I am not getting any error messages which is the weird part as you can see below.  I just reread https://docs.iredmail.org/letsencrypt.html and it mentions that you now look at misc.tmpl for the web root.  Mine is commented out which should be the default.  Maybe this is why the document is not working for me.  Please let me know where the webroot is.   I did a find on index.html and I am assuming the webroot should be off of /opt/www/roundcubemail and not var/www/html.  I don't want to screw this up again and have to reinstall.  I am trying to get the mail server out of my basement (which has been running great for many years) to a collocation facility finally.  Thanks, Kevin

[root@vpn templates]# more misc.tmpl
# Allow access to '^/.well-known/'
location ~ ^/.well-known/ {
    allow all;
    access_log off;
    log_not_found off;
    autoindex off;
    #root /var/www/html;
}

# Deny all attempts to access hidden files such as .htaccess.
location ~ /\. { deny all; }

# Handling noisy messages
location = /favicon.ico { access_log off; log_not_found off; }
location = /robots.txt { access_log off; log_not_found off; }
[root@vpn templates]#

[root@vpn ~]# certbot certonly --webroot -w /var/www/html -d mail.livesentinel.io
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator webroot, Installer None
Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
Cert not yet due for renewal

You have an existing certificate that has exactly the same domains or certificate name you requested and isn't close to expiry.
(ref: /etc/letsencrypt/renewal/mail.livesentinel.io.conf)

What would you like to do?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: Keep the existing certificate for now
2: Renew & replace the cert (limit ~5 per 7 days)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
Renewing an existing certificate
Resetting dropped connection: acme-v02.api.letsencrypt.org

IMPORTANT NOTES:
- Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/mail.livesentinel.io/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/mail.livesentinel.io/privkey.pem
   Your cert will expire on 2019-06-30. To obtain a new or tweaked
   version of this certificate in the future, simply run certbot
   again. To non-interactively renew *all* of your certificates, run
   "certbot renew"
- If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le

https://mail.livesentinel.io/ gives a certificate error.  This site is not secure. 

I think the webroot is wrong.  Last time I did this the certificate error went away but I could not get to the roundcube login page.  Now it is the other way around! 

Thanks,

Kevin

kmoroz1,

If you have the certificate, follow this post: https://forum.iredmail.org/topic13400-s … e-how.html

Just creating the symbolic link fixes you right up.

andrew