Letsencypt on alias: Challenge works OK but written Apache config has no SSL virtualhost
ISPConfig version : 3.1.5
Platform : Centos 7.3.1611
Web server : httpd-2.4.6-45.el7.centos.4.x86_64
Letsencrypt : certbot-0.14.1-3.el7.noarch
Steps to reproduce:
- Create a web domain that doesn't exist e.g. goes.nowhere.com
- Create an alias that does exist and resolves to the ISPConfig host
- Enabled Letsencypt
Expected result: The goes.nowhere.com is excluded and the certificate is issued to the alias domain. The site is now accessible using https.
Actual result: The log file shows that the goes.nowhere.com is excluded and the certificate is issued to the alias domain however there is no SSL version of the website. There is no SSL virtualhost section written to /etc/httpd/conf/sites-enabled/100-goes.nowhere.com.vhost.
The Letsencrypt and SSL checkboxes remain checked on UI. Normally if something goes wrong these are unchecked after cron.
/var/log/ispconfig/cron.log output after applying Letsencrypt option in web UI:
Thu 6 Jul 15:26:01 BST 2017
Thu 6 Jul 15:26:02 BST 2017 06.07.2017-15:26 - WARNING - Could not verify domain goes.nowhere.com, so excluding it from letsencrypt request.
Thu 6 Jul 15:26:04 BST 2017 Saving debug log to /var/log/letsencrypt/letsencrypt.log
Thu 6 Jul 15:26:05 BST 2017 Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
Thu 6 Jul 15:26:05 BST 2017 Obtaining a new certificate
Thu 6 Jul 15:26:06 BST 2017 Performing the following challenges:
Thu 6 Jul 15:26:06 BST 2017 http-01 challenge for aliastest.onepointiq.com
Thu 6 Jul 15:26:06 BST 2017 Using the webroot path /usr/local/ispconfig/interface/acme for all unmatched domains.
Thu 6 Jul 15:26:06 BST 2017 Waiting for verification...
Thu 6 Jul 15:26:09 BST 2017 Cleaning up challenges
Thu 6 Jul 15:26:15 BST 2017 finished.
Thu 6 Jul 15:27:02 BST 2017
Thu 6 Jul 15:27:02 BST 2017
Thu 6 Jul 15:27:02 BST 2017 finished.
Thu 6 Jul 15:28:01 BST 2017
Thu 6 Jul 15:28:01 BST 2017
Thu 6 Jul 15:28:02 BST 2017 finished.
Thu 6 Jul 15:29:02 BST 2017
Thu 6 Jul 15:29:02 BST 2017
Thu 6 Jul 15:29:02 BST 2017 finished.