SSL points to wrong website

Discussion in 'Installation/Configuration' started by thisisstevi, Jan 18, 2021.

  1. thisisstevi

    thisisstevi New Member

    Hey everyone.

    I have used the search engine, but have not found a solution to my problem.

    I have a new server. I have installed ISPConfig 3.2.2 with the autoinstall script. It has always worked well on other servers. Thanks for that.
    Then I migrated the data from the old server to the new server with the migration tool. This also worked wonderfully.

    But now I have the following problem:
    New domains are normally accessible via http. But if new domains are accessed via https, a completely different website from a different customer account appears.
    Also, no LetsEncrypt certificates can be created for new domains. Logically, because a different website is called up via https than the one that should be there.

    I have already reinstalled the new server and migrated the data again. But the error remains.

    Maybe someone has a tip or a link for me.
    Thanks a lot
     
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

  3. thisisstevi

    thisisstevi New Member

    Hi Th0m,
    Thanks for the link. I'm going trough the LE FAQ, but it doesn't help me. Now i'm at the debugging point.

    SERVER.SH OUTPUT
    Code:
    18.01.2021-14:02 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'.
    18.01.2021-14:02 - DEBUG - Found 1 changes, starting update process.
    18.01.2021-14:02 - DEBUG - Calling function 'ssl' from plugin 'apache2_plugin' raised by event 'web_domain_update'.
    18.01.2021-14:02 - DEBUG - Calling function 'update' from plugin 'apache2_plugin' raised by event 'web_domain_update'.
    18.01.2021-14:02 - DEBUG - safe_exec cmd: chattr -i '/var/www/clients/client7/web54' - return code: 0
    18.01.2021-14:02 - DEBUG - safe_exec cmd: chattr +i '/var/www/clients/client7/web54' - return code: 0
    18.01.2021-14:02 - DEBUG - safe_exec cmd: df -T '/var/www/clients/client7/web54'|awk 'END{print $2,$NF}' - return code: 0
    18.01.2021-14:02 - DEBUG - safe_exec cmd: which 'setquota' 2> /dev/null - return code: 0
    18.01.2021-14:02 - DEBUG - safe_exec cmd: setquota -u 'web54' '1024000' '1025024' 0 0 -a &> /dev/null - return code: 0
    18.01.2021-14:02 - DEBUG - safe_exec cmd: setquota -T -u 'web54' 604800 604800 -a &> /dev/null - return code: 0
    18.01.2021-14:02 - DEBUG - safe_exec cmd: chattr +i '/var/www/clients/client7/web54' - return code: 0
    18.01.2021-14:02 - DEBUG - Verified domain domain.xyz should be reachable for letsencrypt.
    18.01.2021-14:02 - DEBUG - Verified domain www.domain.xyz should be reachable for letsencrypt.
    18.01.2021-14:02 - DEBUG - LE version is 0.31.0, so using certificates command
    18.01.2021-14:02 - DEBUG - Create Let's Encrypt SSL Cert for: domain.xyz
    18.01.2021-14:02 - DEBUG - Let's Encrypt SSL Cert domains:
    18.01.2021-14:02 - DEBUG - exec: /usr/bin/letsencrypt certonly -n --text --agree-tos --expand --authenticator webroot --server https://acme-v02.api.letsencrypt.org/directory --rsa-key-size 4096 --email [email protected] --webroot-map '{"domain.xyz":"\/usr\/local\/ispconfig\/interface\/acme","www.domain.xyz":"\/usr\/local\/ispconfig\/interface\/acme"}'
    Saving debug log to /var/log/letsencrypt/letsencrypt.log
    Plugins selected: Authenticator webroot, Installer None
    Missing command line flag or config entry for this setting:
    Please choose an account
    Choices: ['hostserver.xyz@2021-01-18T09:48:08Z (39b0)', 'old-hostserver.xyz@2021-01-18T07:34:19Z (fa24)']
    18.01.2021-14:02 - DEBUG - LE CERT OUTPUT: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    18.01.2021-14:02 - DEBUG - LE CERT OUTPUT: Found the following matching certs:
    18.01.2021-14:02 - DEBUG - LE CERT OUTPUT: The following renewal configurations were invalid:
    18.01.2021-14:02 - DEBUG - LE CERT OUTPUT: /etc/letsencrypt/renewal/savegrabber.de.conf
    18.01.2021-14:02 - DEBUG - LE CERT OUTPUT: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    18.01.2021-14:02 - DEBUG - LE CERT OUTPUT:
    18.01.2021-14:02 - DEBUG - safe_exec cmd: which 'apache2ctl' 2> /dev/null - return code: 0
    18.01.2021-14:02 - WARNING - Let's Encrypt SSL Cert for: domain.xyz could not be issued.
    18.01.2021-14:02 - WARNING - /usr/bin/letsencrypt certificates  --domains domain.xyz --domains www.domain.xyz
    18.01.2021-14:02 - DEBUG - safe_exec cmd: which 'apache2ctl' 2> /dev/null - return code: 0
    18.01.2021-14:02 - DEBUG - safe_exec cmd: which 'apache2ctl' 2> /dev/null - return code: 0
    18.01.2021-14:02 - DEBUG - safe_exec cmd: chattr -i '/var/www/php-fcgi-scripts/web54/.php-fcgi-starter' - return code: 0
    18.01.2021-14:02 - DEBUG - Creating fastcgi starter script: /var/www/php-fcgi-scripts/web54/.php-fcgi-starter
    18.01.2021-14:02 - DEBUG - safe_exec cmd: chattr +i '/var/www/php-fcgi-scripts/web54/.php-fcgi-starter' - return code: 0
    18.01.2021-14:02 - DEBUG - Writing the vhost file: /etc/apache2/sites-available/domain.xyz.vhost
    18.01.2021-14:02 - DEBUG - Processed datalog_id 659
    18.01.2021-14:02 - DEBUG - Calling function 'restartHttpd' from module 'web_module'.
    18.01.2021-14:02 - DEBUG - Restarting httpd: systemctl reload apache2.service
    18.01.2021-14:02 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
    finished server.php.
    
    LETS ENCRYPT LOG
    Code:
    2021-01-18 14:24:21,193:DEBUG:certbot.main:certbot version: 0.31.0
    2021-01-18 14:24:21,193:DEBUG:certbot.main:Arguments: ['-n', '--text', '--agree-tos', '--expand', '--authenticator', 'webroot', '--server', 'https://acme-v02.api.letsencrypt.org/directory', '--rsa-key-size', '4096', '--email', '[email protected]', '--webroot-map', '{"domain.xyz":"\\/usr\\/local\\/ispconfig\\/interface\\/acme","www.domain.xyz":"\\/usr\\/local\\/ispconfig\\/interface\\/acme"}']
    2021-01-18 14:24:21,193:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
    2021-01-18 14:24:21,199:DEBUG:certbot.log:Root logging level set at 20
    2021-01-18 14:24:21,199:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
    2021-01-18 14:24:21,199:DEBUG:certbot.plugins.selection:Requested authenticator webroot and installer None
    2021-01-18 14:24:21,199:DEBUG:certbot.plugins.selection:Single candidate plugin: * webroot
    Description: Place files in webroot directory
    Interfaces: IAuthenticator, IPlugin
    Entry point: webroot = certbot.plugins.webroot:Authenticator
    Initialized: <certbot.plugins.webroot.Authenticator object at 0x7f9f8968b390>
    Prep: True
    2021-01-18 14:24:21,199:DEBUG:certbot.plugins.selection:Selected authenticator <certbot.plugins.webroot.Authenticator object at 0x7f9f8968b390> and installer None
    2021-01-18 14:24:21,199:INFO:certbot.plugins.selection:Plugins selected: Authenticator webroot, Installer None
    2021-01-18 14:24:21,214:DEBUG:certbot.log:Exiting abnormally:
    Traceback (most recent call last):
      File "/usr/bin/letsencrypt", line 11, in <module>
        load_entry_point('certbot==0.31.0', 'console_scripts', 'certbot')()
      File "/usr/lib/python3/dist-packages/certbot/main.py", line 1365, in main
        return config.func(config, plugins)
      File "/usr/lib/python3/dist-packages/certbot/main.py", line 1234, in certonly
        le_client = _init_le_client(config, auth, installer)
      File "/usr/lib/python3/dist-packages/certbot/main.py", line 605, in _init_le_client
        acc, acme = _determine_account(config)
      File "/usr/lib/python3/dist-packages/certbot/main.py", line 513, in _determine_account
        acc = display_ops.choose_account(accounts)
      File "/usr/lib/python3/dist-packages/certbot/display/ops.py", line 86, in choose_account
        "Please choose an account", labels, force_interactive=True)
      File "/usr/lib/python3/dist-packages/certbot/display/util.py", line 507, in menu
        self._interaction_fail(message, cli_flag, "Choices: " + repr(choices))
      File "/usr/lib/python3/dist-packages/certbot/display/util.py", line 469, in _interaction_fail
        raise errors.MissingCommandlineFlag(msg)
    certbot.errors.MissingCommandlineFlag: Missing command line flag or config entry for this setting:
    Please choose an account
    Choices: ['hostserver.xyz@2021-01-18T09:48:08Z (39b0)', 'old-hostserver.xyz@2021-01-18T07:34:19Z (fa24)']
    2021-01-18 14:24:21,489:DEBUG:certbot.main:certbot version: 0.31.0
    2021-01-18 14:24:21,489:DEBUG:certbot.main:Arguments: ['--domains', 'domain.xyz', '--domains', 'www.domain.xyz']
    2021-01-18 14:24:21,490:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
    2021-01-18 14:24:21,496:DEBUG:certbot.log:Root logging level set at 20
    2021-01-18 14:24:21,497:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
    
    SOLVED:

    I was searching in google for
    Code:
    certbot.plugins.selection:Plugins selected: Authenticator webroot, Installer None
    when i found another post of yours Th0m.

    https://www.howtoforge.com/community/threads/letsencrypt-error.85741/

    Thanks for that.
     
    Last edited: Jan 18, 2021
    Th0m likes this.
  4. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    If you installed ISPConfig 3.2.2, should it not be using acme.sh and not certbot?
     
  5. till

    till Super Moderator Staff Member ISPConfig Developer

    Both are supported, ISPConfig uses what it finds on the system.
     

Share This Page