Let's Encrypt 2 ISPConfig

Discussion in 'Tips/Tricks/Mods' started by sjau, Oct 28, 2015.

  1. Sir Henry

    Sir Henry Member

    Hmm.. your script does not support multiple subdomains, it just adds "-d www.domain.tld" when subdomain www is enabled in ISPConfig.
    I have added real support for subdomains in your script on GitHub and created a pull request. I also fixed a few other things, feel free to merge.
    Thanks! :)
     
    sjau likes this.
  2. Nemis

    Nemis Member

    sjau likes this.
  3. sjau

    sjau Local Meanie Moderator

    merged :)

    Also I did change it to tomorrow's launch :)

    thx @ Nemis
     
    Last edited: Dec 2, 2015
  4. Sir Henry

    Sir Henry Member

    Are you sure we do not need the --server argument any more? We are still in beta.
     
  5. sjau

    sjau Local Meanie Moderator

    today at some point the closed beta ends and open beta starts.
     
  6. Nemis

    Nemis Member

    http://letsencrypt.status.io/
     
  7. sjau

    sjau Local Meanie Moderator

    @Nemis

    Not really sure what you want to tell me with that :)
     
  8. Sir Henry

    Sir Henry Member

    I have added a dry-run option because during my tests I ran into rate limitations. To avoid that you can now specify '-n' or '--dry-run' on the le2ispc command line. It will only print the letsencrypt command without executing it.
    I also removed the --agree-dev-preview option, which is now obsolete.
     
  9. sjau

    sjau Local Meanie Moderator

    Now how to work with merge conflicts :)
     
  10. Sir Henry

    Sir Henry Member

    I'll create a new conflict-free branch :)
     
  11. sjau

    sjau Local Meanie Moderator

    I implemented your changes manually :)
     
  12. sjau

    sjau Local Meanie Moderator

    also added you as collaborator :)
     
  13. concept21

    concept21 Active Member

    Does it support enterprise features like wildcard, company verification, IP address etc? :rolleyes:
     
  14. sjau

    sjau Local Meanie Moderator

    well, it sounds you need to read up what DV ist ;)
     
  15. sjau

    sjau Local Meanie Moderator

    @Sir Henry
    I added some changes. Basically creating the .well-known dirs now in the php script and setting appropriate permissions - had issues before now. Also temporarily disabling the .htaccess file in the webroot.
     
  16. sjau

    sjau Local Meanie Moderator

    so, got now for almost all sub/domains according certs. There's still a rate limit on how many sub/domains you can have. I think it's around 8 certs per domain per 2 months or something. So using:
    domain.tld
    www.domain.tld
    sub1.domain.tld
    sub2.domain.tld
    sub3.domain.tld
    sub4.doamin.tld
    sub5.domain.tld
    sub6.domain.tld
    will make you hit the limit.
    One way around those limits would currently be to request a SAN cert for all subs. I
     
  17. sjau

    sjau Local Meanie Moderator

    So, some major changes here:

    - reworked the API calls into seperate functions and also the process of getting the sites domain info through the API
    - fixed nginx directive writing. Before nginx directive was written to ISPC at the end but at that point it would already have failed. Hence I reworked the whole API thing and made seperate functions for them. Now the call is made if the directive doesn't exist yet. Since changes are not reflected immediately when altering stuff through the API, I also added a 60s sleep call.
    - made renaming of .htaccess for apache optional
     
  18. felan

    felan Member HowtoForge Supporter

    I've installed the plugin from github, following everything to the letter, but I keep getting the following error:

    IMPORTANT NOTES:
    - The following 'urn:acme:error:connection' errors were reported by
    the server:

    Domains: www.dru.designfyn.dk
    Error: The server could not connect to the client for DV

    What have I missed?
     
  19. sjau

    sjau Local Meanie Moderator

  20. felan

    felan Member HowtoForge Supporter

    I have a cname *.dru.designfyn.dk set as cname on an external DNS server
     

Share This Page