Koozali.org: home of the SME Server

letsencrypt success

Offline ElFroggio

  • *
  • 262
  • +0/-0
letsencrypt success
« on: December 27, 2016, 05:34:08 PM »
Hi,

Just wanted to let people know about my adventure to https

I already had a 3 years rapidSSL certificate (that will expire in a year) for the main domain, but I wanted some other domains as well.

I used: https://wiki.contribs.org/Letsencrypt almost successfully.

  • Most important: do the Prerequisite and the backup of your settings. I had to restore a few times
  • Followed the installation and that went mostly well except for the config and the staging
  • If you are doing the staging, your will need to run dehydrated with "dehydrated -c -x" for the 'real certificates' and not "dehydrated -c". (thanks to DanB35). The doc should reflect that
  • The next problem, for me, was letsencrypt website for issuing the real certificates have been down every evening (when I was doing it). I had to redo it in the morning.
  • The SSLlabs testing website was excellent at sorting the problems and testing everything: https://www.ssllabs.com/ssltest/
  • On the website, I had to change all references from http:// to https:// including the .htaccess and the robots.txt
  • On the website, I had to change all references the jquery/google from http:// to https://
  • On the website, I had to change all references the bootstrap from http:// to https://

It took me 5 days, mostly because of the evening down times of letsencrypt (it could be related to xmas).

Now it looks like everything's working fine.

Thanks to everybody and the sme team.

/Syv