Can't issue Let's Encrypt Certificate for Global Web domain

jgrispa

I am setting webmail.example.com as Global Web Domain in Enhance Panel. Then an A record pointing webmail.example.com to my mailserver's IP address. After this a website for webmail.example.com is automatically created. Next step is to issue a Let's Encrypt Certificate for webmail.example.com, but I'm getting the following error:

Failed to issue a Let's Encrypt certificate for webmail.fastcloud.host: LetsEncrypt challenge failed for example.com: Some(ServerError { type: Some("urn:ietf:params:acme:error:unauthorized"), title: None, status: Some(403), detail: Some("1.2.3.4: Invalid response from http://webmail. example.com /.well-known/acme-challenge/_ZJEb2FmSVe0dX2EWp-J6iYuxXYWwFagJF3bo57qK3o: 404") })

Is this a firewall problem? Maybe I'm missing some ports I need to open?

Thanks

Aliysa_Enhance

jgrispa Sounds like a DNS issue. Can you please check that your A (and AAAA) record is pointing to your control panel server and not the mail server.

jgrispa

This is what I have:
Main panel domain: panel.example.com
Global Mail Domain in Enhance: webmail.example.com
example.com using Cloudflare's NS

In Cloudflare i had an A record
webmail.example.com that points to mail server's IP

I have also tested changing the IP address to panel server's IP on CF's A record

Other Let's Encrypt SSL Certificates are being issued correctly. The one for Global Web Domain seems to be the only one causing problems now.

jgrispa

Just found the solution. Open port TCP 80 in Panel firewall, and switching IP also to point to Panel address