Roundcube webmail domain Let's Encrypt SSL Cert issue

Bananenbaas

Hello good people!

I've been getting to know Enhance and started using it since an month now. All things are going quite smooth except I'm getting an issue with retrieving a SSL cert from Let's Encrypt for the webmail domain that is using roundcube. (https://webmail.hostingcompany.com) Below you can see a screenshot of the issue.

On the controlpanel server I'm running Nginx and the webmail domain is currently not on the Enhance DNS servers but an A an AAA record has been pointed to the controlpanel server, since I'm still testing before migrating all of the data. Also no WAF has been implemented yet and the server is running quite "stock".

It looks like Nginx is blocking the URL which Let's Encrypt is checking so the cert is not being issued. Do or did you guys are also having issues with this and how to fix it?

One way I can try fixing is using apache instead of nginx on the controlpanel server, although during the setup the recommended option was nginx. Also it's possible to change the domain to start using the Enhance DNS servers instead of other ones.

Would love to know your configs and if you're having issues with this as well.

grradmin

Bananenbaas You need to use https://mail.hostingcompany.com

Bananenbaas

grradmin First of all thanks for the quick response.

So using the mail.hostcompany.com is mandatory for the roundcube webmail usage? If I have a reseller wanting to use webmail.reseller.com this is also not possible? I don't understand why this should be a technical issue using another domain then mail.*.com for using webmail, maybe you can eloborate on that?

As an extra addon, this is regarding the Global Webmail Domain. When I try to change that to mail.hostingcompany.com I'm getting the error:

Maybe a little more info, I would like the Global webmail domain to be: https://webmail.hostingcompany.com but the SSL cert request for this URL is being blocked somehow.

I've got multiple resellers hosting their e-mail and DNS only, it would be perferable to have a global webmail domain for customers to use instead of their own https://mail.customerdomain.com

mendozal

Bananenbaas

Each reseller can have their own webmail domain + one for the main Enhance account, you can't use mail.* because that's reserved for customers. The SSL sounds like some issue that can be fixed.

Additionally, customers have their own mail.customerdomain.com if the DNS is hosted in enhance or if the mail.customerdomain.com is pointed to enhance.

Bananenbaas

mendozal Thank you for the clarification and this was my expection as well.
Now I have to find out how to fix the SSL issue because a self signed one is not the way to go with a Global Webmail Domain 🙂

mendozal

Bananenbaas Maybe you can open a ticket with the team.

Bananenbaas

Just to give an update, @Adam was very helpful and quick to respond. For the requests of an SSL certificate Let's Encrypt will prefer the AAAA (IPv6) record. Now my controlpanel host was not responding to the IPv6 requests, removing the AAAA record (so I can fix IPv6 on the VPS) has fixed the issue.

Stupit of me thinking IPv6 would be working out of the box on Contabo lal