server ssl doesnt exist

[Namaste]

One of my servers is throwing an error for self signed ssl for admin login.   All of the other servers are ok.   Any suggestions?

[josephgodwinke]

Reinstall the ssl certificate for the specific domain

[Namaste]

its the ssl for the hostname not a user domain

[josephgodwinke]

Go to

Code Select Expand

admin/index.php?module=change_hostname and on the change hostname options check all SSL options and click on change hostname.

Check

Code Select Expand

/var/log/cwp/autossl.log afterwards from SSH

You should see something like

Code Select Expand

SSL Failed to install for Hostname

The fix is: add the domain of hostname subdomain to DNS zones - best way is to add it as an account

Then go to DNS Records on CWP and add hostname as A Record with TTL of

Code Select Expand

14400

Afterwards check

Code Select Expand

/var/log/cwp/autossl.log from SSH

[Namaste]

I tried renaming hostname thinking that would reissue ssl but that did not work.

online ssl check threw an error for Alternative Names: none (invalid)

[Namaste]

2021-06-04 07:06:12 server.fhservicelist.com AutoSSL removing server.fhservicelist.com
2021-06-04 07:06:12 AutoSSL removing server.fhservicelist.com from Dovecot sni.conf
2021-06-04 07:06:23 AutoSSL removing server.fhservicelist.com from Dovecot sni.conf
2021-06-06 07:06:09 server.fhservicelist.com Failed http validation for Hostname: server.fhservicelist.com
2021-06-06 07:06:09 server.fhservicelist.com Self-signed SSL installed for Hostname: server.fhservicelist.com
2021-06-06 07:06:09 server.fhservicelist.com Installing Hostname SSL for service cwpsrv: server.fhservicelist.com
2021-06-06 07:06:09 server.fhservicelist.com Installing Hostname SSL for service postfix: server.fhservicelist.com
2021-06-06 07:06:11 server.fhservicelist.com Installing Hostname SSL for service dovecot: server.fhservicelist.com
2021-06-06 07:06:13 server.fhservicelist.com Installing Hostname SSL for service pure-ftpd: server.fhservicelist.com

[Igor S.]

Hi, @Namaste
Try to check /root/.acme.sh/acme.sh.log

[Namaste]

[Thu Jun 10 03:46:29 EDT 2021] Running cmd: upgrade
[Thu Jun 10 03:46:29 EDT 2021] Using config home:/root/.acme.sh
[Thu Jun 10 03:46:29 EDT 2021] default_acme_server
[Thu Jun 10 03:46:29 EDT 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Thu Jun 10 03:46:29 EDT 2021] GET
[Thu Jun 10 03:46:29 EDT 2021] url='https://api.github.com/repos/acmesh-official/acme.sh/git/refs/heads/master'
[Thu Jun 10 03:46:29 EDT 2021] timeout=
[Thu Jun 10 03:46:29 EDT 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Thu Jun 10 03:46:29 EDT 2021] ret='0'
[Thu Jun 10 03:46:29 EDT 2021] Already uptodate!
[Thu Jun 10 03:46:29 EDT 2021] Upgrade success!

[Igor S.]

You need to find information about the domain in the log. The part of log you have sent has nothing

[Namaste]

You need to find information about the domain in the log. The part of log you have sent has nothing

Thats all you will find in the log that you asked for, but just repeated over and over and over every day.

[Namaste]

You need to find information about the domain in the log. The part of log you have sent has nothing

No offense Igor, but your posts rarely are of any use to anybody.

[Starburst]

Hate to ask this simple question, but sometime it's the simple things.

When you access CWP and goto Server Settings -> Change Hostname

It will show:

Your Hostname is: (Hotname) and it resolves to IP: 1.2.3.4 [Check Black List] [Check CWP SSL] [Check WebServers SSL]
rDNS/PTR = (Hostname) SUCCESS [Check SenderBase]

The SUCCESS should be a Green block with White letters.
If it's not, a SSL will not generate for the hostname.

Also Let's Encrypt only allows 3-4 attempts per 24 hours or something like that.

Just my 2 cents.

[Namaste]

Hate to ask this simple question, but sometime it's the simple things.

When you access CWP and goto Server Settings -> Change Hostname

It will show:

Your Hostname is: (Hotname) and it resolves to IP: 1.2.3.4 [Check Black List] [Check CWP SSL] [Check WebServers SSL]
rDNS/PTR = (Hostname) SUCCESS [Check SenderBase]

The SUCCESS should be a Green block with White letters.
If it's not, a SSL will not generate for the hostname.

Also Let's Encrypt only allows 3-4 attempts per 24 hours or something like that.

Just my 2 cents.

[Namaste]

The problem is that there is a self signed certificate in the mix.   And I don't know how to get rid of the self signed cert in CWP.

[Namaste]

I changed the hostname to a different hostname and I am still getting the same selfsigned cert errors.