Failed SSL Cert req...
 
Notifications
Clear all

[Solved] Failed SSL Cert request from Admin UI

32 Posts
6 Users
1 Likes
1,277 Views
(@uk_simon)
Joined: 5 months ago
Posts: 35
Topic starter  

also

consul members
Node Address Status Type Build Protocol DC Segment
server-mail.zextras 111.222.333.444:8301 alive server 1.10.12 2 dc1 <all>

again the server is not shown as a FQDN


   
ReplyQuote
(@sharif)
Admin
Joined: 2 years ago
Posts: 385
 

@uk_simonย 

Okay.

Could you please share the output of this command:

hostname -f
grep zm_lookup_handlers /opt/zextras/conf/nginx/includes/nginx.conf.zmlookup

After that execute this command:

carbonio prov ms `zmhostname` zimbraReverseProxyLookupTarget <your_server_hostname_FQDN>
zmproxyctl restart

ย If the problem persists, set the zimbraReverseProxyLookupTarget false with

carbonio prov ms `zmhostname` zimbraReverseProxyLookupTarget FALSE

ย and check again.

But I would recommend another step-by-step fresh installation.

ย 

Regards,

Sharif


   
ReplyQuote
(@uk_simon)
Joined: 5 months ago
Posts: 35
Topic starter  

Hi Sharif

#hostname -f
mail.zextras.xyz

# grep zm_lookup_handlers /opt/zextras/conf/nginx/includes/nginx.conf.zmlookup
zm_lookup_handlers https://127.0.1.1:7072/service/extension/nginx-lookup;

ย 

please check this command, it looks as if something was missing

# carbonio prov ms `zmhostname` zimbraReverseProxyLookupTarget mail.zextras.xyz
zmhostname: command not found
carbonio: command not found

Regards

Simon

This post was modified 4 months ago by UK_Simon

   
ReplyQuote
(@sharif)
Admin
Joined: 2 years ago
Posts: 385
 

@uk_simonย 

Hi,

Execute this as zextras user, so do:

su - zextras

### Then execute these ###

carbonio prov ms `zmhostname` zimbraReverseProxyLookupTarget mail.zextras.xyz
zmcontrol restart

ย 

Regards,

Sharif


   
ReplyQuote
(@uk_simon)
Joined: 5 months ago
Posts: 35
Topic starter  

#$ carbonio prov ms `zmhostname` zimbraReverseProxyLookupTarget mail.zextras.xyz
ERROR: account.INVALID_ATTR_VALUE (zimbraReverseProxyLookupTarget must be TRUE or FALSE)


   
ReplyQuote
(@sharif)
Admin
Joined: 2 years ago
Posts: 385
 

@uk_simonย 

Hi,

I'm so sorry.

It would be.

carbonio prov ms `zmhostname` zimbraReverseProxyAvailableLookupTargets mail.zextras.xyz
zmcontrol restart

### Check the status ####

carbonio prov gs `zmhostname` | grep -i LookupTarget

ย 

Regards,

Sharif

ย 


   
ReplyQuote
(@uk_simon)
Joined: 5 months ago
Posts: 35
Topic starter  

~$ carbonio prov gs `zmhostname` | grep -i LookupTarget
zimbraReverseProxyAvailableLookupTargets: mail.zextras.xyz
zimbraReverseProxyLookupTarget: TRUE


   
ReplyQuote
(@sharif)
Admin
Joined: 2 years ago
Posts: 385
 

@uk_simonย 

Hi,

So could you please try now?

Or else we have to go for a new installation.

Regards,

Sharif


   
ReplyQuote
(@uk_simon)
Joined: 5 months ago
Posts: 35
Topic starter  

Hi Sharif

looks like I need to start again. Will I have to re-install Ubuntu or can I force the carbonio installation to overwrite the existing one?

ย 


   
ReplyQuote
(@uk_simon)
Joined: 5 months ago
Posts: 35
Topic starter  

I re-installed Ubuntu and Carbonio, followed the docs and video and everything works, even the letsencrypt cert was installed at the press of a button.


   
ReplyQuote
(@sharif)
Admin
Joined: 2 years ago
Posts: 385
 

@uk_simonย 

Hi,

Did you get any issues this time?

Regards,

Sharif


   
ReplyQuote
(@uk_simon)
Joined: 5 months ago
Posts: 35
Topic starter  

Hi Sharif

It installed OK and all carbonio tests confirmed it, however it took a lot of troubleshooting to get the certs to install.

Unfortunately I don't know precisely what it was that was causing the error, but I did find issues unrelated to carbonio like a spurious character in the netplan yaml file and there were a number of DNS issues some of which still prevail, but something I did outside carbonio got the Letsencrypt certs to install this time.

I said in the above post that everything is aparently OK ie all the Carbonio components are active and running and all the Carbonio services are running but I am still not receiving emails, something I will address in a separate thread.

regards

Simon

ย 

ย 


   
ReplyQuote
(@stefanodavid)
Joined: 3 years ago
Posts: 153
 

@uk_simon

It's quite strange that Let's Encrypt certificates are not generated properly, we routinely create them. It may be the case of some strange combination of factors, including (as you mention) external configurations, i.e., not Carbonio-related. In case you happen to find a way to reproduce the issue, we'll be happy to have a look.


   
ReplyQuote
(@uk_simon)
Joined: 5 months ago
Posts: 35
Topic starter  

@stefanodavid I wish I knew which of the changes I made solved the problem because it may have been helpful to others, but now certs install at the press of a button, something that was never the case with zimbra and for which I applaud the carbonio team.

one click from the UI ! I still can't get over it.


   
ReplyQuote
(@stefanodavid)
Joined: 3 years ago
Posts: 153
 

Posted by: @uk_simon

I wish I knew which of the changes I made solved the problem because it may have been helpful to others,

That's the right attitude, thanks! 👍ย 

ย 


   
ReplyQuote
Page 2 / 3