Re: [webmin-l] webmin and letsencrypt without webserver?
"Jamie Cameron" <[email protected]>
| Newsgroups | gmane.comp.web.webmin.general |
|---|---|
| Message-ID | <[email protected]> |
In theory, yes .. we just haven't implemented that yet.I assume this cert would be used for Webmin itself? On 22/Feb/2017 15:03 Pat Erler <[email protected]> wrote .. any chance to start a temporary Webserver on systems without one to get the certificate on servers without the DNS on the server? On Wed, 22 Feb 2017, 23:09 Jamie Cameron, <[email protected]> wrote: Yes, that is correct. On 22/Feb/2017 01:29 Pat Erler <[email protected]> wrote .. but this works only when you have the dns on the webmin server, right? On Wed, 22 Feb 2017, 10:03 John Hinton, <[email protected]> wrote: On 2/21/2017 11:42 PM, Jamie Cameron wrote: On 20/Feb/2017 09:32 Freddie Cash <[email protected]> wrote .. On Mon, Feb 20, 2017 at 9:22 AM, Pat Erler <[email protected]> wrote: is it possible to request a letsencrypt certificat on a webmin server without a webserver? if yes, what should go here? https://www.screencast.com/t/w7B20se75 I don't know about doing it directly in Webmin, but it's very easy to do from the command-line if you control your DNS server. Use dehyd rated to request a Let's Encrypt certificate using DNS challenge, then just symlink the generated cert files into /etc/webmin, and configure Webmin to use those. I just implemented this for 50-odd Webmin servers, using a single Let's Encrypt cert (using Subjet Alternate Name support) via dehydrated and DNS challenges. It's not quite as automated as just letting Webmin handle everything internally, but it works quite nicely (update certs on a single machine, then push the certs out to all the others). -- Freddie Cash [email protected] The next release of webmin will support DNS-based validation for Let's Encrypt certificate requests. Nice! That will help with getting everything setup before a move... like from a server where SSL is not setup. John ---------------- -------------------------------------------------------------- Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot- Fo rwarded by the Webmin mailing list at [email protected] To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list -- ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot- Forwarded by the Webmin mailing list at [email protected] To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list -- ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot - Forwarded by the Webmin mailing list at [email protected] To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list