We are happy to announce that Vesta is back under active development as of 25 February 2024. We are working on v1 candidate and expect to engage more with the community over the coming months. We are committed to open source, and we encourage contributors to help us build the future of Vesta.
When will VestaCP really support Let's Encrypt and SSL OCSP stapling?
-
- Posts: 301
- Joined: Tue Dec 22, 2015 2:06 pm
When will VestaCP really support Let's Encrypt and SSL OCSP stapling?
I noticed in the "SSL Support" section of latest VestaCP GUI, the "Let's Encrypt Support" option actually can NOT work at all.
Could you please improve VestaCP to really support Let's Encrypt and SSL OCSP stapling?
If you also add a new option of "enable HTTP/2" in "SSL Support" section, that will be better.
Thank you.
Could you please improve VestaCP to really support Let's Encrypt and SSL OCSP stapling?
If you also add a new option of "enable HTTP/2" in "SSL Support" section, that will be better.
Thank you.
Re: When will VestaCP really support Let's Encrypt and SSL OCSP stapling?
It does letsencrypt fine for me, as for SSL OCSP stapling, you can probably do it yourself:
sed -i -e "s/%ssl_key%;/%ssl_key% ;\n\tssl_trusted_certificate %ssl_crt%;\n\tssl_stapling on;\n\tssl_stapling_verify on;\n/g" /usr/local/vesta/data/templates/web/nginx/*.stpl
sed -i -e "s/%ssl_key%;/%ssl_key% ;\n\tssl_trusted_certificate %ssl_crt%;\n\tssl_stapling on;\n\tssl_stapling_verify on;\n/g" /usr/local/vesta/data/templates/web/nginx/php-fpm/*.stpl
Outside if this, if you want to customize your own conf and have it be saved, you have the following options:
1) Add file to /etc/nginx/conf.d/yourcustom.conf for global changes
2) For per user config, add two files (if ssl):
/home/user/conf/web/nginx.your-domain.com.conf_custom
/home/user/conf/web/snginx.your-domain.com.conf_custom
sed -i -e "s/%ssl_key%;/%ssl_key% ;\n\tssl_trusted_certificate %ssl_crt%;\n\tssl_stapling on;\n\tssl_stapling_verify on;\n/g" /usr/local/vesta/data/templates/web/nginx/*.stpl
sed -i -e "s/%ssl_key%;/%ssl_key% ;\n\tssl_trusted_certificate %ssl_crt%;\n\tssl_stapling on;\n\tssl_stapling_verify on;\n/g" /usr/local/vesta/data/templates/web/nginx/php-fpm/*.stpl
Outside if this, if you want to customize your own conf and have it be saved, you have the following options:
1) Add file to /etc/nginx/conf.d/yourcustom.conf for global changes
2) For per user config, add two files (if ssl):
/home/user/conf/web/nginx.your-domain.com.conf_custom
/home/user/conf/web/snginx.your-domain.com.conf_custom
-
- Posts: 301
- Joined: Tue Dec 22, 2015 2:06 pm
Re: When will VestaCP really support Let's Encrypt and SSL OCSP stapling?
Well, finally I solved this issue by using the "letsencrypt-vesta" script from https://github.com/interbrite/letsencrypt-vesta .
I think this script is more easier than the SSL GUI of VestaCP.
I think this script is more easier than the SSL GUI of VestaCP.