ISPConfig installation error

Discussion in 'ISPConfig 3 Priority Support' started by Tom John, Oct 18, 2020.

  1. Tom John

    Tom John Member HowtoForge Supporter

    Hi guys,

    i have an installation error during installing ispconfig3 according to this :

    https://www.howtoforge.com/tutorial...pureftpd-bind-postfix-doveot-and-ispconfig/3/

    Code:
    Do you want a secure (SSL) connection to the ISPConfig web interface (y,n) [y]: 
    
    Checking / creating certificate for server5.cl-i.net
    Using certificate path /etc/letsencrypt/live/server5.cl-i.net
    Using apache for certificate validation
    Saving debug log to /var/log/letsencrypt/letsencrypt.log
    Plugins selected: Authenticator webroot, Installer None
    Obtaining a new certificate
    Performing the following challenges:
    http-01 challenge for server5.cl-i.net
    Using the webroot path /usr/local/ispconfig/interface/acme for all unmatched domains.
    Waiting for verification...
    Cleaning up challenges
    Failed authorization procedure. server5.cl-i.net (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://server5.cl-i.net/.well-known/acme-challenge/YfgemaWEuFmOk21jNq18adr0BA-li2p9tJlphmzA0xM [68.66.248.21]: "\n\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n<ht"
    Issuing certificate via certbot failed. Please check log files and make sure that your hostname can be verified by letsencrypt
    Could not issue letsencrypt certificate, falling back to self-signed.
    Generating RSA private key, 4096 bit long modulus (2 primes)
    ....++++
    ............................................................................................++++
    e is 65537 (0x010001)
    Can't load /root/.rnd into RNG
    139886639718848:error:2406F079:random number generator:RAND_load_file:Cannot open file:../crypto/rand/randfile.c:88:Filename=/root/.rnd
    You are about to be asked to enter information that will be incorporated
    into your certificate request.
    What you are about to enter is what is called a Distinguished Name or a DN.
    There are quite a few fields but you can leave some blank
    For some fields there will be a default value,
    If you enter '.', the field will be left blank.
    
    
    maybe you can give me some help?
    that would be great, thanks in advance
     
  2. Tom John

    Tom John Member HowtoForge Supporter

    i have another error:
    i change the /etc/host like this:
    Code:
    127.0.0.1       localhost
    161.97.82.13 server5.cl-i.net   server5
    
    
    # The following lines are desirable for IPv6 capable hosts
    ::1     localhost ip6-localhost ip6-loopback
    ff02::1 ip6-allnodes
    ff02::2 ip6-allrouters
    #161.97.82.13 vmi461684.contaboserver.net vmi461684
    
    
    
    
    
    a ping does this:
    Code:
    [email protected]:/# ping server5.cl-i.net
    PING server5.cl-i.net (161.97.82.13) 56(84) bytes of data.
    64 bytes from server5.cl-i.net (161.97.82.13): icmp_seq=1 ttl=64 time=0.043 ms
    64 bytes from server5.cl-i.net (161.97.82.13): icmp_seq=2 ttl=64 time=0.056 ms
    
    
    when i want to connect https://server5.cl-i.net:8080 i get ERR_CONNECTION_TIMED_OUT
    when i put the ip https://161.97.82.13:8080/index.php it works and i can login to ispconfig.

    maybe someone can help me what i am doing wrong?
    thanks for all
     
  3. Croydon

    Croydon ISPConfig Developer ISPConfig Developer

    I guess you mean the hosts file on your local computer. The hosts file might not be read or the dns information might be cached. So a browser restart or OS restart might help.

    It seems that is the same problem as you have when calling the url via browser. You have to correct the DNS entry for server5.cl-i.net on your DNS server to point to the correct ip.
     
  4. Jesse Norell

    Jesse Norell ISPConfig Developer Staff Member ISPConfig Developer

    Your public DNS needs to answer with that same IP address for that hostname. That might fix your letsencrypt problem as well.
     
  5. Tom John

    Tom John Member HowtoForge Supporter

    Last edited: Oct 18, 2020
  6. Jesse Norell

    Jesse Norell ISPConfig Developer Staff Member ISPConfig Developer

    Use update.php rather than install.php. I think it will allow you to create a letsencrypt certificate - if it doesn't prompt to do so, remove or rename the old cert files under /usr/local/ispconfig/interface/ssl/ and try again.
     
    Th0m likes this.
  7. Tom John

    Tom John Member HowtoForge Supporter

    thanks for your kind answer.
    ---------------------------------
    i got the following error during update.php
    Code:
    his application will update ISPConfig 3 on your server.
    
    Shall the script create a ISPConfig backup in /var/backup/ now? (yes,no) [yes]:
    
    Creating backup of "/usr/local/ispconfig" directory...
    Creating backup of "/etc" directory...
    Checking ISPConfig database ..
    Some tables where not 'OK'. Please check the list below.
    
    dbispconfig.aps_instances
    note     : The storage engine for the table doesn't support repair
    dbispconfig.aps_instances_settings
    note     : The storage engine for the table doesn't support repair
    dbispconfig.aps_packages
    note     : The storage engine for the table doesn't support repair
    dbispconfig.aps_settings
    note     : The storage engine for the table doesn't support repair
    dbispconfig.attempts_login
    note     : The storage engine for the table doesn't support repair
    dbispconfig.client
    note     : The storage engine for the table doesn't support repair
    dbispconfig.client_circle
    note     : The storage engine for the table doesn't support repair
    dbispconfig.client_message_template
    note     : The storage engine for the table doesn't support repair
    dbispconfig.client_template
    note     : The storage engine for the table doesn't support repair
    dbispconfig.client_template_assigned
    note     : The storage engine for the table doesn't support repair
    dbispconfig.country
    note     : The storage engine for the table doesn't support repair
    dbispconfig.cron
    note     : The storage engine for the table doesn't support repair
    dbispconfig.directive_snippets
    note     : The storage engine for the table doesn't support repair
    dbispconfig.dns_rr
    note     : The storage engine for the table doesn't support repair
    dbispconfig.dns_slave
    note     : The storage engine for the table doesn't support repair
    dbispconfig.dns_soa
    note     : The storage engine for the table doesn't support repair
    dbispconfig.dns_ssl_ca
    note     : The storage engine for the table doesn't support repair
    dbispconfig.dns_template
    note     : The storage engine for the table doesn't support repair
    dbispconfig.domain
    note     : The storage engine for the table doesn't support repair
    dbispconfig.firewall
    note     : The storage engine for the table doesn't support repair
    dbispconfig.ftp_traffic
    note     : The storage engine for the table doesn't support repair
    dbispconfig.ftp_user
    note     : The storage engine for the table doesn't support repair
    dbispconfig.help_faq
    note     : The storage engine for the table doesn't support repair
    dbispconfig.help_faq_sections
    note     : The storage engine for the table doesn't support repair
    dbispconfig.iptables
    note     : The storage engine for the table doesn't support repair
    dbispconfig.mail_access
    note     : The storage engine for the table doesn't support repair
    dbispconfig.mail_backup
    note     : The storage engine for the table doesn't support repair
    dbispconfig.mail_content_filter
    note     : The storage engine for the table doesn't support repair
    dbispconfig.mail_domain
    note     : The storage engine for the table doesn't support repair
    dbispconfig.mail_forwarding
    note     : The storage engine for the table doesn't support repair
    dbispconfig.mail_get
    note     : The storage engine for the table doesn't support repair
    dbispconfig.mail_mailinglist
    note     : The storage engine for the table doesn't support repair
    dbispconfig.mail_relay_recipient
    note     : The storage engine for the table doesn't support repair
    dbispconfig.mail_traffic
    note     : The storage engine for the table doesn't support repair
    dbispconfig.mail_transport
    note     : The storage engine for the table doesn't support repair
    dbispconfig.mail_user
    note     : The storage engine for the table doesn't support repair
    dbispconfig.mail_user_filter
    note     : The storage engine for the table doesn't support repair
    dbispconfig.monitor_data
    note     : The storage engine for the table doesn't support repair
    dbispconfig.openvz_ip
    note     : The storage engine for the table doesn't support repair
    dbispconfig.openvz_ostemplate
    note     : The storage engine for the table doesn't support repair
    dbispconfig.openvz_template
    note     : The storage engine for the table doesn't support repair
    dbispconfig.openvz_traffic
    note     : The storage engine for the table doesn't support repair
    dbispconfig.openvz_vm
    note     : The storage engine for the table doesn't support repair
    dbispconfig.remote_session
    note     : The storage engine for the table doesn't support repair
    dbispconfig.remote_user
    note     : The storage engine for the table doesn't support repair
    dbispconfig.server
    note     : The storage engine for the table doesn't support repair
    dbispconfig.server_ip
    note     : The storage engine for the table doesn't support repair
    dbispconfig.server_ip_map
    note     : The storage engine for the table doesn't support repair
    dbispconfig.server_php
    note     : The storage engine for the table doesn't support repair
    dbispconfig.shell_user
    note     : The storage engine for the table doesn't support repair
    dbispconfig.software_package
    note     : The storage engine for the table doesn't support repair
    dbispconfig.software_repo
    note     : The storage engine for the table doesn't support repair
    dbispconfig.software_update
    note     : The storage engine for the table doesn't support repair
    dbispconfig.software_update_inst
    note     : The storage engine for the table doesn't support repair
    dbispconfig.spamfilter_policy
    note     : The storage engine for the table doesn't support repair
    dbispconfig.spamfilter_users
    note     : The storage engine for the table doesn't support repair
    dbispconfig.spamfilter_wblist
    note     : The storage engine for the table doesn't support repair
    dbispconfig.support_message
    note     : The storage engine for the table doesn't support repair
    dbispconfig.sys_config
    note     : The storage engine for the table doesn't support repair
    dbispconfig.sys_cron
    note     : The storage engine for the table doesn't support repair
    dbispconfig.sys_datalog
    note     : The storage engine for the table doesn't support repair
    dbispconfig.sys_dbsync
    note     : The storage engine for the table doesn't support repair
    dbispconfig.sys_filesync
    note     : The storage engine for the table doesn't support repair
    dbispconfig.sys_group
    note     : The storage engine for the table doesn't support repair
    dbispconfig.sys_ini
    note     : The storage engine for the table doesn't support repair
    dbispconfig.sys_log
    note     : The storage engine for the table doesn't support repair
    dbispconfig.sys_remoteaction
    note     : The storage engine for the table doesn't support repair
    dbispconfig.sys_session
    note     : The storage engine for the table doesn't support repair
    dbispconfig.sys_theme
    note     : The storage engine for the table doesn't support repair
    dbispconfig.sys_user
    note     : The storage engine for the table doesn't support repair
    dbispconfig.web_backup
    note     : The storage engine for the table doesn't support repair
    dbispconfig.web_database
    note     : The storage engine for the table doesn't support repair
    dbispconfig.web_database_user
    note     : The storage engine for the table doesn't support repair
    
    
    after running the script there is no valid ssl certificate for the ispconfig
    i get an certificate error while install new ssl certificate with update.php
    Code:
    Please enter the following 'extra' attributes
    to be sent with your certificate request
    A challenge password []:
    An optional company name []:
    Can't load /root/.rnd into RNG
    139698183143872:error:2406F079:random number generator:RAND_load_file:Cannot open file:../crypto/rand/randfile.c:88:Filename=/root/.rnd
    
    
    should i try this?
    https://www.howtoforge.com/tutorial/securing-ispconfig-3-with-a-free-lets-encrypt-ssl-certificate/
     
    Last edited: Oct 22, 2020
  8. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Did you run the update scripts as root user? Is MariaDB running?

    If that's both true, something you could try is logging in to PHPMyAdmin and repairing the ISPConfig database.
     
  9. Tom John

    Tom John Member HowtoForge Supporter

    I run as root user and yes MariaDb is running i check with pstree and see mysql processes
    i did repair tables with phpmyadmin and i get the following error:
    Code:
    PHP Warning:  fopen(/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter): failed to open stream: Operation not permitted in /tmp/ispconfig3_install/install/lib/install.lib.php on line 459
    PHP Warning:  fwrite() expects parameter 1 to be resource, boolean given in /tmp/ispconfig3_install/install/lib/install.lib.php on line 462
    PHP Warning:  fclose() expects parameter 1 to be resource, boolean given in /tmp/ispconfig3_install/install/lib/install.lib.php on line 463
    chmod: changing permissions of '/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter': Operation not permitted
    chown: changing ownership of '/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter': Operation not permitted
    
    
    still SSL for ispconfig does not work it shows not secure.
    should i install maybe a new server with ubuntu 20.04 ? i see you launch already the new ispconfig with ubuntu 20.04
     
  10. Jesse Norell

    Jesse Norell ISPConfig Developer Staff Member ISPConfig Developer

    That could be an option if you're going to update anyways. What version are you running now?
     
  11. Tom John

    Tom John Member HowtoForge Supporter

    ubuntu 18.04 it was a new install so no problem to install everything new maybe this will work a bit better.
    thanks however for your kind help guys
     
    Th0m likes this.
  12. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Alright, let us know if you have any further problems :)
     

Share This Page