Re: [webmin-l] letsencrypt... "duplicate" flag and "end" slash in path

On 29/Mar/2016 11:54 Marcos Rubinstein <[email protected]> wrote ..
> Hi Jamie:
> 
> why did you decide to use the "--duplicate" file for letsencrypt?
> 
> and... can I choose *not* to use it?
> 
> also...
> 
> for some reason... if in the apache configuration you don't use the /
> (slash) when defining the root directory of a virtual domain.... the webmin
> letsencrypt module (under webmin configuration/ssl) will give you an
> error!!!! (in other words.... if I have in the config something like
> "rootdir /something/virtualdomain instead of /something/virtualdomain/ , I
> will get an error saying that "/something/virtualdomain" does not
> exists.... that's when I use the option of "A different Apache virtual
> host" and choose that virtualhost... if, instead, I use "Other directory"
> and I include the final slash (/) on that... webmin is able to get the
> certificate). NOTA BENE: after "playing" with the "letsencrypt" CLI... I
> found out that letsencrypt does not "understand" the "old style"
> httpd.conf!... it only detect the last "Virtual Domain" defined in
> httpd.conf and in ssl.conf... even when Webmin can "see" all the Virtuals
> defined in those conf files!

That's odd, the code doesn't assume that the root directory ends with a /.
What's the exact error you are getting?

> BTW... the problem with "--duplicate"... is that. you end up with
> /etc/letsencrypt/live/mydomain-00n and
> /etc/letsencypt/archive/mydomain-00n.... while if you don't use the flag
> --duplicate... there is only one /etc/letsencrypt/live/mydomain and one
> /etc/letsencrypt/archive/mydomain... and in the last one you get cert1.pem,
> cert2.pem.... certN.pem and in the "live" area cert.pem is a symlink to
> "certN.pem" in the archive area... then, once you define your certificates
> in ssl.conf as /etc/letsencrypt/live/mydomain/cert.pem you don't need to do
> anything else but restart httpd to get the new certificate showing in the
> browsers!... Also... the first time that I used a letsencrypt certificate
> for webmin... I was able to do it on the "SSL Settings" tab (webmin
> cofiguration/ssl) by pointig the Private key file to
> /etc/letsencrypt/live/mymaindomain/privkey.pem and the Certificate File as
> a "Separate file" pointing to /etc/letsencript/live/mymaindomain/cert.pem.

This shouldn't be an issue though for Webmin, as it copies the output files
to it's own directory. Or do you have some other Apache config that is referring
to the files under /etc/letsencrypt directly?

> Thaks for all the work that you do with Webmin!!! (that I have been using
> since the last millennium ;) )
> 
> Peace, with Justice!
> Si, se puede!
> Marcos
> 
> "For what can war, but endless war, still breed?" (John Milton)



------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140
-
Forwarded by the Webmin mailing list at [email protected]
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list