Virtualmin adds www to the SSL request for mail.domain.com and fails

Virtualmin
1

|SYSTEM INFORMATION |
|Ubuntu 22.04.01 |
|Webmin version 2.0.21 |
|Virtualmin version 7.7 |

Although the SSL was issued 3 months ago today tries to issue ssl for unexcited domains
e.g instead to request ssl for
admin.domain.com and
mail.domain.com

it tries to issue certificate for

www.admin.domain.com
www.mail.domain.com

Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
Domain: mail.domain.com
Type: dns
Detail: 2a01:3f8:141b:4449::1: Fetching https://www.mail.domain.com/.well-known/acme-challenge/asdsatasdASDAShyasdCgf-oasdsad4: no valid A records found for www.mail.domain.com

Any idea?

2

any reason why you didn’t setup the virtual domain as domain.com as is comes with admin and mail and you won’t have ssl issues.
Check your A records and also whether you can access www.mail.domain.com, letsencrypt needs that to validate your virtual domain.

3

The domain is installed as domain.com as all others.
There is no need to have www.mail.domain.com or www.admin.domain.com etc.
It does this for all allies.

If I enable Virtualmins DNS (I use cloudflare) there is no www.admin or www.mail or all others.
As mentioned the SSL has been issued in the past without any issues
This happened suddenly now during the renewal date

Here is the log

Requesting a certificate for domain.com, www.domain.com, mail.domain.com, admin.domain.com, webmail.domain.com, autoconfig.domain.com, autodiscover.domain.com from Let’s Encrypt …
… request failed : Web-based validation failed :

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Renewing an existing certificate for domain.com and 6 more domains

Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
Domain: admin.domain.com
Type: dns
Detail: 222:4f81111c1b3334349::1: Fetching https://www.admin.domain.com/.well-known/acme-challenge/Tkz6bdF4j0Fq37h4234WM15j2bMrUqgLDan9yaUYYPY: no valid A records found for www.admin.domain.com; no valid AAAA records found for www.admin.domain.com

Domain: autoconfig.domain.com
Type: dns
Detail: 222:111:cccc:4349::1: Fetching https://www.autoconfig.domain.com/.well-known/acme-challenge/uAB9anAE_VQsfdsdf381cYL2pVxxbuFYib2EzXqfZCGYoiIY0: no valid A records found for www.autoconfig.domain.com; no valid AAAA records found for www.autoconfig.domain.com

Domain: autodiscover.domain.com
Type: dns
Detail: 222:fff:1c1b:111::1: Fetching https://www.autodiscover.domain.com/.well-known/acme-challenge/Ru6iBLOLd-l8hq2dF6xwerwerbv9lxHxsVz0vRDwmbBOo: no valid A records found for www.autodiscover.domain.com; no valid AAAA records found for www.autodiscover.domain.com

Domain: mail.domain.com
Type: dns
Detail: 2a01:ffff:1c1b:11111::1: Fetching https://www.mail.domain.com/.well-known/acme-challenge/y4clh-HfSX0JilocrOfsdfgsdgfsdfi1dsBlC1GYQ: no valid A records found for www.mail.domain.com; no valid AAAA records found for www.mail.domain.com

Domain: webmail.domain.com
Type: dns
Detail: 2a01:465:1c1b:4376::1: Fetching https://www.webmail.domain.com/.well-known/acme-challenge/DVxPPo007ccIuj0msdfgsrg45fgdfgo: no valid A records found for www.webmail.domain.com; no valid AAAA records found for www.webmail.domain.com

As you can see it request the correct domains but in the log it has added a www

4

You have a redirect. You have to exclude .well-known path from all redirects (and proxy rules, etc.).

5

Notice Virtualmin is requesting the following, which does not include www.mail.domain.com, etc.:

6

I have no redirects

7

You quite clearly do. Somewhere.

Cloudflare is a proxy service (web requests hit Cloudflare and are then proxied to your web server), I guess they’re doing the redirect?

8

I have deleted and recreated the domain in cloudflare and didn’t create any redirections. I have also disabled cloudflare ssl and activated developer mode to bypass any cache.
The result remains the same.

I have also created ssl for other domains also with dns on cloudflare which the have worked without any issues.
Any idea?

9

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.