Page 2 of 2

Re: HTTPS on main site, but not port 8083

Posted: Tue Jan 03, 2017 10:28 am
by missionaryman
I have, however your solution appears to simply copy the letsencrypt SSL certs from one place to another daily, and change their permissions.

Is there no way of simply referring to the certificates in their original locations? Your way has the potential of a few hours black-out every time the letsencrypt certs are updated, but your cron job hasn't yet run.

Please understand I am not criticising your solution, only asking if there is a better way.

Re: HTTPS on main site, but not port 8083

Posted: Tue Jan 03, 2017 10:32 am
by ScIT
missionaryman wrote:I have, however your solution appears to simply copy the letsencrypt SSL certs from one place to another daily, and change their permissions.

Is there no way of simply referring to the certificates in their original locations? Your way has the potential of a few hours black-out every time the letsencrypt certs are updated, but your cron job hasn't yet run.

Please understand I am not criticising your solution, only asking if there is a better way.
please check the script again, you missed an if statement. it will compare the both certs daily and only copy and restart the services as soon as they where be changed:

Code: Select all

...
if ! cmp -s $cert_dst $cert_src
...
For me it was the nearly best solution, if you find something else, please post it also in my thread.

EDIT: You can also run the script every minute if you want. I dont think that cmp will use a lot of ressources.

Re: HTTPS on main site, but not port 8083

Posted: Wed Jan 04, 2017 1:52 am
by dpeca

Re: HTTPS on main site, but not port 8083

Posted: Sat Jan 07, 2017 8:12 pm
by Trentor
missionaryman wrote: so I renamed the old cert files and then created symlinks to point to the new ones:

ln -s /home/username/conf/web/ssl.website.crt /usr/local/vesta/ssl/certificate.crt
ln -s /home/username/conf/web/ssl.website.key /usr/local/vesta/ssl/certificate.key
Very useful.

Thanks @missionaryman !!!!!!

Re: HTTPS on main site, but not port 8083

Posted: Sun Jan 08, 2017 12:14 pm
by ScIT
Trentor wrote:
missionaryman wrote: so I renamed the old cert files and then created symlinks to point to the new ones:

ln -s /home/username/conf/web/ssl.website.crt /usr/local/vesta/ssl/certificate.crt
ln -s /home/username/conf/web/ssl.website.key /usr/local/vesta/ssl/certificate.key
Very useful.

Thanks @missionaryman !!!!!!
Don't use this way; it will produce a permission error. Better is viewtopic.php?p=55190 or viewtopic.php?f=19&t=12617. I like "my own" solution (first link) more than the other one (to big/complicated).

Re: HTTPS on main site, but not port 8083

Posted: Wed Jan 11, 2017 12:06 pm
by Trentor
ScIT wrote:
Trentor wrote:
missionaryman wrote: so I renamed the old cert files and then created symlinks to point to the new ones:

ln -s /home/username/conf/web/ssl.website.crt /usr/local/vesta/ssl/certificate.crt
ln -s /home/username/conf/web/ssl.website.key /usr/local/vesta/ssl/certificate.key
Very useful.

Thanks @missionaryman !!!!!!
Don't use this way; it will produce a permission error.
Hi @ScIT.

I'm now using the @missionaryman way with no problems.

Thx.

Re: HTTPS on main site, but not port 8083

Posted: Wed Jan 11, 2017 1:06 pm
by ScIT
Trentor wrote:
ScIT wrote:
Trentor wrote:
Very useful.

Thanks @missionaryman !!!!!!
Don't use this way; it will produce a permission error.
Hi @ScIT.

I'm now using the @missionaryman way with no problems.

Thx.
Check your exim4 mainlog, it will produce permission errors for the cert files in /usr/local/ssl. Permission have to be root:mail, also the certs will be wrong within the next 3 months because you've to renew them.

Re: HTTPS on main site, but not port 8083

Posted: Wed Jan 11, 2017 9:34 pm
by Trentor
ScIT wrote:Check your exim4 mainlog, it will produce permission errors for the cert files in /usr/local/ssl.
The main.log it's clean of errors:
SpoilerShow

Code: Select all

2017-01-09 03:38:08 1cQPqa-00040a-4V <= [email protected] U=root P=local S=466
2017-01-09 03:38:08 1cQPqa-00040a-4V => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [74.125.206.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1483929488 k40si7028101wrc.141 - gsmtp"
2017-01-09 03:38:08 1cQPqa-00040a-4V Completed
2017-01-09 04:21:09 Start queue run: pid=18219
2017-01-09 04:21:09 End queue run: pid=18219
2017-01-09 05:21:09 Start queue run: pid=22854
2017-01-09 05:21:09 End queue run: pid=22854
2017-01-09 06:21:09 Start queue run: pid=27137
2017-01-09 06:21:09 End queue run: pid=27137
2017-01-09 07:21:09 Start queue run: pid=31176
2017-01-09 07:21:09 End queue run: pid=31176
2017-01-09 08:21:09 Start queue run: pid=2724
2017-01-09 08:21:09 End queue run: pid=2724
2017-01-09 09:21:09 Start queue run: pid=6807
2017-01-09 09:21:09 End queue run: pid=6807
2017-01-09 10:21:09 Start queue run: pid=10887
2017-01-09 10:21:09 End queue run: pid=10887
2017-01-09 11:21:09 Start queue run: pid=14793
2017-01-09 11:21:09 End queue run: pid=14793
2017-01-09 12:21:09 Start queue run: pid=18977
2017-01-09 12:21:09 End queue run: pid=18977
2017-01-09 12:38:14 1cQYHG-0005DL-2F <= [email protected] U=root P=local S=619
2017-01-09 12:38:14 1cQYHG-0005DL-2F => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [66.102.1.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1483961894 a26si8025895wrd.196 - gsmtp"
2017-01-09 12:38:14 1cQYHG-0005DL-2F Completed
2017-01-09 12:38:58 1cQYHy-0005Fq-56 <= [email protected] U=root P=local S=627
2017-01-09 12:38:58 1cQYHy-0005Fq-56 => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [64.233.166.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1483961938 f13si9933880wmh.140 - gsmtp"
2017-01-09 12:38:58 1cQYHy-0005Fq-56 Completed
2017-01-09 13:21:09 Start queue run: pid=23233
2017-01-09 13:21:09 End queue run: pid=23233
2017-01-09 14:21:09 Start queue run: pid=28071
2017-01-09 14:21:09 End queue run: pid=28071
2017-01-09 15:21:09 Start queue run: pid=31909
2017-01-09 15:21:09 End queue run: pid=31909
2017-01-09 15:50:55 1cQbHj-0000UM-7d <= [email protected] U=nobody P=local S=576
2017-01-09 15:50:55 1cQbHj-0000UM-7d => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [64.233.167.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1483973455 z9si13115228wjf.168 - gsmtp"
2017-01-09 15:50:55 1cQbHj-0000UM-7d Completed
2017-01-09 16:21:09 Start queue run: pid=4218
2017-01-09 16:21:09 End queue run: pid=4218
2017-01-09 17:21:09 Start queue run: pid=8804
2017-01-09 17:21:09 End queue run: pid=8804
2017-01-09 18:21:09 Start queue run: pid=12863
2017-01-09 18:21:09 End queue run: pid=12863
2017-01-09 19:21:09 Start queue run: pid=17146
2017-01-09 19:21:09 End queue run: pid=17146
2017-01-09 19:29:33 1cQehJ-0004bS-Mp <= [email protected] U=nobody P=local S=697
2017-01-09 19:29:34 1cQehJ-0004bS-Mp => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [64.233.167.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1483986574 y124si10823360wme.83 - gsmtp"
2017-01-09 19:29:34 1cQehJ-0004bS-Mp Completed
2017-01-09 20:00:56 1cQfBg-0005Kj-92 <= [email protected] U=root P=local S=619
2017-01-09 20:01:27 1cQfBg-0005Kj-92 => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [64.233.167.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1483988486 64si8954269wri.323 - gsmtp"
2017-01-09 20:01:27 1cQfBg-0005Kj-92 Completed
2017-01-09 20:01:27 1cQfCA-0005Mc-NU <= [email protected] U=root P=local S=627
2017-01-09 20:01:27 1cQfCA-0005Mc-NU => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [173.194.69.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1483988487 g1si8943694wrc.134 - gsmtp"
2017-01-09 20:01:27 1cQfCA-0005Mc-NU Completed
2017-01-09 20:21:09 Start queue run: pid=22464
2017-01-09 20:21:09 End queue run: pid=22464
2017-01-09 21:21:09 Start queue run: pid=26504
2017-01-09 21:21:09 End queue run: pid=26504
2017-01-09 21:42:40 1cQgm8-0007FJ-1L <= [email protected] U=nobody P=local S=576
2017-01-09 21:42:40 1cQgm8-0007FJ-1L => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [64.233.167.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1483994560 ix4si17961212wjb.79 - gsmtp"
2017-01-09 21:42:40 1cQgm8-0007FJ-1L Completed
2017-01-09 22:02:46 1cQh5a-0007aG-J3 <= [email protected] U=nobody P=local S=687
2017-01-09 22:02:47 1cQh5a-0007aG-J3 => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [66.102.1.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1483995767 mp16si97580501wjb.279 - gsmtp"
2017-01-09 22:02:47 1cQh5a-0007aG-J3 Completed
2017-01-09 22:21:09 Start queue run: pid=30878
2017-01-09 22:21:09 End queue run: pid=30878
2017-01-09 23:21:09 Start queue run: pid=2524
2017-01-09 23:21:09 End queue run: pid=2524
2017-01-10 00:21:09 Start queue run: pid=6627
2017-01-10 00:21:09 End queue run: pid=6627
2017-01-10 01:21:09 Start queue run: pid=10495
2017-01-10 01:21:09 End queue run: pid=10495
2017-01-10 02:21:09 Start queue run: pid=14576
2017-01-10 02:21:09 End queue run: pid=14576
2017-01-10 03:00:02 1cQljG-0004Tc-TF <= [email protected] U=admin P=local S=860
2017-01-10 03:00:03 1cQljG-0004Tc-TF => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [74.125.206.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484013603 g48si131505wrg.164 - gsmtp"
2017-01-10 03:00:03 1cQljG-0004Tc-TF Completed
2017-01-10 03:21:09 Start queue run: pid=18663
2017-01-10 03:21:09 End queue run: pid=18663
2017-01-10 04:21:09 Start queue run: pid=22813
2017-01-10 04:21:09 End queue run: pid=22813
2017-01-10 05:21:09 Start queue run: pid=27332
2017-01-10 05:21:09 End queue run: pid=27332
2017-01-10 06:21:09 Start queue run: pid=32766
2017-01-10 06:21:09 End queue run: pid=32766
2017-01-10 07:21:09 Start queue run: pid=4465
2017-01-10 07:21:09 End queue run: pid=4465
2017-01-10 08:21:09 Start queue run: pid=8371
2017-01-10 08:21:09 End queue run: pid=8371
2017-01-10 09:21:09 Start queue run: pid=12666
2017-01-10 09:21:09 End queue run: pid=12666
2017-01-10 10:21:09 Start queue run: pid=16753
2017-01-10 10:21:09 End queue run: pid=16753
2017-01-10 11:21:09 Start queue run: pid=20932
2017-01-10 11:21:09 End queue run: pid=20932
2017-01-10 12:21:09 Start queue run: pid=24867
2017-01-10 12:21:09 End queue run: pid=24867
2017-01-10 12:43:35 1cQupy-0006sv-UX <= [email protected] U=root P=local S=620
2017-01-10 12:43:35 1cQupy-0006sv-UX => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [66.102.1.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484048615 4si1292404wrc.31 - gsmtp"
2017-01-10 12:43:35 1cQupy-0006sv-UX Completed
2017-01-10 12:45:29 1cQurp-0000LO-HM <= [email protected] U=root P=local S=628
2017-01-10 12:45:30 1cQurp-0000LO-HM => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [66.102.1.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484048729 d199si1704250wme.147 - gsmtp"
2017-01-10 12:45:30 1cQurp-0000LO-HM Completed
2017-01-10 13:21:09 Start queue run: pid=4369
2017-01-10 13:21:09 End queue run: pid=4369
2017-01-10 13:49:55 1cQvsB-0001jq-E0 <= [email protected] U=admin P=local S=724
2017-01-10 13:49:56 1cQvsB-0001jq-E0 => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [64.233.166.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484052596 gl1si1558511wjd.182 - gsmtp"
2017-01-10 13:49:56 1cQvsB-0001jq-E0 Completed
2017-01-10 13:51:02 1cQvtG-0001oy-DH <= [email protected] U=root P=local S=620
2017-01-10 13:51:02 1cQvtG-0001oy-DH => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [66.102.1.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484052662 pp1si1579981wjc.75 - gsmtp"
2017-01-10 13:51:02 1cQvtG-0001oy-DH Completed
2017-01-10 13:51:56 1cQvu7-0001sk-RR <= [email protected] U=admin P=local S=728
2017-01-10 13:51:56 1cQvu7-0001sk-RR => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [64.233.184.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484052716 qh9si1547531wjc.289 - gsmtp"
2017-01-10 13:51:56 1cQvu7-0001sk-RR Completed
2017-01-10 13:54:39 1cQvwl-0001uA-8F <= [email protected] U=admin P=local S=964 [email protected]
2017-01-10 13:54:39 1cQvwl-0001uA-8F => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [64.233.184.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484052879 jv4si1586502wjb.64 - gsmtp"
2017-01-10 13:54:39 1cQvwl-0001uA-8F Completed
2017-01-10 13:59:28 1cQw1Q-0001zH-Ef <= [email protected] U=admin P=local S=988 [email protected]
2017-01-10 13:59:28 1cQw1Q-0001zH-Ef => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [74.125.140.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484053168 u184si1847641wmb.168 - gsmtp"
2017-01-10 13:59:28 1cQw1Q-0001zH-Ef Completed
2017-01-10 14:21:09 Start queue run: pid=9985
2017-01-10 14:21:09 End queue run: pid=9985
2017-01-10 14:53:02 1cQwrG-0003DQ-Oz <= [email protected] U=root P=local S=628
2017-01-10 14:53:03 1cQwrG-0003DQ-Oz => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [74.125.71.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484056383 71si1534518wrk.328 - gsmtp"
2017-01-10 14:53:03 1cQwrG-0003DQ-Oz Completed
2017-01-10 15:21:09 Start queue run: pid=14559
2017-01-10 15:21:09 End queue run: pid=14559
2017-01-10 16:21:09 Start queue run: pid=19162
2017-01-10 16:21:09 End queue run: pid=19162
2017-01-10 17:21:09 Start queue run: pid=23912
2017-01-10 17:21:09 End queue run: pid=23912
2017-01-10 18:21:09 Start queue run: pid=28504
2017-01-10 18:21:09 End queue run: pid=28504
2017-01-10 19:21:09 Start queue run: pid=532
2017-01-10 19:21:09 End queue run: pid=532
2017-01-10 19:26:23 1cR17n-0000Hz-5C <= [email protected] U=nobody P=local S=576
2017-01-10 19:26:24 1cR17n-0000Hz-5C => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [64.233.167.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484072784 i8si2279756wjo.262 - gsmtp"
2017-01-10 19:26:24 1cR17n-0000Hz-5C Completed
2017-01-10 19:47:17 1cR1S1-0000j7-DK <= [email protected] U=nobody P=local S=689
2017-01-10 19:47:17 1cR1S1-0000j7-DK => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [74.125.133.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484074037 kq1si2329683wjb.196 - gsmtp"
2017-01-10 19:47:17 1cR1S1-0000j7-DK Completed
2017-01-10 20:13:56 1cR1ro-0001Mb-GV <= [email protected] U=admin P=local S=1538 [email protected]
2017-01-10 20:13:57 1cR1ro-0001Mb-GV => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [74.125.133.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484075637 cv4si2387062wjb.220 - gsmtp"
2017-01-10 20:13:57 1cR1ro-0001Mb-GV Completed
2017-01-10 20:14:28 1cR1sK-0001My-Ji <= [email protected] U=admin P=local S=1298 [email protected]
2017-01-10 20:14:29 1cR1sK-0001My-Ji => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [74.125.195.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484075669 e70si13759116wmc.129 - gsmtp"
2017-01-10 20:14:29 1cR1sK-0001My-Ji Completed
2017-01-10 20:16:17 1cR1u5-0001SC-3f <= [email protected] U=root P=local S=620
2017-01-10 20:16:17 1cR1u5-0001SC-3f => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [74.125.128.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484075777 67si13799248wmt.21 - gsmtp"
2017-01-10 20:16:17 1cR1u5-0001SC-3f Completed
2017-01-10 20:18:35 1cR1wJ-0001YX-Il <= [email protected] U=root P=local S=628
2017-01-10 20:18:36 1cR1wJ-0001YX-Il => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [64.233.184.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484075916 h196si2681528wmd.122 - gsmtp"
2017-01-10 20:18:36 1cR1wJ-0001YX-Il Completed
2017-01-10 20:21:09 Start queue run: pid=6264
2017-01-10 20:21:09 End queue run: pid=6264
2017-01-10 21:21:09 Start queue run: pid=11391
2017-01-10 21:21:09 End queue run: pid=11391
2017-01-10 22:21:09 Start queue run: pid=16207
2017-01-10 22:21:09 End queue run: pid=16207
2017-01-10 22:21:45 1cR3rV-0004Dm-1x <= [email protected] U=root P=local S=539
2017-01-10 22:21:45 1cR3rV-0004Dm-1x => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [64.233.167.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484083305 h2si2945100wme.149 - gsmtp"
2017-01-10 22:21:45 1cR3rV-0004Dm-1x Completed
2017-01-10 22:51:23 1cR4KB-000571-2e <= [email protected] U=root P=local S=539
2017-01-10 22:51:23 1cR4KB-000571-2e => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [74.125.133.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484085083 lm8si2717086wjb.234 - gsmtp"
2017-01-10 22:51:23 1cR4KB-000571-2e Completed
2017-01-10 22:51:40 1cR4KR-00057a-R9 <= [email protected] U=root P=local S=539
2017-01-10 22:51:40 1cR4KR-00057k-Rf <= [email protected] U=root P=local S=539
2017-01-10 22:51:40 1cR4KR-00057k-Rf => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [74.125.140.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484085100 189si3036422wmz.7 - gsmtp"
2017-01-10 22:51:40 1cR4KR-00057k-Rf Completed
2017-01-10 22:51:40 1cR4KR-00057a-R9 => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [66.102.1.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484085100 s131si6562293wmf.117 - gsmtp"
2017-01-10 22:51:40 1cR4KR-00057a-R9 Completed
2017-01-10 22:53:49 1cR4MX-0005Af-6i <= [email protected] U=root P=local S=620
2017-01-10 22:53:49 1cR4MX-0005Af-6i => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [74.125.133.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484085229 g10si2757880wjx.7 - gsmtp"
2017-01-10 22:53:49 1cR4MX-0005Af-6i Completed
2017-01-10 22:54:13 1cR4Mu-0005CA-VH <= [email protected] U=root P=local S=431
2017-01-10 22:55:02 exim 4.84_2 daemon started: pid=1006, -q1h, listening for SMTP on port 25 (IPv4) port 587 (IPv4) port 2525 (IPv4) and for SMTPS on port 465 (IPv4)
2017-01-10 22:55:02 Start queue run: pid=1009
2017-01-10 22:55:03 1cR4Mu-0005CA-VH == [email protected] R=dnslookup defer (-1): host lookup did not complete
2017-01-10 22:55:06 End queue run: pid=1009
2017-01-10 22:55:06 1cR4Nh-0000BJ-Hc <= [email protected] U=root P=local S=444
2017-01-10 22:55:07 1cR4Nl-0000IN-HW <= [email protected] U=admin P=local S=897
2017-01-10 22:55:10 1cR4Nh-0000BJ-Hc => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [74.125.140.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484085307 m139si3012970wmb.129 - gsmtp"
2017-01-10 22:55:10 1cR4Nl-0000IN-HW => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [66.102.1.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484085308 b19si2579397wrb.258 - gsmtp"
2017-01-10 22:55:11 1cR4Nh-0000BJ-Hc Completed
2017-01-10 22:55:11 1cR4Nl-0000IN-HW Completed
2017-01-10 22:58:01 1cR4Qb-0000Qm-4T <= [email protected] U=root P=local S=620
2017-01-10 22:58:01 1cR4Qb-0000Qm-4T => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [173.194.76.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484085481 o9si2578356wrc.319 - gsmtp"
2017-01-10 22:58:01 1cR4Qb-0000Qm-4T Completed
2017-01-10 23:03:57 1cR4WL-0000Wg-2h <= [email protected] U=root P=local S=628
2017-01-10 23:03:57 1cR4WL-0000Wg-2h => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [64.233.184.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484085837 t6si2616464wrb.43 - gsmtp"
2017-01-10 23:03:57 1cR4WL-0000Wg-2h Completed
2017-01-10 23:55:02 Start queue run: pid=6209
2017-01-10 23:55:03 1cR4Mu-0005CA-VH => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [64.233.184.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484088903 rv12si2833437wjb.256 - gsmtp"
2017-01-10 23:55:03 1cR4Mu-0005CA-VH Completed
2017-01-10 23:55:03 End queue run: pid=6209
2017-01-11 00:55:02 Start queue run: pid=11516
2017-01-11 00:55:02 End queue run: pid=11516
2017-01-11 01:55:02 Start queue run: pid=16140
2017-01-11 01:55:02 End queue run: pid=16140
2017-01-11 02:55:02 Start queue run: pid=20527
2017-01-11 02:55:02 End queue run: pid=20527
2017-01-11 03:00:03 1cR8Co-0005TV-TI <= [email protected] U=admin P=local S=860
2017-01-11 03:00:03 1cR8Co-0005TV-TI => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [74.125.206.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484100003 ue16si3174189wjb.138 - gsmtp"
2017-01-11 03:00:03 1cR8Co-0005TV-TI Completed
2017-01-11 03:55:02 Start queue run: pid=25222
2017-01-11 03:55:02 End queue run: pid=25222
2017-01-11 04:55:02 Start queue run: pid=30342
2017-01-11 04:55:02 End queue run: pid=30342
2017-01-11 05:55:02 Start queue run: pid=2945
2017-01-11 05:55:02 End queue run: pid=2945
2017-01-11 06:55:02 Start queue run: pid=7269
2017-01-11 06:55:02 End queue run: pid=7269
2017-01-11 07:55:02 Start queue run: pid=12006
2017-01-11 07:55:02 End queue run: pid=12006
2017-01-11 08:55:02 Start queue run: pid=16646
2017-01-11 08:55:02 End queue run: pid=16646
2017-01-11 09:55:02 Start queue run: pid=21084
2017-01-11 09:55:02 End queue run: pid=21084
2017-01-11 10:55:02 Start queue run: pid=25583
2017-01-11 10:55:02 End queue run: pid=25583
2017-01-11 11:55:02 Start queue run: pid=30335
2017-01-11 11:55:02 End queue run: pid=30335
2017-01-11 12:55:02 Start queue run: pid=3944
2017-01-11 12:55:02 End queue run: pid=3944
2017-01-11 12:58:52 1cRHYK-00016j-8K <= [email protected] U=root P=local S=620
2017-01-11 12:58:53 1cRHYK-00016j-8K => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [74.125.195.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484135933 p53si4228376wrc.200 - gsmtp"
2017-01-11 12:58:53 1cRHYK-00016j-8K Completed
2017-01-11 12:59:30 1cRHYw-0001AC-JE <= [email protected] U=root P=local S=628
2017-01-11 12:59:31 1cRHYw-0001AC-JE => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [74.125.195.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484135971 197si7948432wmk.17 - gsmtp"
2017-01-11 12:59:31 1cRHYw-0001AC-JE Completed
2017-01-11 13:55:02 Start queue run: pid=9017
2017-01-11 13:55:02 End queue run: pid=9017
2017-01-11 14:55:02 Start queue run: pid=13673
2017-01-11 14:55:02 End queue run: pid=13673
2017-01-11 15:55:02 Start queue run: pid=18353
2017-01-11 15:55:02 End queue run: pid=18353
2017-01-11 16:55:02 Start queue run: pid=22996
2017-01-11 16:55:02 End queue run: pid=22996
2017-01-11 17:55:02 Start queue run: pid=27574
2017-01-11 17:55:02 End queue run: pid=27574
2017-01-11 18:55:02 Start queue run: pid=32546
2017-01-11 18:55:02 End queue run: pid=32546
2017-01-11 19:55:02 Start queue run: pid=4996
2017-01-11 19:55:02 End queue run: pid=4996
2017-01-11 20:55:02 Start queue run: pid=9444
2017-01-11 20:55:02 End queue run: pid=9444
2017-01-11 21:25:49 1cRPSv-00039w-1K <= [email protected] U=admin P=local S=971 [email protected]
2017-01-11 21:25:49 1cRPSv-00039w-1K => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [74.125.195.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484166349 lm8si5403928wjb.234 - gsmtp"
2017-01-11 21:25:49 1cRPSv-00039w-1K Completed
2017-01-11 21:52:41 1cRPsv-0003hV-K3 <= [email protected] U=root P=local S=620
2017-01-11 21:52:42 1cRPsv-0003hV-K3 => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [74.125.140.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484167962 cv5si5468232wjc.141 - gsmtp"
2017-01-11 21:52:42 1cRPsv-0003hV-K3 Completed
2017-01-11 21:54:32 1cRPui-0003iV-AW <= [email protected] U=root P=local S=628
2017-01-11 21:54:32 1cRPui-0003iV-AW => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [64.233.184.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484168072 d28si8841638wma.147 - gsmtp"
2017-01-11 21:54:32 1cRPui-0003iV-AW Completed
2017-01-11 21:55:02 Start queue run: pid=14413
2017-01-11 21:55:02 End queue run: pid=14413
2017-01-11 22:22:28 1cRQLk-0004Jc-Lk <= [email protected] U=root P=local S=539
2017-01-11 22:22:29 1cRQLk-0004Jc-Lk => [email protected] R=dnslookup T=remote_smtp H=ASPMX.L.GOOGLE.com [74.125.195.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 C="250 2.0.0 OK 1484169749 d23si5388356wrb.98 - gsmtp"
2017-01-11 22:22:29 1cRQLk-0004Jc-Lk Completed
2017-01-11 22:23:14 1cRQMU-0004KX-8A <= [email protected] U=root P=local S=539
also the certs will be wrong within the next 3 months because you've to renew them.
But, I just did a symlink to:

Code: Select all

/home/user/conf/web/ssl.domain.tld.crt /usr/local/vesta/ssl/certificate.crt
and

Code: Select all

/home/user/conf/web/ssl.domain.tld.key /usr/local/vesta/ssl/certificate.key
After the renewal, the location and filenames will be the same. And, I think, this way will work properly.

Thanks ScIT!!

Re: HTTPS on main site, but not port 8083

Posted: Thu Jan 12, 2017 7:44 am
by ScIT
Ok, sorry, cert renew will of course not be a problem (there were now multiple threads, someone copy the certs, someone use symlink) :-).

Do you restarted your exim4 service after symlinking the certs? Can you share your system informations? Just want to be shure, because I had troubles because the wrong permission, that's why I wrote the tutorial.