Submitted by bitJericho on Tue, 11/07/2017 - 21:18
Operating system Debian Linux 9
Webmin version 1.860
Usermin version 1.720
Virtualmin version 6.01-3
Steps taken to cause problem:
- Verified apache configuration is correct and working.
- Go to webmin/edit_ssl.cgi > Let's Encrypt
- Verify "Copy new key and certificate to Webmin?" set to Yes. Set all other options. Successfully generate SSL certificate.
- Restart webmin, still using default self-signed certificate.
- Restarted server. No change. Verified issue exists on multiple computers (not a cache issue)
Troubleshooting performed.
- Check directory:
- Verified files are correct, valid and working.
- Go back to webmin/edit_ssl.cgi, go to SSL Settings, verified settings are correct. The settings were already filled out properly. Hit Save, get error:
- run chmod 777 /etc/webmin/letsencrypt-key.pem. Error still occurs. Revert chmod.
root@hostname:/etc/webmin# ls -la lets*
-rw------- 1 root root 1647 Nov 7 20:37 letsencrypt-ca.pem
-rw------- 1 root root 2151 Nov 7 20:37 letsencrypt-cert.pem
-rw------- 1 root root 3247 Nov 7 20:37 letsencrypt-key.pem
"Failed to save SSL options : The SSL private key file /etc/webmin/letsencrypt-key.pem does not exist or does not contain a PEM format key"
Possible cause: pem check is incorrect and causing webmin to use default miniserv certificate.
Status:
Active
Comments
Submitted by JamieCameron on Tue, 11/07/2017 - 22:18 Comment #1
There's a bug in the current release of Webmin that causes it to refuse to load some SSL certs. This will be fixed in the next release though..
You can see the patch here : https://github.com/webmin/webmin/commit/8065688231f9ec269a9c47e798825100...
Submitted by ashleydrees on Mon, 11/13/2017 - 09:01 Pro Licensee Comment #2
I too am seeing this behaviour. I found a forum post which i commented with my info.
https://www.virtualmin.com/comment/787093
Submitted by JamieCameron on Tue, 11/14/2017 - 02:03 Comment #3
For anyone who's seeing this, the latest 1.861 devel version of webmin from www.webmin.com/devel.html includes the fix.
Submitted by OldHoster on Sat, 02/17/2018 - 17:36 Comment #4
I am seeing the same thing on 1.872
Submitted by neural on Tue, 04/09/2019 - 06:12 Comment #5
I'm still getting this on the latest version too
Submitted by JamieCameron on Fri, 04/12/2019 - 00:48 Comment #6
Even on version 1.900 ?
Submitted by neural on Wed, 04/17/2019 - 02:17 Comment #7
Hi Jamie
Sorry for late reply, have been away on leave, and only saw the email this morning.... Yes I'm currently on version 1.900
Submitted by JamieCameron on Sat, 04/20/2019 - 18:38 Comment #8
For people who are seeing the error with the file
/etc/webmin/letsencrypt-key.pem
, can you post the contents here?Submitted by stefanm on Thu, 04/25/2019 - 13:46 Pro Licensee Comment #9
Seeing the same problem. Webmin 1.900 on Debian 9. LetsEncrypt certificate successfully created, but Webmin fails to use it. Instead, it uses another cert that was issued on a hosted domain then copied to Webmin.
Submitted by JamieCameron on Fri, 05/03/2019 - 14:37 Comment #10
Check that Webmin isn't configured to use a different cert for requests to a specific domain or IP, at Webmin -> Webmin Configuration -> SSL Encryption -> Per-IP Keys