Discussion in 'ISPConfig 3 Priority Support' started by nmazza, Oct 11, 2017.

  1. nmazza

    nmazza Member HowtoForge Supporter

    Dear Support
    I have updated ispconfig3.05-SP8 to 3.1.7p1, and working fine.
    I need use Let's Encrytp Certificates
    I check from the control Panel in Sites over
    SSL and Let's Encrypt SSL, at first the checks are ok

    but If I close the session and LogIn again
    The Site
    the checks are missing, what's the wrong.
    I want check and add Let's Encrypt certificates for this Server
    Thanks for all
    Document Root: /var/www/clients/client1/web1

    And after that how to create and add certificate from the ISP Control Panel to this site?

    I'll appreciate your cooperation
    Nestor Mazza
  2. nmazza

    nmazza Member HowtoForge Supporter

    If I only check SSL and then create the certificate with the ISPConfig control Panel with SSL create option under Sites SSL
    works fine
    but If I check Let's Encrypt SSL under Sites / Domain
    the check is missing after save and logout when I login again.
    How are the writes steps to use Let's Encrypt in this Server,
    Nestor Mazza
  3. till

    till Super Moderator Staff Member ISPConfig Developer

  4. nmazza

    nmazza Member HowtoForge Supporter

  5. nmazza

    nmazza Member HowtoForge Supporter

    Package python-2.6.6-66.el6_8.x86_64 already installed and latest version
    Package python-devel-2.6.6-66.el6_8.x86_64 already installed and latest version
    Package mod_python-3.3.1-16.el6.x86_64 already installed and latest version
    Are ok ? or I need update Python to 2.7
    and mod_python 3.5 such as IspConfig on Centos 7.3

    Becasuse my letsencrypt.log says

    2017-10-11 21:15:11,441:DEBUG:certbot.main:certbot version: 0.19.0
    2017-10-11 21:15:11,441:DEBUG:certbot.main:Arguments: []
    2017-10-11 21:15:11,441:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
    2017-10-11 21:15:11,459:DEBUG:certbot.log:Root logging level set at 20
    2017-10-11 21:15:11,459:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
    2017-10-11 21:15:11,462:DEBUG:certbot.plugins.selection:Requested authenticator None and installer None
    2017-10-11 21:15:11,569:DEBUG:certbot_apache.configurator:Apache version is 2.2.15
    2017-10-11 21:15:12,020:DEBUG:certbot.plugins.disco:No installation (PluginEntryPoint#nginx):
    Traceback (most recent call last):
    File "/opt/", line 130, in prepare
    File "/opt/", line 150, in prepare
    raise errors.NoInstallationError
    2017-10-11 21:15:12,021:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache
    Description: Apache Web Server plugin - Beta
    Interfaces: IAuthenticator, IInstaller, IPlugin
    Entry point: apache = certbot_apache.configurator:ApacheConfigurator
    Initialized: <certbot_apache.configurator.ApacheConfigurator object at 0x3879850>
    Prep: True
    2017-10-11 21:15:12,021:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_apache.configurator.ApacheConfigurator object at 0x3879850> and installer <certbot_apache.configurator.ApacheConfigurator object at 0x3879850>
    2017-10-11 21:15:12,021:INFO:certbot.plugins.selection:plugins selected: Authenticator apache, Installer apache
    2017-10-11 21:16:25,446:DEBUG:certbot.log:Exiting abnormally:
    Traceback (most recent call last):
    File "/opt/", line 11, in <module>
    File "/opt/", line 861, in main
    return config.func(config, plugins)
    File "/opt/", line 690, in run
    le_client = _init_le_client(config, authenticator, installer)
    File "/opt/", line 479, in _init_le_client
    acc, acme = _determine_account(config)
    File "/opt/", line 363, in _determine_account = display_ops.get_email()
    File "/opt/", line 59, in get_email
    "An e-mail address or "
    Error: An e-mail address or --register-unsafely-without-email must be provided.
    Nestor Mazza
  6. ISPConfig Developer ISPConfig Developer

    possible you need to run $certbot-auto and provide some input like an email-adress, but don't let this run cert-creation when it asks, cancel at that step. I think it was mentioned in the howtos.
  7. nmazza

    nmazza Member HowtoForge Supporter

    Yes, I did the following
    And the howto said
    Now we will add support for Let's encrypt.

    mkdir /opt/certbot
    cd /opt/certbot
    chmod a+x ./certbot-auto
    Now run the certboot-auto command which will downlaod and install the software and it's dependencies.
    The command will then tell you that "no names were found in your configuration files" and asks if it shall continue, please chose "c" to cancel here as the certs will be created by ispconfig.
    Now if i check on

    Certificate #1: RSA 4096 bits (SHA256withRSA)
    Server Key and Certificate #1

    Fingerprint SHA256: ebf8ca01a1e2f51f6120406b8cc7363fb2a39b30f103df1caa2d680e5b07f9b4
    Pin SHA256: SJLbqY2TsoFB1Y28TbvAajqs/a9eWZjpDLaWZOEgsFs=
    Common names
    Alternative names
    Serial Number 0335e98536779d1d84e6354cbf55445ccdf6
    Valid from Thu, 12 Oct 2017 00:25:09 UTC
    Valid until Wed, 10 Jan 2018 00:25:09 UTC (expires in 2 months and 28 days)
    Key RSA 4096 bits (e 65537)
    Weak key (Debian) No
    Issuer Let's Encrypt Authority X3
    Signature algorithm SHA256withRSA
    Extended Validation No
    Certificate Transparency No
    OCSP Must Staple No
    Revocation information OCSP
    Revocation status Good (not revoked)
    DNS CAA No (more info)
    Trusted Yes

    Additional Certificates (if supplied)

    Certificates provided 2 (2742 bytes)
    Chain issues None
    Subject Let's Encrypt Authority X3
    Fingerprint SHA256: 25847d668eb4f04fdd40b12b6b0740c567da7d024308eb6c2c96fe41d9de218d
    Pin SHA256: YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg=
    Valid until Wed, 17 Mar 2021 16:40:46 UTC (expires in 3 years and 5 months)
    Key RSA 2048 bits (e 65537)
    Issuer DST Root CA X3
    Signature algorithm SHA256withRSA

    And Finally added CAA on my DNS Server, since some minutes ago.
    It seems looks fine, but I'm not shure.
    Any other consideration or just fine ?

    Nestor Mazza
  8. nmazza

    nmazza Member HowtoForge Supporter

  9. ISPConfig Developer ISPConfig Developer

    great news :) sometimes DNS-updates may take a while, maybe that was causing issues?!
  10. nmazza

    nmazza Member HowtoForge Supporter

    And let me one more question
    I have some domains since ispconfig3.05-SP8 without Let's Encrypt
    but now Must be create the SSL certificates for each Domain added when was ispconfig3.05-SP8
    and now , the server is ispconfig3.1.7p1
    when add a website the SSL Certificates for each Domain, IspConfig will create automatically or not ?
    Thanks for all
    Nestor Mazza
  11. ISPConfig Developer ISPConfig Developer

    I don't know if that will work, maybe someone knowing the particular code for that can answer this question.
    If in doubt just disable and enable letsencrypt and it should defnitly work.

    btw. your site shows me good ssl cert aswell :)
  12. nmazza

    nmazza Member HowtoForge Supporter

    Thanks for all again
    Nestor Mazza

Share This Page