Problem with renewed SSL certificate and Email

[Starburst]

CWP 0.9.8.1210 on AlmaLinux 9.6

So when CWP automatically renews the SSL certificate with Let's Encrypt, lately the mail portion isn't working, even thought it shows a valid certificate.

HTTPS still works fine.

But if I go into WebServer Settings -> SSL Certificates, and hit the blue button to 'Renew Now' then the mail clients connect without any invalid SSL certificate.

Again, it's only happening on Renewals.

I like @Netino little CLI script to do what the GUI does above.

But I need to figure out this problem/bug, it's not good when clients calls and says their email isn't working due to this problem.

[overseer]

I think I noticed this on one domain on one server. Waiting to see if it is consistent and repeatable...

[koala04]

today i have same problem with all my domains

"An unexpected error occurred"

[overseer]

Did renewing them resolve the issue for you? Which issuer from LetsEncrypt are your certs signed by? Mine are typically E7, one server is getting R13 as the issuer.

[bytesatwork]

today i have same problem with all my domains

"An unexpected error occurred"

I have also the same issue, can't renew any ssl cert.

[bytesatwork]

Ok, with a lot troubleshooting with ChatGPT, we found the problem is CSF firewall, disable it , renew the Cert. and enable the firewall again.

Have to check where it goes wrong but at leat you can get your sites wunning again...

[bytesatwork]

Ok, with a lot troubleshooting with ChatGPT, we found the problem is CSF firewall, disable it , renew the Cert. and enable the firewall again.

Have to check where it goes wrong but at leat you can get your sites wunning again...

Found the issue, we block a lot of countries due to attacks, so we needed to add Let's Encrypt ip adresses to the whitelist.

[Starburst]

Let me know if you find the Let's Encrypt IP's.

I tried, and gave up searching for them to whitelist.