letsencrypt vs. create relative symlinks checkbox - bug or feature?

Discussion in 'Installation/Configuration' started by klitze2, Jul 2, 2019.

  1. klitze2

    klitze2 New Member

    1. if the "create relative symlinks" checkbox under system -> serverconfig -> web is activated:
    ...../ssl/domain1.bundle -> /etc/letsencrypt/archive/domain1/cert1.pem
    ...../ssl/domain1.crt -> /etc/letsencrypt/archive/domain1/fullchain1.pem
    ...../ssl/domain1.key -> /etc/letsencrypt/archive/domain1/privkey1.pem

    2. if the "create relative symlinks" checkbox under system -> serverconfig -> web is deactivated:
    ...../ssl/domain.bundle -> /etc/letsencrypt/live/domain1/chain1.pem
    ...../ssl/domain.crt -> /etc/letsencrypt/live/domain1/fullchain.pem
    ...../ssl/domain.key -> /etc/letsencrypt/live/domain1/privkey.pem

    Pointing the symlinks into the archive folder of letsencrypt (checkbox activated) does not keep the symlink pointing to the actual cert after a renewal...
    I think, the bug is in the method "create_relative_link" /usr/local/ispconfig/server/lib/classes/system.inc.php LINE 897
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    This is described in the bug tracker and already fixed in git stable. The function does exactly what it shall do, it resolves all symlinks to its target, but this has side effects on LE. This checkbox should only be activated for some special chrooted apache setups, on normal setups, this is always off and should not be activated.
     
  3. klitze2

    klitze2 New Member

    Aha, this is a checkbox of the type "should not be activated"... o_O
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Correct. It's off by default and when you don't know what it is used for, then don't turn it on ;)
     

Share This Page