Page 1 of 1

Letsencrypt for CP panel and wordpress site

Posted: Sat Apr 15, 2017 1:46 pm
by soares
I've seen this here : viewtopic.php?f=25&t=13259 and i've activated for both my website and the panel itself. Do i need to do something in order for it to activate the SSL when i access myvestaip:8083 and my website? For my website i was trying to use wordpress plugin "Really Simple SSL" that would detect when a certificate is active. The vestapanel already shows the certificates but i have no idea what to do next :/ Any help?

Edit : I guess i was too early to post in here lol. The ssl for the site is now on. I guess it only took a couple of minutes or so. Now when I access the CP itself it still shows the https error saying the connection is untrusted. Do i need to edit any files?

Re: Letsencrypt for CP panel and wordpress site

Posted: Mon Apr 17, 2017 9:11 pm
by SS88
VestaCP Panel is slightly different.

Have you generated an SSL certificate for the hostname?

If yes and the hostname is server.hostname.com then:

Code: Select all

rm -f /usr/local/vesta/ssl/certificate.*
ln -s /home/admin/conf/web/ssl.server.hostname.com.pem /usr/local/vesta/ssl/certificate.crt
ln -s /home/admin/conf/web/ssl.server.hostname.com.key /usr/local/vesta/ssl/certificate.key
chown root:mail /usr/local/vesta/ssl/certificate.*
However when the SSL Certificate is regenerated your emails will not work correctly so I have had to set-up another cronjob that modified the permissions like so:

Code: Select all

chown root:mail /home/admin/conf/web/ssl.*
I made this run 10 minutes after Vesta regenerates the SSL.

Re: Letsencrypt for CP panel and wordpress site

Posted: Thu Apr 27, 2017 7:56 pm
by viraladmin
I am trying to do exactly this, followed instructions ver batum.

All seems to have went well.....

Image

However after doing this I still get (I waited about 15 minutes):

Image
I made this run 10 minutes after Vesta regenerates the SSL.
How often does vesta regenerate the SSL? Should I be looking to set this every 3 months? or what exactly are the crontab settings?

Re: Letsencrypt for CP panel and wordpress site

Posted: Thu Apr 27, 2017 10:45 pm
by SS88
viraladmin wrote:I am trying to do exactly this, followed instructions ver batum.

All seems to have went well.....

Image

However after doing this I still get (I waited about 15 minutes):

Image
I made this run 10 minutes after Vesta regenerates the SSL.
How often does vesta regenerate the SSL? Should I be looking to set this every 3 months? or what exactly are the crontab settings?
If you followed my instructions don't forgot to reboot Vesta

Re: Letsencrypt for CP panel and wordpress site

Posted: Fri Apr 28, 2017 2:12 am
by viraladmin
Thank you that was very helpful - still not sure about the crontab though :)

Re: Letsencrypt for CP panel and wordpress site

Posted: Fri Apr 28, 2017 11:37 am
by SS88
viraladmin wrote:Thank you that was very helpful - still not sure about the crontab though :)
Vesta handles all SSL renewals by itself. There should be a cron under admin like this (your server will have a different date/time to execute it):

Code: Select all

sudo /usr/local/vesta/bin/v-update-sys-queue letsencrypt
I added this to /etc/crontab:

Code: Select all

15 6 * * * root chown root:mail /usr/local/vesta/ssl/certificate.*
But I changed the Hour / Day / Month / Day Of Week to match that +10 mins what it said in VestaCP.