Virtualmin Letsencrypt guide?

8 posts / 0 new
Topic locked
Last post
#1 Wed, 04/20/2016 - 19:54
Brook

Virtualmin Letsencrypt guide?

Is there one anywhere?

I tried it and it seemed to work, but going to the site via https throws up errors with Firefox - are there additional steps we need to carry out? Is there a guide anywhere?

Thu, 04/21/2016 - 02:04
johnp_

Please provide more information. What error is shown? How did you set up letsencrypt?

Thu, 04/21/2016 - 20:22
Brook

It's the standard FF error:

[quote] Your connection is not secure

The owner of my domain.com has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website.

Learn more: https://support.mozilla.org/en-US/kb/what-does-your-connection-is-not-se... [/quote]

Hence I wondered whether I have done something wrong or missed anything out. Is there anything like a step-by-step guide anywhere?

Thu, 04/21/2016 - 22:34
andreychek

Howdy,

The next release is going to add an additional CA certificate to Lets Encrypt certificates which can fix an issue like the one you're describing.

In the meantime, you might want to try adding the contents of this file here to the end of the ssl.ca file in your domain's homedir:

https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem.txt

Just copy and paste that to the bottom of the ssl.ca file, and then restart Apache.

That will all happen automatically soon though.

-Eric

Tue, 04/26/2016 - 05:05 (Reply to #4)
coderinthebox

Thanks Eric, been tying to figure out where I went wrong in installing letsencrypt since I did not compile it and instead used a repo to install. Things worked but multiple errors fired in Virtualmin then it went away. The error makes no sense since the SSL encryption can work without issue.

It never reached my mind to check ssl.ca file and add the change manually.

Visit me at coderinthebox.com

Sat, 04/23/2016 - 09:14
Brook

Thanks Eric, that worked!

Mon, 04/25/2016 - 11:27
suffi

I updated to 5.02 and manually renewed the Lets encrypt Cert. Since the chain changed from X1 to X3 the chain was broken. The new CA X3 was not updated automatically.

Thu, 04/28/2016 - 09:39
laurent_h

Hi,

Thanks it works

Topic locked