Issue with ACME getting SSL certificate.

gVes

Hi all, I recently installed mailcow on a fresh Ubuntu 20.04 install. Everything went smooth. I am able to send and receive emails. very surprised by how simple it was really.

The only issue I have is that my sites do not seem to be encrypted. I’m a complete Linux noob so please go easy on me. From what I can see in the log files, acme-mailcow is not able to match my IP to my Hostname. I have setup my DNS correctly on my domain control panel which is pointing to the correct Public IP, MX records etc. (as I said I am able to send and receive emails with no issue). My only issue is my site is not secured.

I ran docker-compose logs acme-mailcow and these are the log files:

acme-mailcow_1 | Wed Jan 5 08:57:54 2022 - Waiting for Docker API…
acme-mailcow_1 | Wed Jan 5 08:57:54 2022 - Docker API OK
acme-mailcow_1 | Wed Jan 5 08:57:54 2022 - Waiting for Postfix…
acme-mailcow_1 | Wed Jan 5 08:57:54 2022 - Postfix OK
acme-mailcow_1 | Wed Jan 5 08:57:54 2022 - Waiting for Dovecot…
acme-mailcow_1 | Wed Jan 5 08:57:54 2022 - Dovecot OK
acme-mailcow_1 | Wed Jan 5 08:57:54 2022 - Waiting for database…
acme-mailcow_1 | Wed Jan 5 08:57:54 2022 - Database OK
acme-mailcow_1 | Wed Jan 5 08:57:54 2022 - Waiting for Nginx…
acme-mailcow_1 | Wed Jan 5 08:57:54 2022 - Nginx OK
acme-mailcow_1 | Wed Jan 5 08:57:54 2022 - Waiting for resolver…
acme-mailcow_1 | Wed Jan 5 08:57:55 2022 - Resolver OK
acme-mailcow_1 | Wed Jan 5 08:57:55 2022 - Waiting for domain table…
acme-mailcow_1 | OK
acme-mailcow_1 | Wed Jan 5 08:57:55 2022 - Initializing, please wait…
acme-mailcow_1 | Wed Jan 5 08:57:55 2022 - Using existing domain rsa key /var/lib/acme/acme/key.pem
acme-mailcow_1 | Wed Jan 5 08:57:55 2022 - Using existing Lets Encrypt account key /var/lib/acme/acme/account.pem
acme-mailcow_1 | Wed Jan 5 08:57:55 2022 - Detecting IP addresses…
acme-mailcow_1 | Wed Jan 5 08:58:06 2022 - OK: 197.156.88.132, 0000:0000:0000:0000:0000:0000:0000:0000
acme-mailcow_1 | Wed Jan 5 08:58:10 2022 - Found A record for autoconfig.setavicon.com: 10.10.1.12
acme-mailcow_1 | Wed Jan 5 08:58:10 2022 - Cannot match your IP 197.156.88.132 against hostname autoconfig.setavicon.com (DNS returned 10.10.1.12)
acme-mailcow_1 | Wed Jan 5 08:58:11 2022 - Found A record for mail.setavicon.com: 10.10.1.12
acme-mailcow_1 | Wed Jan 5 08:58:11 2022 - Cannot match your IP 197.156.88.132 against hostname mail.setavicon.com (DNS returned 10.10.1.12)
acme-mailcow_1 | Wed Jan 5 08:58:11 2022 - Cannot validate any hostnames, skipping Let’s Encrypt for 1 hour.
acme-mailcow_1 | Wed Jan 5 08:58:11 2022 - Use SKIP_LETS_ENCRYPT=y in mailcow.conf to skip it permanently.
acme-mailcow_1 | OK

Any input on how I can solve this would be so helpful.

Thanks guys.

gVes

xbyte

u forget to add ptr(reverse dns record)
go to your domain control panel and add and it will fix it

gVes

Isn’t my ISP supposed to configure a rDNS for my IP. I don’t think this can be done on a domain control panel.

So I’ll ask for my provider to set up an PTR for my domain and see if it works.

Thanks.

75cpa

gVes Have a look at this URL which discusses Cloud Server rDNS. Usually, you can do it yourself. Just follow these steps, and it is all should be set. Remember that you have to add your FQDN to IPV4 and IPV6.

gVes

Thank you. I’ll check it out and will post back the results!