outroll / vesta

VESTA Control Panel
http://vestacp.com
GNU General Public License v3.0
2.91k stars 1.02k forks source link

Error code: 15 when trying to enable Lets Encrypt for existing domains with Cloudflare #2208

Closed ezequielbenito closed 2 years ago

ezequielbenito commented 2 years ago

Operating System (OS/VERSION):

Ubuntu 16.04

VestaCP Version:

Version: 1.0.0 (amd64) Release: 5

Installed Software (what you got with the installer):

apache, nginx, mysql, vsftpd

Steps to Reproduce:

  1. Edit an existing domain
  2. Remove check from SSL support
  3. Save form
  4. Go to Cloudflare and set SSL/TLS options to "Flexible" for that domain
  5. Back in Vesta edit domain and check SSL support
  6. Then check Lets Encrypt Support
  7. Save form
  8. It will load for a couple seconds and show error
  9. If I sent Cloudflare to Full Strict the site will not load (will show Cloudflare error: Invalid SSL certificate)

Related Issues/Forum Threads:

https://github.com/serghey-rodin/vesta/issues/2149

Other Notes:

Before the November update I used to set Cloudflare SSL/TLS to flexible then create the SSL let's encrypt and then moved the Cloudflare to Full Strict mode. This is currently working on a Vesta Panel which didn't update.

jaapmarcus commented 2 years ago

Disable proxy -> Request SSL and then enable again

ezequielbenito commented 2 years ago

After going over this again I detected that the domain the proxy was unchecked for this domain. My bad, but this updates are driving my crazy.

Consider this issue closed, anyway I will run additional checks.

In any case, a more descriptive error other than "15" could have helped ;-)