(Dec 29) New version 0.9.8-18 has been released. More you can find here

Let's Encrypt - How to use Topic is solved

Questions regarding the Command Line Interface
CLI
Forum rules
Before creating a new topic or reply on the forum you should fill out additional fields "Os" and "Web" in your profile section.
In case of violation, the topic can be closed or response from the support will not be received.
Spheerys
Posts: 126
Joined: Tue Dec 29, 2015 12:36 pm

Os: Debian 8x
Web: apache + nginx

Re: Let's Encrypt - How to use

Postby Spheerys » Mon Aug 15, 2016 9:57 pm

OK I have found the solution. In fact my host for this server is Scaleway.com
It's using a strange system for NAT their servers, with private IP and public IP
Anyway... the v-add-letsencrypt-domain script doesn't detect this subtility and instead of set the Internal IP (as it should to make apache2 and nginx works), it set "ips" instead of internal IP

I did this for next cert :

Code: Select all

  find /home/*/conf/web/ -name "sapache2.conf" -exec sed -i 's/ips:/10.2.77.131:/g' {} \;
  service apache2 restart

  find /home/*/conf/web/ -name "snginx.conf" -exec sed -i 's/ips:/10.2.77.131:/g' {} \;
  service nginx restart

SS88
Posts: 306
Joined: Thu Nov 19, 2015 12:40 pm

Re: Let's Encrypt - How to use

Postby SS88 » Tue Aug 16, 2016 6:18 am

Code: Select all

ips

should be

Code: Select all

%ip%


But it's OK to not change it back if you will never use more than 1 IP address.

Spheerys wrote:OK I have found the solution. In fact my host for this server is Scaleway.com
It's using a strange system for NAT their servers, with private IP and public IP
Anyway... the v-add-letsencrypt-domain script doesn't detect this subtility and instead of set the Internal IP (as it should to make apache2 and nginx works), it set "ips" instead of internal IP

I did this for next cert :

Code: Select all

  find /home/*/conf/web/ -name "sapache2.conf" -exec sed -i 's/ips:/10.2.77.131:/g' {} \;
  service apache2 restart

  find /home/*/conf/web/ -name "snginx.conf" -exec sed -i 's/ips:/10.2.77.131:/g' {} \;
  service nginx restart

Spooney
Posts: 12
Joined: Sun May 25, 2014 4:58 am

Re: Let's Encrypt - How to use

Postby Spooney » Thu Oct 13, 2016 3:10 am

Thanks, the vim-common solution did not work, but the file edit line 44 'agreement=' etc. did work.
Much appreciated!

Spheerys
Posts: 126
Joined: Tue Dec 29, 2015 12:36 pm

Os: Debian 8x
Web: apache + nginx

Re: Let's Encrypt - How to use

Postby Spheerys » Fri Nov 25, 2016 6:52 pm

Very nice implementation of LE in VestaCP :)

One question : is the renew is automatically done by vesta or should we add a daily cron with "v-update-letsencrypt-ssl" ?

jamesk7
Posts: 4
Joined: Mon Nov 21, 2016 10:16 pm

Re: Let's Encrypt - How to use

Postby jamesk7 » Fri Nov 25, 2016 9:12 pm

I agree, a great implementation of Let's Encrypt!

I was running the previous version of vesta 0.9.8-16 and just upgradeded to the new version today 0.9.8-17. Previously I created Let's Encrypt ssl certs using

Code: Select all

v-add-letsencrypt-domain USER DOMAIN


I logged into vesta cp today and noticed there was a Let's Encrypt Support checkbox displayed for each website in the web panel. If I click it and save I get an error message.

I was wondering also how do I updated these certificates? especially as I created with v-add-letsencrypt-domain USER DOMAIN .

Great work Vesta!

skurudo
VestaCP Team
Posts: 7808
Joined: Fri Dec 26, 2014 2:23 pm
Contact:

Re: Let's Encrypt - How to use

Postby skurudo » Fri Nov 25, 2016 10:03 pm

jamesk7 wrote:I logged into vesta cp today and noticed there was a Let's Encrypt Support checkbox displayed for each website in the web panel. If I click it and save I get an error message.


I have some prob too with old certs, then I uncheck SSL Support box and enable SSL Support with Let'sEncrypt.
For new domains and certs there is no such problem.

jamesk7 wrote:I was wondering also how do I updated these certificates? especially as I created with v-add-letsencrypt-domain USER DOMAIN .


Cron?

Code: Select all

sudo /usr/local/vesta/bin/v-update-letsencrypt-ssl
-> DigitalOcean competition - please, support us
-> fix for phpmyadmin - nice and sweet now

skurudo
VestaCP Team
Posts: 7808
Joined: Fri Dec 26, 2014 2:23 pm
Contact:

Re: Let's Encrypt - How to use

Postby skurudo » Fri Nov 25, 2016 10:07 pm

Spheerys wrote:One question : is the renew is automatically done by vesta or should we add a daily cron with "v-update-letsencrypt-ssl" ?


In .17 version when you add domain with LE support from GUI, cron task will be added automaticly.
If you used CLI from .16 version, then I doubt about auto cron task.
-> DigitalOcean competition - please, support us
-> fix for phpmyadmin - nice and sweet now

Spheerys
Posts: 126
Joined: Tue Dec 29, 2015 12:36 pm

Os: Debian 8x
Web: apache + nginx

Re: Let's Encrypt - How to use

Postby Spheerys » Fri Nov 25, 2016 10:10 pm

OK it's clear :)
I'm using .17

jamesk7
Posts: 4
Joined: Mon Nov 21, 2016 10:16 pm

Re: Let's Encrypt - How to use

Postby jamesk7 » Fri Nov 25, 2016 10:16 pm

Cron?

Code: Select all

sudo /usr/local/vesta/bin/v-update-letsencrypt-ssl


Thanks! What would you suggest for the cron time?

mestresan
Posts: 31
Joined: Wed May 13, 2015 12:05 am

Re: Let's Encrypt - How to use

Postby mestresan » Sat Nov 26, 2016 12:31 am

trying create cert .17

sed: can't read /usr/local/vesta/data/queue/letsencrypt.pipe: No such file or directory


Return to “CLI”



Who is online

Users browsing this forum: No registered users and 1 guest