[GH-ISSUE #1280] Letsencrypt config prevents renewal #1035

Closed
opened 2026-02-27 11:14:51 +03:00 by kerem · 5 comments
Owner

Originally created by @TacoScheltema on GitHub (Oct 24, 2017).
Original GitHub issue: https://github.com/modoboa/modoboa/issues/1280

Impacted versions

  • Modoboa: 1.9.1 (and previous versions)
  • installer used: Yes
  • Webserver: Nginx

Steps to reproduce

Use the installer to setup Modoboa and enable Letsencrypt

Current behavior

Certificate renewal fails

Expected behavior

Certificate is renewed in time

After installation the Letsencrypt authenticator is set to 'standalone' in /etc/letsencrypt/renewal/domain.conf like so:

[renewalparams]
authenticator = standalone

This will cause the renewal to fail due to port 443 being in use.
by changing the authenticator to 'nginx' after installation has completed the renewal process will then use nginx for the renewal and succeed.

[renewalparams]
authenticator = nginx
Originally created by @TacoScheltema on GitHub (Oct 24, 2017). Original GitHub issue: https://github.com/modoboa/modoboa/issues/1280 # Impacted versions * Modoboa: 1.9.1 (and previous versions) * installer used: Yes * Webserver: Nginx # Steps to reproduce Use the installer to setup Modoboa and enable Letsencrypt # Current behavior Certificate renewal fails # Expected behavior Certificate is renewed in time After installation the Letsencrypt authenticator is set to 'standalone' in /etc/letsencrypt/renewal/_domain_.conf like so: ``` [renewalparams] authenticator = standalone ``` This will cause the renewal to fail due to port 443 being in use. by changing the authenticator to 'nginx' after installation has completed the renewal process will then use nginx for the renewal and succeed. ``` [renewalparams] authenticator = nginx ```
kerem closed this issue 2026-02-27 11:14:51 +03:00
Author
Owner

@tonioo commented on GitHub (Oct 27, 2017):

This issue was moved to modoboa/modoboa-installer#165

<!-- gh-comment-id:340041671 --> @tonioo commented on GitHub (Oct 27, 2017): This issue was moved to modoboa/modoboa-installer#165
Author
Owner

@tonioo commented on GitHub (Dec 7, 2017):

@TacoScheltema Does it require a modification on nginx side?

<!-- gh-comment-id:350042663 --> @tonioo commented on GitHub (Dec 7, 2017): @TacoScheltema Does it require a modification on nginx side?
Author
Owner

@TacoScheltema commented on GitHub (Dec 7, 2017):

@tonioo no, all it will do is use nginx to verify the certificate renewal.
With the authenticator set to standalone, certbot will try to start it's own listener on port 443 and fail since nginx is already listening on that port.
There's no change needed to nginx configuration.

<!-- gh-comment-id:350110002 --> @TacoScheltema commented on GitHub (Dec 7, 2017): @tonioo no, all it will do is use nginx to verify the certificate renewal. With the authenticator set to standalone, certbot will try to start it's own listener on port 443 and fail since nginx is already listening on that port. There's no change needed to nginx configuration.
Author
Owner

@tonioo commented on GitHub (Dec 8, 2017):

Thank you for the feedback, I've fixed the installer (https://github.com/modoboa/modoboa-installer/issues/165).

<!-- gh-comment-id:350266393 --> @tonioo commented on GitHub (Dec 8, 2017): Thank you for the feedback, I've fixed the installer (https://github.com/modoboa/modoboa-installer/issues/165).
Author
Owner

@TacoScheltema commented on GitHub (Dec 8, 2017):

Awesome! thanks 👍

<!-- gh-comment-id:350267048 --> @TacoScheltema commented on GitHub (Dec 8, 2017): Awesome! thanks 👍
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/modoboa-modoboa#1035
No description provided.