DirectAdmin 1.50.0 has been released

Doh! Something simple I've overlooked. Can't this be done automatically by DA when a user creates a certificate? Or at least give a notice?
Maybe Raymii can add this do his guide too..


I've tested two sites where I got the www. in it automatically, multidomains also work in my tests?
 
Hi there,

With Let's Encrypt, is it also possible to add domain aliases to the SSL certificate, (or create new certificates for the domain aliases)? Another method would be to allow the CSR feature to contain multiple domains so I can specify the aliases manually.

Thanks in advance!
Niels
 
*previous content deleted and moved*

Thx. Really look forward to test out the certificate feature :)
 
Last edited:
You're right of course. :D

In that case it should hide all other fields except email. And the server-side check modified.

Feel free to create a ticket on tickets.directadmin.com with a feature request :) John might want to implement it into the next release of DA.
 
is there anyway to avoid etc/nginx.conf and usr/local/directadmin/user/admin/nginx.conf to not be rewritten when certi gets renewed because when it gets rewritten it uses the server hostname certificate rather than the domain certificate.
 
is there anyway to avoid etc/nginx.conf and usr/local/directadmin/user/admin/nginx.conf to not be rewritten when certi gets renewed because when it gets rewritten it uses the server hostname certificate rather than the domain certificate.

For /usr/local/directadmin/user/admin/nginx.conf please enable SSL SNI in directadmin.conf. /etc/nginx/nginx.conf - it's not managed from DirectAdmin interface, it's probably CustomBuild rewriting it. Just place it to /usr/local/directadmin/custombuild/custom/nginx/conf and it will not overwrite your changes again.
 
Custom letsencrypt.sh script

I created an custom letsencrypt script so that everyone of my subdomains is added to the request. This way I don't have to add every subdomain to Directadmin as an new domain. Which also mess up the DNS config.

Also added my old update-mail-certificates.sh script to add SNI support for Dovecot and Exim. See script for Dovecot and Exim config changes which are needed. Need to add this functionality to the letsencrypt script.

https://github.com/ictabc/directadmin

Still a work in progress, and haven't programmed in a while. So could need a clean-up I guess. But first get it working then clean it up.

Only testet on Centos 6. So you may need to tweak for other OS.

Axel Boersma.
 
Is there a feature in a ToDo List to add a customizable list of subdomains for which directadmin creates SSL certs? So that we could add custom names into it without a need to manually adjust list of names.

I mean subjectAltName= from /usr/local/directadmin/data/users/*/domains/*.san_config
 
Last edited:
Hello
After update with the following error was encountered and DirectAdmin also work


[root@server custombuild]# ./build rewrite_confs
unified_ftp_password_file is not set to 1. You must convert before you can use pureftpd
Please read this guide: http://www.directadmin.com/features.php?id=1134

Simulation:
cd /usr/local/directadmin
echo 'action=convert&value=unifiedftp&simulate=yes' >> data/task.queue
./dataskq d1

Conversion:
cd /usr/local/directadmin
echo 'unified_ftp_password_file=1' >> conf/directadmin.conf
echo 'action=convert&value=unifiedftp' >> data/task.queue
./dataskq d1

We also help link the problem persists brush
please guide me
 
nginx working fine:


[root scripts]#./letsencrypt.sh renew your.hostname.com 4096
Setting up certificate for a hostname: your.hostname.com
Getting challenge for your.hostname.com from acme-server...
Waiting for domain verification...
Challenge is valid.
Getting challenge for www.your.hostname.com from acme-server...
Waiting for domain verification...
Challenge is valid.
Getting challenge for mail.your.hostname.com from acme-server...
Waiting for domain verification...
Challenge is valid.
Getting challenge for ftp.your.hostname.com from acme-server...
Waiting for domain verification...
Challenge is valid.
Getting challenge for pop.your.hostname.com from acme-server...
Waiting for domain verification...
Challenge is valid.
Getting challenge for smtp.your.hostname.com from acme-server...
Waiting for domain verification...
Challenge is valid.
Generating 4096 bit RSA key for your.hostname.com...
openssl genrsa 4096 > "/usr/local/directadmin/conf/cakey.pem.new"
Generating RSA private key, 4096 bit long modulus
..........................++
..............................................++
e is 65537 (0x10001)
DirectAdmin certificate has been setup.
Setting up cert for Exim...
Setting up cert for WWW server...
Setting up cert for FTP server...
The services will be retarted in about 1 minute via the dataskq.
Certificate for your.hostname.com has been created successfully!
 
Last edited:
I get the exact same error as wattie
https://forum.directadmin.com/showthread.php?t=52723&p=270566#post270566

letsencrypt is set to 1, I haven't tried 2 yet.
Will the suggested change by smtalk in https://forum.directadmin.com/showthread.php?t=52723&p=270584#post270584 work for this issue or is is completely unrelated?

Please open a ticket for that in tickets.directadmin.com. It'd be great if you could include login credentials to the server too, that way the issue could be found and fixed faster.
 
Is there a feature in a ToDo List to add a customizable list of subdomains for which directadmin creates SSL certs? So that we could add custom names into it without a need to manually adjust list of names.

I mean subjectAltName= from /usr/local/directadmin/data/users/*/domains/*.san_config
We could do it that way, or we could use a template method instead.. or something more dynamic if it should include subdomains? (although, it would be tricky to guarantee a subdomain actually points to the current server and to the current path, etc)... unless we just try everything and ignore it when it fails (not the best).

We also have to keep in mind that there is a request limit, so if you add a pile of subdomains, you might be over the limit before the first run is even done.

John
 
Back
Top