1,574
edits
Changes
Jump to navigation
Jump to search
mLine 114:
Line 114: − for the test ('''adjust the domains and hosts'''):+ + + Line 135:
Line 137: − for the production ('''adjust your email'''):+ − + Line 189:
Line 191: − + Line 253:
Line 255: − + Line 263:
Line 265: − +
Add correct wiki page for Note re fail on All
=== Rush jobs ===
=== Rush jobs ===
For the test ('''adjust the domains and hosts'''):
<tabs container style="display: inline-block;"><tab name="For SME 10">
<tabs container style="display: inline-block;"><tab name="For SME 10">
config setprop letsencrypt ACCEPT_TERMS yes status test
config setprop letsencrypt ACCEPT_TERMS yes status test
# really fast job to enable the primary domain
db domains setprop $(config get DomainName) letsencryptSSLcert enabled
#foreach of your domains you want SSL do the following
#foreach of your domains you want SSL do the following
db domains setprop '''domain1.com''' letsencryptSSLcert enabled
db domains setprop '''domain1.com''' letsencryptSSLcert enabled
Check that the certificates are available ( your browser will still issue an error, but you can explore the content of the certificate to see that the Let's Encrypt test CA was used to sign your SSL certificate and that all your domains and hosts are in the "Certificate Subject Alt Name" property.
Check that the certificates are available ( your browser will still issue an error, but you can explore the content of the certificate to see that the Let's Encrypt test CA was used to sign your SSL certificate and that all your domains and hosts are in the "Certificate Subject Alt Name" property.
For the production ('''adjust your email'''):
<tabs container style="display: inline-block;"><tab name="For SME 10">
<tabs container style="display: inline-block;"><tab name="For SME 10">
config setprop letsencrypt status enabled email '''admin@domain1.com'''
config setprop letsencrypt status enabled email admin@$(config get DomainName)
signal-event smeserver-letsencrypt-update
signal-event smeserver-letsencrypt-update
dehydrated -c -x
dehydrated -c -x
With the system configuration described above, setting this to "domains" will obtain a certificate covering domain1.com and domain2.com, but not www.domain1.com, etc. Setting it to "hosts" will obtain a certificate covering www.domain1.com, mail.domain1.com, ftp.domain1.com, etc., but not domain1.com or domain2.com. Setting this property to "all" will include all domain names and hostnames in the certificate. '''see [[Letsencrypt#Some_challenges_complete_successfully_but_some_hostnames_fail|NOTE]] before setting this to "all"'''
With the system configuration described above, setting this to "domains" will obtain a certificate covering domain1.com and domain2.com, but not www.domain1.com, etc. Setting it to "hosts" will obtain a certificate covering www.domain1.com, mail.domain1.com, ftp.domain1.com, etc., but not domain1.com or domain2.com. Setting this property to "all" will include all domain names and hostnames in the certificate. '''See [[Letsencrypt/Troubleshooting#Some_challenges_complete_successfully_but_some_hostnames_fail|NOTE]] before setting this to "all".'''
==== Enable test mode ====
==== Enable test mode ====
|
|
|email
|email
|enter the email to create account and recieve updates from Let's Encrypt
|enter the email to create account and receive updates from Let's Encrypt
|-
|-
|hookScript
|hookScript
|disabled
|disabled
|yes,disabled
|yes,disabled
|default disabled, if disabled will only ask cert for hosts (if selected accodring to configure and "letsencryptSSLcert enabled") for hosts with type=Self. If set to yes will include any listed hosts wether remote or local.
|default disabled, if disabled will only ask cert for hosts (if selected according to configure and "letsencryptSSLcert enabled") for hosts with type=Self. If set to yes will include any listed hosts whether remote or local.
|-
|-
|keysize
|keysize