[Solved] Failed SSL Cert request from Admin UI

also

consul members
Node Address Status Type Build Protocol DC Segment
server-mail.zextras 111.222.333.444:8301 alive server 1.10.12 2 dc1 <all>

again the server is not shown as a FQDN

@uk_simon 

Okay.

Could you please share the output of this command:

hostname -f

grep zm_lookup_handlers /opt/zextras/conf/nginx/includes/nginx.conf.zmlookup

After that execute this command:

carbonio prov ms `zmhostname` zimbraReverseProxyLookupTarget <your_server_hostname_FQDN>
zmproxyctl restart

 If the problem persists, set the zimbraReverseProxyLookupTarget false with

carbonio prov ms `zmhostname` zimbraReverseProxyLookupTarget FALSE

 and check again.

But I would recommend another step-by-step fresh installation.

Regards,

Sharif

Hi Sharif

#hostname -f
mail.zextras.xyz

# grep zm_lookup_handlers /opt/zextras/conf/nginx/includes/nginx.conf.zmlookup
zm_lookup_handlers https://127.0.1.1:7072/service/extension/nginx-lookup;

please check this command, it looks as if something was missing

# carbonio prov ms `zmhostname` zimbraReverseProxyLookupTarget mail.zextras.xyz
zmhostname: command not found
carbonio: command not found

Regards

Simon

@uk_simon 

Hi,

Execute this as zextras user, so do:

su - zextras

### Then execute these ###

carbonio prov ms `zmhostname` zimbraReverseProxyLookupTarget mail.zextras.xyz
zmcontrol restart

Regards,

Sharif

#$ carbonio prov ms `zmhostname` zimbraReverseProxyLookupTarget mail.zextras.xyz
ERROR: account.INVALID_ATTR_VALUE (zimbraReverseProxyLookupTarget must be TRUE or FALSE)

@uk_simon 

Hi,

I'm so sorry.

It would be.

carbonio prov ms `zmhostname` zimbraReverseProxyAvailableLookupTargets mail.zextras.xyz
zmcontrol restart

### Check the status ####

carbonio prov gs `zmhostname` | grep -i LookupTarget

Regards,

Sharif

~$ carbonio prov gs `zmhostname` | grep -i LookupTarget
zimbraReverseProxyAvailableLookupTargets: mail.zextras.xyz
zimbraReverseProxyLookupTarget: TRUE

@uk_simon 

Hi,

So could you please try now?

Or else we have to go for a new installation.

Regards,

Sharif

Hi Sharif

looks like I need to start again. Will I have to re-install Ubuntu or can I force the carbonio installation to overwrite the existing one?

I re-installed Ubuntu and Carbonio, followed the docs and video and everything works, even the letsencrypt cert was installed at the press of a button.

@uk_simon 

Hi,

Did you get any issues this time?

Regards,

Sharif

Hi Sharif

It installed OK and all carbonio tests confirmed it, however it took a lot of troubleshooting to get the certs to install.

Unfortunately I don't know precisely what it was that was causing the error, but I did find issues unrelated to carbonio like a spurious character in the netplan yaml file and there were a number of DNS issues some of which still prevail, but something I did outside carbonio got the Letsencrypt certs to install this time.

I said in the above post that everything is aparently OK ie all the Carbonio components are active and running and all the Carbonio services are running but I am still not receiving emails, something I will address in a separate thread.

regards

Simon

@uk_simon

It's quite strange that Let's Encrypt certificates are not generated properly, we routinely create them. It may be the case of some strange combination of factors, including (as you mention) external configurations, i.e., not Carbonio-related. In case you happen to find a way to reproduce the issue, we'll be happy to have a look.

@stefanodavid I wish I knew which of the changes I made solved the problem because it may have been helpful to others, but now certs install at the press of a button, something that was never the case with zimbra and for which I applaud the carbonio team.

one click from the UI ! I still can't get over it.

Posted by: @uk_simon

↑

I wish I knew which of the changes I made solved the problem because it may have been helpful to others,

That's the right attitude, thanks! 👍