Vesta letsencrypt update problem (error 15)
Posted: Sun Mar 08, 2020 9:23 am
Today certs weren't updated, one of them was deleted (!!) and all the sites became offline (error 500):
# apachectl -t
AH00526: Syntax error on line 27 of /home/user/conf/web/domain2.com.apache2.ssl.conf:
SSLCertificateFile: file '/home/user/conf/web/ssl.domain2.com.crt' does not exist or is empty
/var/log/vesta/error.log:
2020-03-06 02:04:23 v-add-letsencrypt-domain 'user' 'domain1.com' 'www.domain1.com' [Error 15]
2020-03-07 02:04:38 v-add-letsencrypt-domain 'user' 'domain2.com' 'www.domain2.com' [Error 15]
2020-03-07 02:05:27 v-add-letsencrypt-domain 'user' 'domain1.com' 'www.domain1.com' [Error 15]
2020-03-08 02:04:32 v-restart-web [Error 20]
2020-03-08 02:04:32 v-delete-web-domain-ssl 'user' 'domain1.com' [Error 20]
2020-03-08 02:04:33 v-restart-web 'single' [Error 20]
2020-03-08 02:04:33 v-add-web-domain-ssl 'user' 'domain1.com' '/tmp/tmp.hS42m9sIef' 'single' 'single' 'single' 'single' 'single' [Error 20]
To fix the problem I disabled SSL for domain2.com in vesta panel and then re-enabled it.
The main question - why does VESTA delete certificate if it cannot update it? It much more preferable to see SSL warning in the browser instead of seeing all of the sites with error 500.
# apachectl -t
AH00526: Syntax error on line 27 of /home/user/conf/web/domain2.com.apache2.ssl.conf:
SSLCertificateFile: file '/home/user/conf/web/ssl.domain2.com.crt' does not exist or is empty
/var/log/vesta/error.log:
2020-03-06 02:04:23 v-add-letsencrypt-domain 'user' 'domain1.com' 'www.domain1.com' [Error 15]
2020-03-07 02:04:38 v-add-letsencrypt-domain 'user' 'domain2.com' 'www.domain2.com' [Error 15]
2020-03-07 02:05:27 v-add-letsencrypt-domain 'user' 'domain1.com' 'www.domain1.com' [Error 15]
2020-03-08 02:04:32 v-restart-web [Error 20]
2020-03-08 02:04:32 v-delete-web-domain-ssl 'user' 'domain1.com' [Error 20]
2020-03-08 02:04:33 v-restart-web 'single' [Error 20]
2020-03-08 02:04:33 v-add-web-domain-ssl 'user' 'domain1.com' '/tmp/tmp.hS42m9sIef' 'single' 'single' 'single' 'single' 'single' [Error 20]
To fix the problem I disabled SSL for domain2.com in vesta panel and then re-enabled it.
The main question - why does VESTA delete certificate if it cannot update it? It much more preferable to see SSL warning in the browser instead of seeing all of the sites with error 500.