Failed to obtain certificate

Archer

Hello.
I need help to setup SSL certificate. I’m a noob and i don’t undestend something or can do something wrong.

Logs
07.02.2024, 09:57:26 mail.xxx.ru - Some errors occurred, retrying in 30 minutes…
07.02.2024, 09:57:26 mail.xxx.ru - Failed to obtain certificate /var/lib/acme/mail.signal-spb.ru/cert.pem for domains ‘mail.xxx.ru’
07.02.2024, 09:57:26 mail.xxx.ru - UGFyc2luZyBhY2NvdW50IGtleS4uLgpQYXJzaW5nIENTUi4uLgpGb3VuZCBkb21haW5zOiBtYWlsLnNpZ25hbC1zcGIucnUKR2V0dGluZyBkaXJlY3RvcnkuLi4KRGlyZWN0b3J5IGZvdW5kIQpSZWdpc3RlcmluZyBhY2NvdW50Li4uCkFscmVhZHkgcmVnaXN0ZXJlZCEgQWNjb3VudCBJRDogaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xMjkxMjA4MzM2CkNyZWF0aW5nIG5ldyBvcmRlci4uLgpPcmRlciBjcmVhdGVkIQpWZXJpZnlpbmcgbWFpbC5zaWduYWwtc3BiLnJ1Li4uClRyYWNlYmFjayAobW9zdCByZWNlbnQgY2FsbCBsYXN0KToKICBGaWxlICIvdXNyL2Jpbi9hY21lLXRpbnkiLCBsaW5lIDgsIGluIDxtb2R1bGU+CiAgICBzeXMuZXhpdChtYWluKCkpCiAgRmlsZSAiL3Vzci9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL2FjbWVfdGlueS5weSIsIGxpbmUgMTk1LCBpbiBtYWluCiAgICBzaWduZWRfY3J0ID0gZ2V0X2NydChhcmdzLmFjY291bnRfa2V5LCBhcmdzLmNzciwgYXJncy5hY21lX2RpciwgbG9nPUxPR0dFUiwgQ0E9YXJncy5jYSwgZGlzYWJsZV9jaGVjaz1hcmdzLmRpc2FibGVfY2hlY2ssIGRpcmVjdG9yeV91cmw9YXJncy5kaXJlY3RvcnlfdXJsLCBjb250YWN0PWFyZ3MuY29udGFjdCwgY2hlY2tfcG9ydD1hcmdzLmNoZWNrX3BvcnQpCiAgRmlsZSAiL3Vzci9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL2FjbWVfdGlueS5weSIsIGxpbmUgMTUzLCBpbiBnZXRfY3J0CiAgICByYWlzZSBWYWx1ZUVycm9yKCJDaGFsbGVuZ2UgZGlkIG5vdCBwYXNzIGZvciB7MH06IHsxfSIuZm9ybWF0KGRvbWFpbiwgYXV0aG9yaXphdGlvbikpClZhbHVlRXJyb3I6IENoYWxsZW5nZSBkaWQgbm90IHBhc3MgZm9yIG1haWwuc2lnbmFsLXNwYi5ydTogeydpZGVudGlmaWVyJzogeyd0eXBlJzogJ2RucycsICd2YWx1ZSc6ICdtYWlsLnNpZ25hbC1zcGIucnUnfSwgJ3N0YXR1cyc6ICdpbnZhbGlkJywgJ2V4cGlyZXMnOiAnMjAyNC0wMi0xNFQwNjo1ODo1NVonLCAnY2hhbGxlbmdlcyc6IFt7J3R5cGUnOiAnaHR0cC0wMScsICdzdGF0dXMnOiAnaW52YWxpZCcsICdlcnJvcic6IHsndHlwZSc6ICd1cm46aWV0ZjpwYXJhbXM6YWNtZTplcnJvcjpjb25uZWN0aW9uJywgJ2RldGFpbCc6ICczNy40Ni41OC43MDogRmV0Y2hpbmcgaHR0cDovL21haWwuc2lnbmFsLXNwYi5ydS8ud2VsbC1rbm93bi9hY21lLWNoYWxsZW5nZS9QMjhzaW84WHgwTjI0YUJCVzNWczJwUU5vR2hxcDBfTlZXVzRPbElVV3pZOiBUaW1lb3V0IGR1cmluZyBjb25uZWN0IChsaWtlbHkgZmlyZXdhbGwgcHJvYmxlbSknLCAnc3RhdHVzJzogNDAwfSwgJ3VybCc6ICdodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9jaGFsbC12My8zMTI1MjYyOTY4MTcvd1U1LXFRJywgJ3Rva2VuJzogJ1AyOHNpbzhYeDBOMjRhQkJXM1ZzMnBRTm9HaHFwMF9OVldXNE9sSVVXelknLCAndmFsaWRhdGlvblJlY29yZCc6IFt7J3VybCc6ICdodHRwOi8vbWFpbC5zaWduYWwtc3BiLnJ1Ly53ZWxsLWtub3duL2FjbWUtY2hhbGxlbmdlL1AyOHNpbzhYeDBOMjRhQkJXM1ZzMnBRTm9HaHFwMF9OVldXNE9sSVVXelknLCAnaG9zdG5hbWUnOiAnbWFpbC5zaWduYWwtc3BiLnJ1JywgJ3BvcnQnOiAnODAnLCAnYWRkcmVzc2VzUmVzb2×2ZWQnOiBbJzM3LjQ2LjU4LjcwJ10sICdhZGRyZXNzVXNlZCc6ICczNy40Ni41OC43MCd9XSwgJ3ZhbGlkYXRlZCc6ICcyMDI0LTAyLTA3VDA2OjU4OjU4Wid9XX0K
07.02.2024, 09:57:06 mail.xxx.ru - Using command acme-tiny –account-key /var/lib/acme/acme/account.pem –disable-check –csr /var/lib/acme/mail.xxx.ru/acme.csr –acme-dir /var/www/acme/
07.02.2024, 09:57:06 mail.xxx.ru - Resolver OK
07.02.2024, 09:57:03 mail.xxx.ru - Checking resolver…
07.02.2024, 09:57:03 mail.xxx.ru - Certificate /var/lib/acme/mail.signal-spb.ru/cert.pem missing or changed domains ‘mail.xxx.ru’ - start obtaining
07.02.2024, 09:57:03 mail.xxx.ru - Confirmed A record 37.46.xxxx
07.02.2024, 09:57:03 mail.xxx.ru - Found A record for mail.xxx.ru: 37.46.xxxx
07.02.2024, 09:57:03 mail.xxx.ru - No A or AAAA record found for hostname autoconfig.xxx.ru
07.02.2024, 09:57:02 mail.xxx.ru - No A or AAAA record found for hostname autodiscover.xxx.ru
07.02.2024, 09:57:02 mail.xxx.ru - OK: 37.46.xxxx, 0000:0000:0000:0000:0000:0000:0000:0000

esackbauer

You need to follow the instructions regarding DNS. There are missing records for autoconfig and autodiscover.
See here:
https://docs.mailcow.email/getstarted/prerequisite-dns/

Archer

esackbauer Do these settings need setup in the email server or privider?

esackbauer

Archer Do these settings need setup in the email server or privider?

As you are missing knowledge about basic topics for hosting servers and mail server in specific, you could probably find some mailcow installation videos on Youtube explaining a little more.

Hosting (and maintaining) mail servers is something quite complex, even if mailcow makes it looking easy.

DocFraggle

Normally it’s your domain registrar, they should provide a DNS config option.

Archer

I configurated autoconfig and autodiscover
4, 07:47:38 mail.signal-spb.ru - Confirmed A record 37.46.58.70
11.03.2024, 07:47:38 mail.signal-spb.ru - Found A record for mail.signal-spb.ru: 37.46.58.70
11.03.2024, 07:47:38 mail.signal-spb.ru - Confirmed A record 37.46.58.70
11.03.2024, 07:47:38 mail.signal-spb.ru - Found A record for autoconfig.signal-spb.ru: 37.46.58.70
11.03.2024, 07:47:38 mail.signal-spb.ru - Confirmed A record 37.46.58.70
11.03.2024, 07:47:38 mail.signal-spb.ru - Found A record for autodiscover.signal-spb.ru: 37.46.58.70
11.03.2024, 07:47:38 mail.signal-spb.ru - OK: 37.46.58.70, 0000:0000:0000:0000:0000:0000:0000:0000
11.03.2024, 07:47:14 mail.signal-spb.ru - Detecting IP addresses.

but the issue has remained.
Failed to obtain certificate /var/lib/acme/mail.signal-spb.ru/cert.pem for domains ‘mail.signal-spb.ru autoconfig.signal-spb.ru autodiscover.signal-spb.ru’

DocFraggle

Did you open the firewall? I can’t reach your server, on both port 80 and 443

Archer

DocFraggle Thank you so mach! It worked out)