Letsencrypt for CP panel and wordpress site

soares · Post by **soares** » Sat Apr 15, 2017 1:46 pm

I've seen this here : viewtopic.php?f=25&t=13259 and i've activated for both my website and the panel itself. Do i need to do something in order for it to activate the SSL when i access myvestaip:8083 and my website? For my website i was trying to use wordpress plugin "Really Simple SSL" that would detect when a certificate is active. The vestapanel already shows the certificates but i have no idea what to do next :/ Any help?

Edit : I guess i was too early to post in here lol. The ssl for the site is now on. I guess it only took a couple of minutes or so. Now when I access the CP itself it still shows the https error saying the connection is untrusted. Do i need to edit any files?

SS88 · Post by **SS88** » Mon Apr 17, 2017 9:11 pm

VestaCP Panel is slightly different.

Have you generated an SSL certificate for the hostname?

If yes and the hostname is server.hostname.com then:

Code: Select all

rm -f /usr/local/vesta/ssl/certificate.*
ln -s /home/admin/conf/web/ssl.server.hostname.com.pem /usr/local/vesta/ssl/certificate.crt
ln -s /home/admin/conf/web/ssl.server.hostname.com.key /usr/local/vesta/ssl/certificate.key
chown root:mail /usr/local/vesta/ssl/certificate.*

However when the SSL Certificate is regenerated your emails will not work correctly so I have had to set-up another cronjob that modified the permissions like so:

Code: Select all

chown root:mail /home/admin/conf/web/ssl.*

I made this run 10 minutes after Vesta regenerates the SSL.

viraladmin · Post by **viraladmin** » Thu Apr 27, 2017 7:56 pm

I am trying to do exactly this, followed instructions ver batum.

All seems to have went well.....

However after doing this I still get (I waited about 15 minutes):

I made this run 10 minutes after Vesta regenerates the SSL.

How often does vesta regenerate the SSL? Should I be looking to set this every 3 months? or what exactly are the crontab settings?

SS88 · Post by **SS88** » Thu Apr 27, 2017 10:45 pm

viraladmin wrote:I am trying to do exactly this, followed instructions ver batum.

All seems to have went well.....

However after doing this I still get (I waited about 15 minutes):

I made this run 10 minutes after Vesta regenerates the SSL.
How often does vesta regenerate the SSL? Should I be looking to set this every 3 months? or what exactly are the crontab settings?

If you followed my instructions don't forgot to reboot Vesta

viraladmin · Post by **viraladmin** » Fri Apr 28, 2017 2:12 am

Thank you that was very helpful - still not sure about the crontab though :)

SS88 · Post by **SS88** » Fri Apr 28, 2017 11:37 am

viraladmin wrote:Thank you that was very helpful - still not sure about the crontab though :)

Vesta handles all SSL renewals by itself. There should be a cron under admin like this (your server will have a different date/time to execute it):

Code: Select all

sudo /usr/local/vesta/bin/v-update-sys-queue letsencrypt

I added this to /etc/crontab:

Code: Select all

15 6 * * * root chown root:mail /usr/local/vesta/ssl/certificate.*

But I changed the Hour / Day / Month / Day Of Week to match that +10 mins what it said in VestaCP.

Vesta Control Panel - Forum