System unusable after recieving a "Certificate error email"

[Roy Burke]

3CX Version - 16 update 8
Server OS-Debian 9
3CX is on Prem
Has the Firewall Checker passed: YES

Received an email from 3cx about "SSL Certificate Renewal Failed" with the body stating "Max Certificate Limit"

I was able to log into to the dashboard this morning, completed a backup and now the system cannot be reached via internal or external webgui.

From the customer portal i can see the instance with MULTIPLE errors of services not available. The ONLY service that IS running is the postgresql.

In the past, I would have burned down the system and restarted from scratch, which is potentially why I received the email to begin with.....

What can I do to bring the system back online?

 

[cobaltit]

So it sounds like you've run into other problems before this based off your description and the error message. Let's Encrypt has a limit on how many certificate requests can be made for a particular FQDN before it blocks them which you've hit. What were the other issues you were dealing with causing so many restores/reinstalls?

 

[VasilisV_3CX]

Hi @Roy Burke,

The error suggests that there are either multiple installation attempts of 3CX with the same FQDN or that the FQDN is used in more that one location and Let's Encrypt cannot issue any more certificates for this FQDN. Have you installed 3CX multiple times recently?

 

[Roy Burke]

Good morning,

Thanks for the response.

I have installed 3cx at least 4 times starting in December 2020. The last fully operational configuration was completed around March 20, 2021 about 90 days ago.

Many of the re-installs were do to inaccessibility, meaning I could not get in via either the CLI or the GUI (password issues), however NO changes have been made since mid March.

There was a complete backup done just before the system became unstable, however all the 3cx documents have the "restore" from the GUI, which is not working...

The phones are not registering and none of the services appear to be online (from the customer portal - instance manager). I do NOT want to do another reinstall...

Have I answered all the questions?

What should I try next?

 

[ChrisC_3CX]

@Roy Burke
I'll PM you shortly regarding this issue.