Re: [webmin-l] webmin and letsencrypt without webserver?
Pat Erler <[email protected]>
| Newsgroups | gmane.comp.web.webmin.general |
|---|---|
| Message-ID | <CAHk2_+jUBcCReDL0d8nu+e1M7CRVGJ=xGSmx45O+33kkwn5RsA@mail.gmail.com> |
yes, that's it for.. (also Postfix, mysql if possible) On Thu, 23 Feb 2017, 05:18 Jamie Cameron, <[email protected]> wrote: > In theory, yes .. we just haven't implemented that yet. > > I assume this cert would be used for Webmin itself? > > On 22/Feb/2017 15:03 Pat Erler <[email protected]> wrote .. > > any chance to start a temporary Webserver on systems without one to get > the certificate on servers without the DNS on the server? > > On Wed, 22 Feb 2017, 23:09 Jamie Cameron, <[email protected] > <http://reply_mail.cgi?new=1&to=jcameron%40webmin%2Ecom>> wrote: > > Yes, that is correct. > > On 22/Feb/2017 01:29 Pat Erler <[email protected] > <http://reply_mail.cgi?new=1&to=perler%40gmail%2Ecom>> wrote .. > > but this works only when you have the dns on the webmin server, right? > > On Wed, 22 Feb 2017, 10:03 John Hinton, <[email protected] > <http://reply_mail.cgi?new=1&to=webmaster%40ew3d%2Ecom>> wrote: > > > > On 2/21/2017 11:42 PM, Jamie Cameron wrote: > > On 20/Feb/2017 09:32 Freddie Cash <[email protected]> > <http://reply_mail.cgi?new=1&to=fjwcash%40gmail%2Ecom> wrote .. > > On Mon, Feb 20, 2017 at 9:22 AM, Pat Erler <[email protected] > <http://reply_mail.cgi?new=1&to=perler%40gmail%2Ecom>> wrote: > > is it possible to request a letsencrypt certificat on a webmin server > without a webserver? if yes, what should go here? > https://www.screencast.com/t/w7B20se75 > > > I don't know about doing it directly in Webmin, but it's very easy to do > from the command-line if you control your DNS server. Use dehydrated to > request a Let's Encrypt certificate using DNS challenge, then just symlink > the generated cert files into /etc/webmin, and configure Webmin to use > those. > > I just implemented this for 50-odd Webmin servers, using a single Let's > Encrypt cert (using Subjet Alternate Name support) via dehydrated and DNS > challenges. > > It's not quite as automated as just letting Webmin handle everything > internally, but it works quite nicely (update certs on a single machine, > then push the certs out to all the others). > > -- > Freddie Cash > [email protected] <http://reply_mail.cgi?new=1&to=fjwcash%40gmail%2Ecom> > > The next release of webmin will support DNS-based validation for Let's > Encrypt certificate requests. > > Nice! That will help with getting everything setup before a move... like > from a server where SSL is not setup. > > > John > > ------------------------------------------------------------------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, SlashDot.org! http://sdm.link/slashdot- > Forwarded by the Webmin mailing list at > [email protected] > <http://reply_mail.cgi?new=1&to=webadmin%2Dlist%40lists%2Esourceforge%2Enet> > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > -- > > > > > > ------------------------------------------------------------------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, SlashDot.org! http://sdm.link/slashdot- > Forwarded by the Webmin mailing list at > [email protected] > <http://reply_mail.cgi?new=1&to=webadmin%2Dlist%40lists%2Esourceforge%2Enet> > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > -- > > > > > > ------------------------------------------------------------------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, SlashDot.org! http://sdm.link/slashdot- > Forwarded by the Webmin mailing list at > [email protected] > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list > -- ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot - Forwarded by the Webmin mailing list at [email protected] To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list