DA install without automatic TLS certificates

[wnet]

i would like to know if it is possible to install DA without : lego or letsencrypt or zerossl from the word go. and if yes, it would be kindly appreciated if anyone can share / provide the steps needed to achieve the afore mentioned. i would take care on my own of the ssl config part both server and domains after install. and I asume the risk of tdealing with browser warnings upon first login.

regards and thank you

 

[zEitEr]

Hello,

The documentation https://docs.directadmin.com/getting-started/installation/installguide.html offers:

Check overview section if you'd like the installation to be customized.

- https://docs.directadmin.com/gettin...ning-the-installation-with-predefined-options

So, if you pre-install /usr/local/directadmin/conf/directadmin.conf with letsencrypt=0 and follow the other steps from the guide, I would expect directadmin to be installed w/out letsencrypt.

Will it work for you?

 

[wnet]

Hi! zEitEr

this is the command I used to install it :

wget -O setup.sh directadmin.com/setup.sh
chmod 755 setup.sh
DA_SKIP_CSF="true" DA_INTERACTIVE_CUSTOMBUILD="true" ./setup.sh licence number

i attached directadmin.conf + options.conf

to review.

to be more clear what I really DO NOT WANT TO HAPPEN is that upon installation DA DO NOT automatically setup the server / hostname certs or even better no certs at all. the same as it used to be some time ago. i do not want lego, letsencrypt, zerrossl or any one of this whatsoever. i have sectigo ssls for the domains. i will use those.

reagard and thank you

 

[zEitEr]

And what was result when you installed DirectAdmin with pre-instaled directadmin.conf?

 

[wnet]

And what was result when you installed DirectAdmin with pre-instaled directadmin.conf?

DA install hostname certs. exactly what I do NOT want

 

[zEitEr]

DA install hostname certs. exactly what I do NOT want

You might report it as a bug If Directadmin installs certificates even if you set letsencrypt=0 and pre-install directadmin.conf

 

[fln]

@wnet, at the moment DA installer will NOT automatically try getting TLS certificates only if DA is being installed without CustomBuild. For example:

DA_SKIP_CSF="true" DA_SKIP_CUSTOMBUILD="true" ./setup.sh {license-key}

In other words DA_SKIP_CUSTOMBUILD option controls two things:

• should we execute CustomBuild after DA is installed
• should we try auto-issuing the TLS certificate

We had plans on splitting this option into two DA_SKIP_AUTO_TLS_CERT and DA_SKIP_CUSTOMBUILD but in the end discarded the idea as not really useful. If you would prefer having such option we could add it in the upcoming DA release.