Topic: Letsencrypt panel is looking great!

[Knuddi]

You are right, have just been out of the SME world for a while - thank you for the hard work!!

Bug created: https://bugs.koozali.org/show_bug.cgi?id=13109

Will utilize the beta for mail only and test very carefully, likely to also bring some functionality from many year within a mail filtering company into play.

[ReetP]

 

Thanks.

[compdoc]

Hope this helps others to get Letsencrypt working on Beta. I used this bug report to get the clues I needed:

https://bugs.koozali.org/show_bug.cgi?id=10920

Once Beta is installed and updated, use smanager's Letsencrypt Certificate panel to set the Config:

Service Status  Enabled
Hookscript Status  Enabled
Hostoverride Status  Disabled
Accept Terms Status  Yes
API Status  2
Keysize Status  2048
Configure mode Status  NONE
Email  postmaster@domain.com


When you modify modSSL with the cert locations as shown below, it causes the changes to be automatically written to /etc/httpd/conf/httpd.conf whenever dehydrated is run. This allows httpd to find and use the cert.
Im only enabling one hostname to receive a cert. Be sure to point your firewall to the host...


Enter the folowing commands in a terminal window:

mkdir -p /var/www/html/.well-known/acme-challenge
chown www:www -R /var/www/html/.well-known

db hosts show
db hosts setprop tester.domain.com letsencryptSSLcert enabled

config show modSSL
config setprop modSSL CertificateChainFile "/etc/dehydrated/certs/tester.domain.com/cert.pem"
config setprop modSSL key "/etc/dehydrated/certs/tester.domain.com/privkey.pem"
config setprop modSSL crt "/etc/dehydrated/certs/tester.domain.com/cert.pem"
 
nano /etc/e-smith/templates/etc/dehydrated/config/45Algorithm
(uncomment the last line to enable RSA)
KEY_ALGO=rsa

signal-event letsencrypt-config
dehydrated -c

[TerryF]

Hope this helps others to get Letsencrypt working on Beta. I used this bug report to get the clues I needed:

You just showed why we want people pushing the beta as far as they can, many hands make .....