Multiserver SSL question

Discussion in 'ISPConfig 3 Priority Support' started by sheshes, Mar 1, 2019.

  1. sheshes

    sheshes Member

    Can someone explain how the integrated Lets Encrypt function works?

    I have a multiserver setup with 1 public ip and require to:

    a. Create an SSL cert for all services (ISPConfig Panel, web server, mail server etc)
    b. Create an SSL for each websites I have.
    c. Automatically update renewals to all necessary servers (e.g mail server)

    From what I have read, to create an SSL for a website, besides all DNS records being correct, the procedure states that I use the IP address of the web server instead of *, and tick SSL and Let's Encrypt SSL. Then go to the SSL tab fill in the details, choose as domain and in the Actions Create certificate and click Save.

    I ve been trying this for days now, but the results are strange. I get an SSH Key, SSH Request and SSH Certificate entered in ISPCOnfig automatically but no the SSL bundle, and the ticks on SSL and Let's encrypt SSL are unticked by ISPconfig.

    What is the mistake here?
  2. till

    till Super Moderator Staff Member ISPConfig Developer

  3. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    This is not true. The * in IP Address works perfecly OK.
  4. sheshes

    sheshes Member

    Ok I managed to create most of the required ssl automatically with ispconfig panel. Please correct if I am wrong. If SSL and Letsencrypt is ticked on the website settings then the SSL cert is created and handled automatically by letsencrypt/ispconfig and is placed as symlink in /var/www/website/ssl folder and nothing should be copied in the SSL Section Tab of the website (ssl request, ssl key, ssl cert and ssl bundle)?
    The SSL Section Tab is to manually enter any certificate created with other providers right? There is no need for me to copy all letsencrypt created certs in this section manually right?

    Also the updating is beeing done internally automatically in version 3.1.13, I shouldn't create an incron script as suggested on the tutorial right?
    Last edited: Mar 6, 2019
  5. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    The incron script is useful if you want to use the same LE certificate for other services, like e-mail server etc.. The incron copies the renewed certificate for use by those other services and restarts them, so they start using the new certificate.
  6. sheshes

    sheshes Member

  7. Taleman

    Taleman Well-Known Member HowtoForge Supporter

  8. sheshes

    sheshes Member

    Thank you very much sir. You have been more than helpful

Share This Page