Re: [webmin-l] webmin and letsencrypt without webserver?
"Jamie Cameron" <[email protected]>
| Newsgroups | gmane.comp.web.webmin.general |
|---|---|
| Message-ID | <[email protected]> |
Yes, that is correct. On 22/Feb/2017 01:29 Pat Erler <[email protected]> wrote .. but this works only when you have the dns on the webmin server, right? On Wed, 22 Feb 2017, 10:03 John Hinton, <[email protected]> wrote: On 2/21/2017 11:42 PM, Jamie Cameron wrote: On 20/Feb/2017 09:32 Freddie Cash <[email protected]> wrote .. On Mon, Feb 20, 2017 at 9:22 AM, Pat Erler <[email protected]> wrote: is it possible to request a letsencrypt certificat on a webmin server without a webserver? if yes, what should go here? https://www.screencast.com/t/w7B20se75 I don't know about doing it directly in Webmin, but it's very easy to do from the command-line if you control your DNS server. Use dehydrated to request a Let's Encrypt certificate using DNS challenge, then just symlink the generated c ert files into /etc/webmin, and configure Webmin to use those. I just implemented this for 50-odd Webmin servers, using a single Let's Encrypt cert (using Subjet Alternate Name support) vi a dehydrated and DNS challenges. It's not quite as automated as just letting Webmin handle everything internally, but it works quite nicely (update certs on a single machine, then push the certs out to all the others). -- Freddie Cash [email protected] The next release of webmin will support DNS-based validation for Let's Encrypt certificate requests. Nice! That will help with getting everything setup before a move... like from a server where SSL is not setup. John ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot- Forwarded by the Webmin mailing list at [email protected] To remove yourself from t his list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list -- ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot - Forwarded by the Webmin mailing list at [email protected] To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list