I followed this tutorial (which I need to adapt for me cause it doesn't work.. but it's anoter problem) : Listener::Named::Slave::Provisioning - Zonetransfer to Secondary Nameserver + Howto
In this tuto there's a new listener to register.
The command to achieve this is :
each time I ran this command, the setup detects my certificates for the panel and the services as invalid.
They are generated via the LetsEncrypt plugin.
My setup :
Debian 9 - up to date
iMSCP v 1.5.3 - last release
FQDN : web1.cproinfo.fr
Panel address : panel.cproinfo.fr
The log output (/var/log/imscp/imscp-setup.log) :
- [Sun Jun 5 02:47:05 2022] [debug] iMSCP::Execute::execute: openssl pkey -in /etc/imscp/imscp_services.pem -noout
- [Sun Jun 5 02:47:05 2022] [debug] iMSCP::Execute::execute: openssl verify -CAfile /etc/imscp/imscp_services.pem -purpose sslserver /etc/imscp/imscp_services.pem
- [Sun Jun 5 02:47:05 2022] [debug] iMSCP::OpenSSL::validateCertificate: error /etc/imscp/imscp_services.pem: verification failed
- [Sun Jun 5 02:47:05 2022] [debug] iMSCP::Execute::execute: /usr/bin/dialog --exit-label Abort --yes-label Yes --ok-label Ok --title 'i-MSCP Installer Dialog' --backtitle 'i-MSCP - internet Multi Server Control Panel (1.5.3)' --cancel-label Back --help-label Help --colors --no-label No --no-shadow --msgbox 'Your SSL certificate for the FTP and MAIL services is missing or invalid.
The certificate is generated today !
I already did :
to update the DB and change the preferred root CA...
In order to make this working again, I have to revoke the certs in the panel then generate new certs, and all is fine till next update....
Is it because I have 2 dns names for the services and for the panel ?
Am I missing another thing ?
Many thanks for your help.