SSL on New Installation

Discussion in 'ISPConfig 3 Priority Support' started by DylanPedro, Jan 11, 2018.

  1. DylanPedro

    DylanPedro Member HowtoForge Supporter

    So I've setup a new Debian Stretch installation as shown on:

    Then used the automated script to install ISPConfig 3.1 as shown here:

    Everything works as expected but I have a couple of questions:
    1. Is the SSL certificate meant to be a Let's Encrypt certificate for the main admin as the one I have is a selfsigned one even though Let's Encrypt is installed and working on other domains?

    2. The Let's Encrypt certificates weren't being generated so I did it as suggested here and got the following output:

    Saving debug log to /var/log/letsencrypt/letsencrypt.log
    Obtaining a new certificate
    Performing the following challenges:
    http-01 challenge for
    http-01 challenge for
    Using the webroot path /usr/local/ispconfig/interface/acme for all unmatched domains.
    Waiting for verification...
    Cleaning up challenges
    Unable to clean up challenge directory /usr/local/ispconfig/interface/acme/.well-known/acme-challenge
    Generating key (4096 bits): /etc/letsencrypt/keys/0000_key-certbot.pem
    Creating CSR: /etc/letsencrypt/csr/0000_csr-certbot.pem
    What does the line that says the following mean?
    Unable to clean up challenge directory /usr/local/ispconfig/interface/acme/.well-known/acme-challenge
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    This is meant to be a self-signed SSL cert. If you want to replace it with an LE cert, see here:

    That's fine and not an error nor an indication for a problem.
  3. Taleman

    Taleman Active Member HowtoForge Supporter

Share This Page