1

Topic: Unable to get certbot SSL working

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.5.1 MARIADB edition.
- Deployed with iRedMail Easy or the downloadable installer? downloadable installer
- Linux/BSD distribution name and version: Ubuntu 20.0.4
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? no
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

I am unable to install certbot SSL, get the following error:

sudo certbot certonly --webroot --dry-run -w /var/www/html -d au.mailguardian.net

Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
  Domain: au.mailguardian.net
  Type:   unauthorized
  Detail: Invalid response from https://au.mailguardian.net/.well-known … Ptp8pj5wNM [121.50.210.89]: "<html>\r\n<head><title>404 Not Found</title></head>\r\n<body>\r\n<center><h1>404 Not Found</h1></center>\r\n<hr><center>nginx</center>\r\n"

Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.

I have given 755 permissions to the /var/www/html folder but still not winning - any tips here?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 (edited by Cthulhu 2022-01-18 21:52:04)

Re: Unable to get certbot SSL working

it is an 404 (file not found) error, not an 403 (forbidden)

do you own au.mailguardian.net ?

3

Re: Unable to get certbot SSL working

Cthulhu wrote:

it is an 404 (file not found) error, not an 403 (forbidden)

do you own au.mailguardian.net ?

Hi there,

Yes I own the domain, I have managed to get the certificate installed now but when I try to access the web page the message is "Your connection is not private" meaning it is not using the letsencrypt cert? Same for mail when I set up a new imap account I get the untrusted certificate error?

4

Re: Unable to get certbot SSL working

So it seems I need to manually update the nginx and dovecot configuration files with the location of the newly generated letsencrypt certificates, which config files would i need to edit to incorporate the new ssl certs into the iredmail system please?

5

Re: Unable to get certbot SSL working

there is a whole guide:
https://docs.iredmail.org/letsencrypt.html