While GUI deletes domain and website, Cert still remains in .acme.sh

Discussion in 'ISPConfig 3 Priority Support' started by Petar, Oct 16, 2023.

  1. Petar

    Petar Member HowtoForge Supporter

    I have a strange situation at a customer.
    He was having an LE cert from the GUI for a domain.
    Later he deletes that website with everything from GUI.
    But somehow the domain name is left in /root/.acme.sh
    And that makes problem while issuing a LE cert for a newly added website, i can see in the /var/log/ispconfig/acme.log all this error entries:
    zgrep "Fail\|Error" /var/log/ispconfig/acme.lo*
    /var/log/ispconfig/acme.log.1.gz:[Mon 16 Oct 2023 12:30:01 AM AEDT] _stopRenewOnError
    /var/log/ispconfig/acme.log.1.gz:[Mon 16 Oct 2023 12:30:20 AM AEDT] Error renew xxx.com.au.
    /var/log/ispconfig/acme.log.1.gz:[Mon 16 Oct 2023 12:30:34 AM AEDT] Error renew xxx.org.au.
    /var/log/ispconfig/acme.log.1.gz:[Mon 16 Oct 2023 12:30:49 AM AEDT] Error renew xxx.com.
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    LE certs do not get removed automatically, but we already have an issue in the git system to implement that feature for the next version 3.2.12, see https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5892. You can remove the cert using same.sh command (or certbot on systems that use certbot).
     
    remkoh likes this.

Share This Page