Cannot issue certs from ISPCONFIG 3.1 anymore


#1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: bang.solutions

I ran this command: Ran from ISPCONFIG

It produced this output: see error below

My web server is (include version): Apache 2.4.25

The operating system my web server runs on is (include version): Debian 9

My hosting provider, if applicable, is: Us

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): ISPCONFIG

For some reason, I can no longer issue letsencrypt certificate from the console. It used to work…

The Apache error log shows: [ssl:warn] [pid 2397] AH01906: xxx.xxx.xxx:8080:0 server certificate is a CA certificate [ssl:error] [pid 2397] AH02217: ssl_stapling_init_cert: can’t retrieve issuer certificate! [ssl:error] [pid 2397] AH02604: Unable to configure certificate xxx.xxx.xxx

The domain name (xxx.xxx.xxx) is the server’s name not the website name I want to issue the cert to

Port 8080 was never opened to the world.


#2

Hi,

I think the error message means that the server certificate was setuped incorrectly?
Can you check if the server certificate is self-signed?

Maybe this stoped the program from executing?

Thank you


#3

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.