Let's Encrypt not respecting the new system hostname

[extreme85]

Makes sense, thank you !

The option for [Setup Let’s Encrypt SSL certificate for hostname] is set to Yes, do I need to change it to “Yes, and have it configurable”?

[tpnsolutions]

@extreme85,

I would probably not mess with the “Virtualmin Configuration” page in this case.

[extreme85]

I will leave this for now because I’m already blocked by the Let’s Encrypt server till tomorrow. I will check then again and put my findings in this thread - I have something on my mind.

Thank you very much Peter!

[shoulders]

If you change the hostname you need to recheck the virtualmin config for the change to be properly applied

[extreme85]

Thanks, already re-checked multiple times.

[Tactikast]

I can not help but It seems to be indirectly linked to this topic.

LetsEncrypt has stopped renewing certificates

SYSTEM INFORMATION OS type and version Rocky Linux 8.10 Usermin version 2.102 Virtualmin version 7.20.2 Theme version 21.20.7 Apache version 2.4.37 Package updates All installed packages are up to date LetsEncrypt has stopped renewing certs for all domains on this system. This system acts as a public mailserver. As a test, I have set up one of my personal domains on this system as an example. LetsEncrypt does not succeed on new domains either. Here are the A records in DN…

Due apparently to an @Ilia update (If I understood). It start to look like a bug @Joe. (Sorry If I missundestood). Maybe @dumorian might want to confirm

[extreme85]

I think it’s not related to the “LetsEncrypt has stopped renewing certificates”, In fact the Let’s Encrypt is renewing the certificate for the default hostname without any issues, except the fact that the CN of the certificate is for the old hostname of the system (vmiXXXX.contaboserver.com) instead of the new system hostname which is orion.bsoft.solutions.

[extreme85]

Here is current configuration:

System Information:

Re-check configuration output:

Hostname and DNS Client:

Apache Web Server:

DNS Zone for orion.bsoft.solutions:

Apache Webserver configuration for orion.bsoft.solutions:

How the certificate is requested:

SSL Settings:

Webmin config files:

SSL Warning after successful Let’s Encrypt request for default hostname (No error reported by Let’s Encrypt Module):

System rebooted multiple times!
Where else should i look?

[Ilia]

@extreme85

Where else should i look?

Delete host default domain using CLI, and re-check configuration.

[extreme85]

I apologize for my ignorance, can you give me a hint about the command that I need to execute in CLI?

[Ilia]

Using Virtualmin CLI:

virtualmin delete-domain --domain host.example.com 

Command Line API

[extreme85]

@Ilia

virtualmin delete-domain --domain host.example.com

default hostname domain deleted:
virtualmin delete-domain --domain orion.bsoft.solutions

configuration re-checked:
virtualmin check-config

No virtual server now found for orion.bsoft.solutions:

I will try to request new certificate tomorrow (since flooded Let’s Encrypt) but with Certbot built in webserver, because “Other webserver document directory” doesn’t work with error " Website document directory does not exist":

[Ilia]

@extreme85

No virtual server now found for orion.bsoft.solutions

As I mentioned earlier, before re-checking the configuration, you’ll want to enable “Setup SSL certificate from provider for hostname” on the “System Settings ⇾ Virtualmin Configuration: SSL settings” page.

[extreme85]

The certificate is valid now, thanks @Ilia !

Steps to fix:

1. virtualmin delete-domain --domain host.example.com
2. virtualmin check-config
3. Enable “Setup SSL certificate from provider for hostname” on the “System Settings ⇾ Virtualmin Configuration: SSL settings”
4. Re-check Config

[Tactikast]

Great. You can mark your answer as the solution @extreme85. Thank you @Ilia