Koozali.org: home of the SME Server

[Solved]Letsencrypt wiki page clarification

Offline warren

  • *
  • 293
  • +0/-0
[Solved]Letsencrypt wiki page clarification
« on: March 13, 2016, 08:54:23 PM »
Can anyone clarify  the portion of the wiki page https://wiki.contribs.org/Letsencrypt#Installation_of_Official_Client 

Quote
You should see something very similar to this:

lrwxrwxrwx 1 root root 43 Dec 16 17:08 cert.pem -> ../../archive/test.firstdomain.co.uk/cert1.pem
lrwxrwxrwx 1 root root 44 Dec 16 17:08 chain.pem -> ../../archive/test.firstdomain.co.uk/chain1.pem
lrwxrwxrwx 1 root root 48 Dec 16 17:08 fullchain.pem -> ../../archive/test.firstdomain.co.uk/fullchain1.pem
lrwxrwxrwx 1 root root 46 Dec 16 17:08 privkey.pem -> ../../archive/test.firstdomain.co.uk/privkey1.pem

The above example shows a file named " fullchain.pem".

And below the corresponding config setprop values.

Quote
If you do not see these files, stop. Troubleshoot the problem before proceeding. If you continue, you will break your web server any anything else that depends on SSL. If you do see these files, go ahead and configure SME with the certificates generated:

config setprop modSSL crt /etc/letsencrypt/live/test.firstdomain.co.uk/cert.pem
config setprop modSSL key /etc/letsencrypt/live/test.firstdomain.co.uk/privkey.pem
config setprop modSSL CertificateChainFile /etc/letsencrypt/live/test.firstdomain.co.uk/chain.pem
signal-event domain-modify; signal-event email-update; signal-event ibay-modify

Question , is what / where does the fullchain.pem file value fit into the config setprop modSSL .... ?
« Last Edit: March 14, 2016, 04:00:40 PM by warren »

guest22

Re: Letsencrypt wiki page clarification
« Reply #1 on: March 13, 2016, 10:22:38 PM »
Warren, I believe Dan B. has 'ownership' of the contents of that page. He should be able to assist.

Offline DanB35

  • ****
  • 764
  • +0/-0
    • http://www.familybrown.org
Re: Letsencrypt wiki page clarification
« Reply #2 on: March 14, 2016, 01:30:34 PM »
Question , is what / where does the fullchain.pem file value fit into the config setprop modSSL .... ?
It doesn't.  It's created by the Let's Encrypt client, and it's needed for some other server software (e.g., nginx or Apache 2.4), but it isn't used with SME Server.
......

Offline warren

  • *
  • 293
  • +0/-0
Re: Letsencrypt wiki page clarification
« Reply #3 on: March 14, 2016, 01:35:55 PM »
Thanks Dan B for the clarity