Upgrade IspConf 3.2 - Certbot or acme.sh ?

Discussion in 'Installation/Configuration' started by kameleon1er, Jun 24, 2022.

  1. kameleon1er

    kameleon1er Member

    Hi, after mails, it's the turn of my certs.
    First, is it best to use certbot or acme for isp 3.2
    2 - all my certs seems to be out of date.
    3 - old strange thing ; if I check https://www.ssllabs.com/ssltest/analyze.html?d=democrasite.com&latest, it's not my main domain "democrasite" is "linked" first but another domain recorded in ispConf "ianpatrick" (webalias-domain). The others are webalias domain.
    4 - how to reset everything to restart fresh conf ?
    Thanks.

    Code:
     tail letsencrypt.log
    2022-06-24 15:33:25,842:DEBUG:certbot._internal.main:certbot version: 1.8.0
    2022-06-24 15:33:25,843:DEBUG:certbot._internal.main:Arguments: ['--domains', 'democrasite.com', '--domains', 'www.democrasite.com', '--domains', 'opaz-ateliers.com', '--domains', 'www.opaz-ateliers.com', '--domains', 'vmxparis.com', '--domains', 'www.vmxparis.com', '--domains', 'sandybeearts.com', '--domains', 'www.sandybeearts.com', '--domains', 'ianpatrickimages.com', '--domains', 'www.ianpatrickimages.com', '--domains', 'alainroussel.com', '--domains', 'www.alainroussel.com', '--domains', 'alleray.fr', '--domains', 'www.alleray.fr', '--domains', 'auberjazzday.fr', '--domains', 'www.auberjazzday.fr', '--domains', 'cobaltateliers.com', '--domains', 'www.cobaltateliers.com']
    2022-06-24 15:33:25,844:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
    2022-06-24 15:33:25,907:DEBUG:certbot._internal.log:Root logging level set at 20
    2022-06-24 15:33:25,908:INFO:certbot._internal.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
    
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    There is not the general best solution, systems that get upgraded should always keep the LE client they were using already, same for migrated systems. So if your system is using certbot, then keep certbot.

    That's not what I would recommend in that situation, it would just break your setup. Instead, find out why certbot is unable to renew the domains.

    Follow the let#s Encrypt error faq to find out what the reason for your problem is:

    https://forum.howtoforge.com/threads/lets-encrypt-error-faq.74179/
     
    kameleon1er likes this.
  3. kameleon1er

    kameleon1er Member

  4. kameleon1er

    kameleon1er Member

    I just write down my progress so that I don't forget any steps :oops:
    I found my certbot in :
    Now I will follow https://certbot.eff.org/instructions?ws=apache&os=debianbuster for debian 10…
     
  5. till

    till Super Moderator Staff Member ISPConfig Developer

    Yes, remove old certbot and install new one using snap. The certbot devs abandoned certbot-auto script for updates, but using the snap version works fine as well with ISPConfig.
     
  6. kameleon1er

    kameleon1er Member

    :: Solved ::
     

Share This Page