Page 1 of 1

vesta panel ssl (port 8083)

Posted: Tue Feb 14, 2017 3:31 pm
by zoxovsky
Hello how to add SSL to panel? When i paste panel link to google chrome it makes red https :/

Image

I have done it : viewtopic.php?t=7081

but not working, reboot vps not working. I use letsencrypt ssl to my main domain and its works

Image

i use nginx server

please help me:(

Re: vesta panel ssl (port 8083)

Posted: Tue Feb 14, 2017 4:59 pm
by Lone
Hey,

you have to do the following:

go to /usr/local/vesta/ssl/

Code: Select all

wget https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem 
And then add the following lines to your crontab (root user)

Code: Select all

@weekly cat /home/admin/conf/web/YOURDOMAIN.crt /usr/local/vesta/ssl/lets-encrypt-x3-cross-signed.pem > /usr/local/vesta/ssl/certificate.crt
@weekly cp /home/admin/conf/web/YOURDOMAIN.key /usr/local/vesta/ssl/certificate.key
@weekly /etc/init.d/vesta restart
@weekly /etc/init.d/dovecot restart
@weekly /etc/init.d/exim4 restart
@weekly /etc/init.d/vsftpd restart
At first (before it runs automatically) you have to perform all commands without the "@weekly"

Leon

//testet on Debian

Re: vesta panel ssl (port 8083)

Posted: Tue Feb 14, 2017 8:09 pm
by zoxovsky
Lone wrote:Hey,

you have to do the following:

go to /usr/local/vesta/ssl/

Code: Select all

wget https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem 
And then add the following lines to your crontab (root user)

Code: Select all

@weekly cat /home/admin/conf/web/YOURDOMAIN.crt /usr/local/vesta/ssl/lets-encrypt-x3-cross-signed.pem > /usr/local/vesta/ssl/certificate.crt
@weekly cp /home/admin/conf/web/YOURDOMAIN.key /usr/local/vesta/ssl/certificate.key
@weekly /etc/init.d/vesta restart
@weekly /etc/init.d/dovecot restart
@weekly /etc/init.d/exim4 restart
@weekly /etc/init.d/vsftpd restart
At first (before it runs automatically) you have to perform all commands without the "@weekly"

Leon

//testet on Debian
Ok, im gonna save these commands in notepad but i use this :

https://jdsteinbach.com/misc/letsencrypt-vesta/

Im 100% sure my DNS A is correct but i have these errors when want to create cert :

Code: Select all

Waiting for verification...
Cleaning up challenges
Failed authorization procedure. mydomain.pl (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authoriza                                       tion :: The key authorization file from the server did not match this challenge [kAyWZ-7e5hnN_HROEpxNhVYJJioZjWSeyRUqEEau6sI.                                       f3IzJT9s1wIF9s0fkIlsHDTyH0FqZEgdq20ENDTOsus] != [kAyWZ-7e5hnN_HROEpxNhVYJJioZjWSeyRUqEEau6sI.MegL8Bj_6To6yuj32Wy9gubgCuB1i_xR                                       AHywRCO7v0E]

IMPORTANT NOTES:
 - If you lose your account credentials, you can recover through
   e-mails sent to [email protected].
 - The following errors were reported by the server:

   Domain: mydomain.pl
   Type:   unauthorized
   Detail: The key authorization file from the server did not match
   this challenge
   [kAyWZ-7e5hnN_HROEpxNhVYJJioZjWSeyRUqEEau6sI.f3IzJT9s1wIF9s0fkIlsHDTyH0FqZEgdq20ENDTOsus]
   !=
   [kAyWZ-7e5hnN_HROEpxNhVYJJioZjWSeyRUqEEau6sI.MegL8Bj_6To6yuj32Wy9gubgCuB1i_xRAHywRCO7v0E]

   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A record(s) for that domain
   contain(s) the right IP address.

Re: vesta panel ssl (port 8083)

Posted: Tue Feb 14, 2017 8:33 pm
by zoxovsky
Ok i just reinstalled my vestacp panel to nginx+php-fpm what should i do now for installing LetsEncrypt?

Re: vesta panel ssl (port 8083)

Posted: Tue Feb 14, 2017 8:58 pm
by Lone
You only have to activate it on the "web" tab. Edit your domain and choose under the point SSL the letsencrypt support

Re: vesta panel ssl (port 8083)

Posted: Tue Feb 14, 2017 9:14 pm
by zoxovsky
Lone wrote:You only have to activate it on the "web" tab. Edit your domain and choose under the point SSL the letsencrypt support
Ye but i need to wait 7days cuz i have limit of create ssl xD so fucking bad.

Re: vesta panel ssl (port 8083)

Posted: Tue Feb 14, 2017 9:31 pm
by Lone
Oh thats bad... Feel free to write here in the forum or via pm if you need more help when the 7 days are over. :)

Re: vesta panel ssl (port 8083)

Posted: Tue Feb 14, 2017 10:27 pm
by zoxovsky
Lone wrote:Oh thats bad... Feel free to write here in the forum or via pm if you need more help when the 7 days are over. :)
Yeah i wanna write to you :D see you 21 feb. xD

Re: vesta panel ssl (port 8083)

Posted: Sat May 12, 2018 9:50 pm
by devesa
Lone wrote:
Tue Feb 14, 2017 4:59 pm
Hey,

you have to do the following:

go to /usr/local/vesta/ssl/

Code: Select all

wget https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem 
And then add the following lines to your crontab (root user)

Code: Select all

@weekly cat /home/admin/conf/web/YOURDOMAIN.crt /usr/local/vesta/ssl/lets-encrypt-x3-cross-signed.pem > /usr/local/vesta/ssl/certificate.crt
@weekly cp /home/admin/conf/web/YOURDOMAIN.key /usr/local/vesta/ssl/certificate.key
@weekly /etc/init.d/vesta restart
@weekly /etc/init.d/dovecot restart
@weekly /etc/init.d/exim4 restart
@weekly /etc/init.d/vsftpd restart
At first (before it runs automatically) you have to perform all commands without the "@weekly"

Leon

//testet on Debian
Thank you, it worked perfectly. (Ubuntu 16.04 64bit - Apache + Nginx)