example.co.uk Using the webroot path /usr/local/ispconfig/interface/acme for all unmatched domains. Waiting for verification... Cleaning up challenges Unable to clean up challenge directory /usr/local/ispconfig/interface/acme/.well-known/acme-challenge Generating key (4096 bits): /etc/letsencrypt/keys/0000_key-certbot.pem Creating CSR: /etc/letsencrypt/csr/0000_csr-certbot.pem finished. What does the line that says the following mean? Unable to clean up challenge directory /usr/local/ispconfig/interface/acme/.well-known/acme-challenge
This is meant to be a self-signed SSL cert. If you want to replace it with an LE cert, see here: https://www.howtoforge.com/communit...l-port-8080-with-lets-encrypt-free-ssl.75554/ That's fine and not an error nor an indication for a problem.
I think this helps for 1.: https://www.howtoforge.com/communit...l-port-8080-with-lets-encrypt-free-ssl.75554/
