Re: [webmin-l] webmin and letsencrypt without webserver?

Pat Erler <[email protected]>
Newsgroups gmane.comp.web.webmin.general
Message-ID <CAHk2_+jUBcCReDL0d8nu+e1M7CRVGJ=xGSmx45O+33kkwn5RsA@mail.gmail.com>
yes, that's it for.. (also Postfix, mysql if possible)

On Thu, 23 Feb 2017, 05:18 Jamie Cameron, <[email protected]> wrote:

> In theory, yes .. we just haven't implemented that yet.
>
> I assume this cert would be used for Webmin itself?
>
> On 22/Feb/2017 15:03 Pat Erler <[email protected]> wrote ..
>
> any chance to start a temporary Webserver on systems without one to get
> the certificate on servers without the DNS on the server?
>
> On Wed, 22 Feb 2017, 23:09 Jamie Cameron, <[email protected]
> <http://reply_mail.cgi?new=1&to=jcameron%40webmin%2Ecom>> wrote:
>
> Yes, that is correct.
>
> On 22/Feb/2017 01:29 Pat Erler <[email protected]
> <http://reply_mail.cgi?new=1&to=perler%40gmail%2Ecom>> wrote ..
>
> but this works only when you have the dns on the webmin server, right?
>
> On Wed, 22 Feb 2017, 10:03 John Hinton, <[email protected]
> <http://reply_mail.cgi?new=1&to=webmaster%40ew3d%2Ecom>> wrote:
>
>
>
> On 2/21/2017 11:42 PM, Jamie Cameron wrote:
>
> On 20/Feb/2017 09:32 Freddie Cash <[email protected]>
> <http://reply_mail.cgi?new=1&to=fjwcash%40gmail%2Ecom> wrote ..
>
> On Mon, Feb 20, 2017 at 9:22 AM, Pat Erler <[email protected]
> <http://reply_mail.cgi?new=1&to=perler%40gmail%2Ecom>> wrote:
>
> is it possible to request a letsencrypt certificat on a webmin server
> without a webserver? if yes, what should go here?
> https://www.screencast.com/t/w7B20se75
>
>
> ​I don't know about doing it directly in Webmin, but it's very easy to do
> from the command-line if you control your DNS server.  Use dehydrated to
> request a Let's Encrypt certificate using DNS challenge, then just symlink
> the generated cert files into /etc/webmin, and configure Webmin to use
> those.
>
> I just implemented this for 50-odd Webmin servers, using a single Let's
> Encrypt cert (using Subjet Alternate Name support) via dehydrated and DNS
> challenges.
>
> It's not quite as automated as just letting Webmin handle everything
> internally, but it works quite nicely (update certs on a single machine,
> then push the certs out to all the others).
> ​
> --
> Freddie Cash
> [email protected] <http://reply_mail.cgi?new=1&to=fjwcash%40gmail%2Ecom>
>
> The next release of webmin will support DNS-based validation for Let's
> Encrypt certificate requests.
>
> Nice! That will help with getting everything setup before a move... like
> from a server where SSL is not setup.
>
>
> John
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot-
> Forwarded by the Webmin mailing list at
> [email protected]
> <http://reply_mail.cgi?new=1&to=webadmin%2Dlist%40lists%2Esourceforge%2Enet>
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
> --
>
>
>
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot-
> Forwarded by the Webmin mailing list at
> [email protected]
> <http://reply_mail.cgi?new=1&to=webadmin%2Dlist%40lists%2Esourceforge%2Enet>
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
> --
>
>
>
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot-
> Forwarded by the Webmin mailing list at
> [email protected]
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
--

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

-
Forwarded by the Webmin mailing list at [email protected]
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.