Koozali.org: home of the SME Server

Obsolete Releases => SME 9.x Contribs => Topic started by: ElFroggio on December 27, 2016, 05:34:08 PM

Title: letsencrypt success
Post by: ElFroggio on December 27, 2016, 05:34:08 PM

Hi,

Just wanted to let people know about my adventure to https

I already had a 3 years rapidSSL certificate (that will expire in a year) for the main domain, but I wanted some other domains as well.

I used: https://wiki.contribs.org/Letsencrypt (https://wiki.contribs.org/Letsencrypt) almost successfully.

• Most important: do the Prerequisite and the backup of your settings. I had to restore a few times
• Followed the installation and that went mostly well except for the config and the staging
• If you are doing the staging, your will need to run dehydrated with "dehydrated -c -x" for the 'real certificates' and not "dehydrated -c". (thanks to DanB35). The doc should reflect that
• The next problem, for me, was letsencrypt website for issuing the real certificates have been down every evening (when I was doing it). I had to redo it in the morning.
• The SSLlabs testing website was excellent at sorting the problems and testing everything: https://www.ssllabs.com/ssltest/ (https://www.ssllabs.com/ssltest/)
• On the website, I had to change all references from http:// to https:// including the .htaccess and the robots.txt
• On the website, I had to change all references the jquery/google from http:// to https://
• On the website, I had to change all references the bootstrap from http:// to https://

It took me 5 days, mostly because of the evening down times of letsencrypt (it could be related to xmas).

Now it looks like everything's working fine.

Thanks to everybody and the sme team.

/Syv