Koozali.org: home of the SME Server
Obsolete Releases => SME 9.x Contribs => Topic started by: warren on March 13, 2016, 08:54:23 PM
-
Can anyone clarify the portion of the wiki page https://wiki.contribs.org/Letsencrypt#Installation_of_Official_Client (https://wiki.contribs.org/Letsencrypt#Installation_of_Official_Client)
You should see something very similar to this:
lrwxrwxrwx 1 root root 43 Dec 16 17:08 cert.pem -> ../../archive/test.firstdomain.co.uk/cert1.pem
lrwxrwxrwx 1 root root 44 Dec 16 17:08 chain.pem -> ../../archive/test.firstdomain.co.uk/chain1.pem
lrwxrwxrwx 1 root root 48 Dec 16 17:08 fullchain.pem -> ../../archive/test.firstdomain.co.uk/fullchain1.pem
lrwxrwxrwx 1 root root 46 Dec 16 17:08 privkey.pem -> ../../archive/test.firstdomain.co.uk/privkey1.pem
The above example shows a file named " fullchain.pem".
And below the corresponding config setprop values.
If you do not see these files, stop. Troubleshoot the problem before proceeding. If you continue, you will break your web server any anything else that depends on SSL. If you do see these files, go ahead and configure SME with the certificates generated:
config setprop modSSL crt /etc/letsencrypt/live/test.firstdomain.co.uk/cert.pem
config setprop modSSL key /etc/letsencrypt/live/test.firstdomain.co.uk/privkey.pem
config setprop modSSL CertificateChainFile /etc/letsencrypt/live/test.firstdomain.co.uk/chain.pem
signal-event domain-modify; signal-event email-update; signal-event ibay-modify
Question , is what / where does the fullchain.pem file value fit into the config setprop modSSL .... ?
-
Warren, I believe Dan B. has 'ownership' of the contents of that page. He should be able to assist.
-
Question , is what / where does the fullchain.pem file value fit into the config setprop modSSL .... ?
It doesn't. It's created by the Let's Encrypt client, and it's needed for some other server software (e.g., nginx or Apache 2.4), but it isn't used with SME Server.
-
Thanks Dan B for the clarity