Control Web Panel

WebPanel => Information => Topic started by: Namaste on June 08, 2021, 01:32:29 PM

Title: server ssl doesnt exist
Post by: Namaste on June 08, 2021, 01:32:29 PM

One of my servers is throwing an error for self signed ssl for admin login.   All of the other servers are ok.   Any suggestions?

Title: Re: server ssl doesnt exist
Post by: josephgodwinke on June 08, 2021, 01:53:52 PM

Reinstall the ssl certificate for the specific domain

Title: Re: server ssl doesnt exist
Post by: Namaste on June 08, 2021, 01:54:55 PM

its the ssl for the hostname not a user domain

Title: Re: server ssl doesnt exist
Post by: josephgodwinke on June 08, 2021, 02:04:04 PM

Go to

Code: [Select]

admin/index.php?module=change_hostname and on the change hostname options check all SSL options and click on change hostname.

Check

Code: [Select]

/var/log/cwp/autossl.log afterwards from SSH

You should see something like

Code: [Select]

SSL Failed to install for Hostname
The fix is: add the domain of hostname subdomain to DNS zones - best way is to add it as an account

Then go to DNS Records on CWP and add hostname as A Record with TTL of

Code: [Select]

14400
Afterwards check

Code: [Select]

/var/log/cwp/autossl.log from SSH

Title: Re: server ssl doesnt exist
Post by: Namaste on June 08, 2021, 02:57:59 PM

I tried renaming hostname thinking that would reissue ssl but that did not work.

online ssl check threw an error for Alternative Names: none (invalid)

Title: Re: server ssl doesnt exist
Post by: Namaste on June 08, 2021, 03:28:57 PM

2021-06-04 07:06:12 server.fhservicelist.com AutoSSL removing server.fhservicelist.com
2021-06-04 07:06:12 AutoSSL removing server.fhservicelist.com from Dovecot sni.conf
2021-06-04 07:06:23 AutoSSL removing server.fhservicelist.com from Dovecot sni.conf
2021-06-06 07:06:09 server.fhservicelist.com Failed http validation for Hostname: server.fhservicelist.com
2021-06-06 07:06:09 server.fhservicelist.com Self-signed SSL installed for Hostname: server.fhservicelist.com
2021-06-06 07:06:09 server.fhservicelist.com Installing Hostname SSL for service cwpsrv: server.fhservicelist.com
2021-06-06 07:06:09 server.fhservicelist.com Installing Hostname SSL for service postfix: server.fhservicelist.com
2021-06-06 07:06:11 server.fhservicelist.com Installing Hostname SSL for service dovecot: server.fhservicelist.com
2021-06-06 07:06:13 server.fhservicelist.com Installing Hostname SSL for service pure-ftpd: server.fhservicelist.com

Title: Re: server ssl doesnt exist
Post by: Igor S. on June 10, 2021, 09:24:28 AM

Hi, @Namaste
Try to check /root/.acme.sh/acme.sh.log

Title: Re: server ssl doesnt exist
Post by: Namaste on June 10, 2021, 12:12:28 PM

[Thu Jun 10 03:46:29 EDT 2021] Running cmd: upgrade
[Thu Jun 10 03:46:29 EDT 2021] Using config home:/root/.acme.sh
[Thu Jun 10 03:46:29 EDT 2021] default_acme_server
[Thu Jun 10 03:46:29 EDT 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Thu Jun 10 03:46:29 EDT 2021] GET
[Thu Jun 10 03:46:29 EDT 2021] url='https://api.github.com/repos/acmesh-official/acme.sh/git/refs/heads/master'
[Thu Jun 10 03:46:29 EDT 2021] timeout=
[Thu Jun 10 03:46:29 EDT 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Thu Jun 10 03:46:29 EDT 2021] ret='0'
[Thu Jun 10 03:46:29 EDT 2021] Already uptodate!
[Thu Jun 10 03:46:29 EDT 2021] Upgrade success!

Title: Re: server ssl doesnt exist
Post by: Igor S. on June 12, 2021, 10:09:34 AM

You need to find information about the domain in the log. The part of log you have sent has nothing :)

Title: Re: server ssl doesnt exist
Post by: Namaste on June 13, 2021, 11:41:21 AM

Quote from: Igor S. on June 12, 2021, 10:09:34 AM

You need to find information about the domain in the log. The part of log you have sent has nothing :)

Thats all you will find in the log that you asked for, but just repeated over and over and over every day.

Title: Re: server ssl doesnt exist
Post by: Namaste on June 13, 2021, 11:42:21 AM

Quote from: Igor S. on June 12, 2021, 10:09:34 AM

You need to find information about the domain in the log. The part of log you have sent has nothing :)

No offense Igor, but your posts rarely are of any use to anybody.

Title: Re: server ssl doesnt exist
Post by: Starburst on June 13, 2021, 09:41:38 PM

Hate to ask this simple question, but sometime it's the simple things.

When you access CWP and goto Server Settings -> Change Hostname

It will show:

Your Hostname is: (Hotname) and it resolves to IP: 1.2.3.4 [Check Black List] [Check CWP SSL] [Check WebServers SSL]
rDNS/PTR = (Hostname) SUCCESS [Check SenderBase]

The SUCCESS should be a Green block with White letters.
If it's not, a SSL will not generate for the hostname.

Also Let's Encrypt only allows 3-4 attempts per 24 hours or something like that.

Just my 2 cents.

Title: Re: server ssl doesnt exist
Post by: Namaste on June 14, 2021, 12:10:51 PM

Quote from: Starburst on June 13, 2021, 09:41:38 PM

Hate to ask this simple question, but sometime it's the simple things.

When you access CWP and goto Server Settings -> Change Hostname

It will show:

Your Hostname is: (Hotname) and it resolves to IP: 1.2.3.4 [Check Black List] [Check CWP SSL] [Check WebServers SSL]
rDNS/PTR = (Hostname) SUCCESS [Check SenderBase]

The SUCCESS should be a Green block with White letters.
If it's not, a SSL will not generate for the hostname.

Also Let's Encrypt only allows 3-4 attempts per 24 hours or something like that.

Just my 2 cents.

(https://fhservicelist.com/image823.png)

Title: Re: server ssl doesnt exist
Post by: Namaste on June 14, 2021, 12:50:50 PM

The problem is that there is a self signed certificate in the mix.   And I don't know how to get rid of the self signed cert in CWP.

Title: Re: server ssl doesnt exist
Post by: Namaste on June 14, 2021, 11:15:37 PM

I changed the hostname to a different hostname and I am still getting the same selfsigned cert errors.

Title: Re: server ssl doesnt exist
Post by: josephgodwinke on June 15, 2021, 10:08:54 AM

Quote from: josephgodwinke on June 08, 2021, 02:04:04 PM

Go to

Code: [Select]

admin/index.php?module=change_hostname and on the change hostname options check all SSL options and click on change hostname.

Check

Code: [Select]

/var/log/cwp/autossl.log afterwards from SSH

You should see something like

Code: [Select]

SSL Failed to install for Hostname
The fix is: add the domain of hostname subdomain to DNS zones - best way is to add it as an account

Then go to DNS Records on CWP and add hostname as A Record with TTL of

Code: [Select]

14400
Afterwards check

Code: [Select]

/var/log/cwp/autossl.log from SSH

Delete SSL cert from the respective module and repeat these steps

Title: Re: server ssl doesnt exist
Post by: Namaste on June 15, 2021, 10:58:55 AM

I am not running a dns service on my server.  I am using the Linode dns services.

Title: Re: server ssl doesnt exist
Post by: josephgodwinke on June 15, 2021, 11:25:43 AM

Quote from: Namaste on June 15, 2021, 10:58:55 AM

I am not running a dns service on my server.  I am using the Linode dns services.

Use this respective docs https://www.linode.com/docs/products/networking/dns-manager/get-started/ to add A record

Title: Re: server ssl doesnt exist
Post by: Namaste on June 15, 2021, 09:50:13 PM

Quote from: josephgodwinke on June 15, 2021, 11:25:43 AM

Quote from: Namaste on June 15, 2021, 10:58:55 AM

I am not running a dns service on my server.  I am using the Linode dns services.

Use this respective docs https://www.linode.com/docs/products/networking/dns-manager/get-started/ to add A record

I already have my A record.......leafdns.com