Hi, I'm trying to resolve an issue where I let one of my domains lapse, then today I went in and removed the domain from ISPConfig. I found out that my SERVER.DOMAIN.COM certificate cannot be renewed because there appears to be a reference to MAIL.OLDDOMAIN.COM. (This was done to allow SSL/TLS to my servers' email). The OLDDOMAIN.COM no longer exists, so I cannot create MAIL.OLDDOMAIN.COM in my server, to then remove it later. What would be an easy way to resolve this?
Since my server has been up for quite some time, I *THINK* I used this: https://www.howtoforge.com/tutorial/securing-ispconfig-3-with-a-free-lets-encrypt-ssl-certificate/ guide. Unfortunately it has been a couple of years since I did this. Ultimately what somehow happened is that in the /etc/letsencrypt/renewal folder, the SERVER.DOMAIN.COM configuration has a section labelled [[webroot_map]], which has 2 lines under it ... the first: mail.OLDDOMAIN.com = /usr/local/ispconfig/interface/acme and the second server.DOMAIN.com = /usr/local/ispconfig/interface/acme Upon further reflection, I think I will take the time to create a VM that ISPConfig will sit in, and basically redo my server. Thanks for your speedy response.
You can try to remove this part if the only problem you were facing is renewal of this domain (mail.OLDDOMAIN.com), thereafter dry run renewal and see if that config works.
'certbot certificates' should list your certificates, and you could just delete the old one, then run ispconfig_update.sh --force and reconfigure services, and let the installer setup another certificate for the server
