Untrusted letsencrypt certificates

Discussion in 'Installation/Configuration' started by kmchen, Jan 25, 2019.

  1. kmchen

    kmchen Member

    Hi, after complete debian 9 reinstall and following the tuto https://www.howtoforge.com/tutorial...e-lets-encrypt-ssl-certificate/#a-for-postfix my MTA asks me to accept security exceptions when I read my mails.
    Here are certicate tests reports from htbridge.com for my domain webologix.com:

    joomla-development.eu is another domain hosted on that same server. Seems that my domains are inverted ?!

    I verified the links after install:
    Code:
    root@ks307144:~# ll /etc/postfix/smtpd.*
    lrwxrwxrwx 1 root root   48 janv. 21 15:55 /etc/postfix/smtpd.cert -> /usr/local/ispconfig/interface/ssl/ispserver.crt
    -rw-r--r-- 1 root root 1736 janv. 19 10:20 /etc/postfix/smtpd.cert-190121155541.bak
    lrwxrwxrwx 1 root root   48 janv. 21 15:55 /etc/postfix/smtpd.key -> /usr/local/ispconfig/interface/ssl/ispserver.key
    -rw------- 1 root root 3272 janv. 19 10:20 /etc/postfix/smtpd.key-190121155541.bak
    Could you point me in a direction ?
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    I guess the SSL test is wrong here, unless ypu created pointed thze symlink
    /usr/local/ispconfig/interface/ssl/ispserver.crt to a wrong SSL cert. The SSL test probably tested over https without providing a proper domain name by SNI and not the MTA.
     
  3. kmchen

    kmchen Member

    The symlink is the one from the tuto. How can I verify it, filenames do not mention any domain ?

    I see now that my website webologix.com certificate do not work also.
     
  4. kmchen

    kmchen Member

    Well, as the ispconfig panel and all other domains work fine over https:// I guess the trouble comes from the webologix.com certificate that do not work properly. How can I regenerate it, can I simply delete /etc/letsencrypt/live webologix related files, or should I remove archive and renewal also ?
     

Share This Page