LetsEncrypt - SSL certificate is not valid

**fulltilt** · Sep 27th 2021

- IMSCP: 1.5.3

- Distribution: Ubuntu 18.04.6 LTS

- Proftpd

- PHP FPM

- MariaDB 10.1

- Dovecot

- Roundcube

- Web2FTP

- Plugins:

PMA Captcha, RoundCubePlugins, SpamAssassin , LetsEncrypt, PHPswitcher, ClamAV

### EDIT ###

temporary solutions:

LetsEncrypt - SSL certificate is not valid

###########

since this morning I have found 5 domain names with following error message (LetsEncrypt certs)

Code

SSL certificate is not valid: C = US, O = Internet Security Research Group, CN = ISRG Root X1 error 2 at 2 depth lookup: unable to get issuer certificate

does anyone have an idea how it can be solved?

**fulltilt** · Sep 27th 2021

it seems the user apache domain_ssl.conf is not created after a create or renew request ...

**petecsaba** · Sep 27th 2021

It's a let's encrypt issue. The plugin need to be fixed for certbot r3. I hope it will come out soon. All my domains are affected too

**fulltilt** · Sep 27th 2021

but here only with Ubuntu 18, it still works with debian 9 and debian 10

**petecsaba** · Sep 27th 2021

I has ubuntu too yes. It's an annoying thing now...

**fulltilt** · Sep 27th 2021

with Debian there is no issue, so I guess something w/ Ubuntu has changed CAcert or some other ssl stuff

**petecsaba** · Sep 28th 2021

I would be happy, if somebody can help me how to fix it.

**fulltilt** · Sep 28th 2021

debug output

Code

[Tue Sep 28 11:05:05 2021] [debug] iMSCP::Execute::execute: openssl pkey -in /tmp/mBG_0sclG3 -noout
[Tue Sep 28 11:05:05 2021] [debug] iMSCP::Execute::execute: openssl verify -CAfile /tmp/mzaB8wQu9V -purpose sslserver /tmp/hOq4QUp2Tb
[Tue Sep 28 11:05:05 2021] [debug] iMSCP::OpenSSL::validateCertificate: error /tmp/hOq4QUp2Tb: verification failed
[Tue Sep 28 11:05:00 2021] [debug] Modules::Plugin::_executePluginAction: Executing run( ) action on Plugin::LetsEncrypt
[Tue Sep 28 11:05:00 2021] [debug] iMSCP::Execute::execute: /bin/systemctl is-active apache2.service
[Tue Sep 28 11:05:00 2021] [debug] iMSCP::Provider::Service::Abstract::_exec: active
[Tue Sep 28 11:05:00 2021] [debug] (eval): Executing 'toadd' tasks for the 'mydomain.tld' SSL certificate
[Tue Sep 28 11:05:00 2021] [debug] Plugin::LetsEncrypt::_issueCertificate: Required action: issue
[Tue Sep 28 11:05:00 2021] [debug] Plugin::LetsEncrypt::_deleteLineages: Deleting any SSL certificate
lineage matching the mydomain.tld domain name [Tue Sep 28 11:05:00 2021] [debug] iMSCP::Execute::execute: /usr/local/sbin/certbot
certonly --cert-name mydomain.tld --preferred-challenges http-01 --email info@mydomain.tld --agree-tos --user-agent-comment i-MSCP-LetsEncrypt/3.6.0 --quiet --non-interactive --work-dir /var/lib/letsencrypt --logs-dir /var/log/letsencrypt --max-log-backups 100 --webroot --webroot-path /var/www/imscp/gui/plugins/LetsEncrypt/acme --break-my-certs --domains mydomain.tld,www.mydomain.tld

Display More

**fulltilt** · Sep 28th 2021

certs are created under /etc/letsencrypt/* now I have added by hand the certs into the controlpanel SSL cert section

same error message:

SSL certificate is not valid: C = US, O = Internet Security Research Group, CN = ISRG Root X1 error 2 at 2 depth lookup: unable to get issuer certificate

which shows that something does not work with the letsencrypt validation procedure, a purchased positive ssl certificate works

**theqkash** · Sep 28th 2021

I don't know it it will work or not, but maybe mentioning Nuxwin here will make it fixed faster.

For me it's not working as well, changing LE source to development is not fixing the issue.

LetsEncrypt - SSL certificate is not valid

Share

Daily visitors