Hostname SSL

[InTheWoods]

There are several different conflicting KB articles on this.

I want to secure the hostname of my server. By default, DA now installs to server-xx-xx-xxx-xx.da.direct instead of the FQDN or IP of the server as it used to.

When trying to secure the actual hostname of the server (Ex: host.myserver.com) the LetsEncrypt certificate shows this:

root@host:~# /usr/local/directadmin/scripts/letsencrypt.sh request host.server.com 4096
Setting up certificate for a hostname: host.server.com
2024/10/22 02:53:19 [INFO] [server-xx-xxx-xx-xx.da.direct] acme: Obtaining SAN certificate
2024/10/22 02:53:20 [INFO] [server-xx-xxx-xx-xx.da.direct] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/xxxxxxxx
2024/10/22 02:53:20 [INFO] [server-xx-xxx-xx-xx.da.direct] acme: authorization already valid; skipping challenge
2024/10/22 02:53:20 [INFO] [server-xx-xxx-xx-xx.da.direct] acme: Validations succeeded; requesting certificates
2024/10/22 02:53:23 [INFO] [server-xx-xxx-xx-xx.da.direct] Server responded with a certificate for the preferred certificate chains "ISRG Root X1".
Certificate for server-xx-xxx-xx-xx.da.direct has been created successfully!
DirectAdmin certificate has been setup.
Setting up cert for Exim...
Setting up cert for Dovecot...
Setting up cert for nginx...

As you see, it just uses the DA hostname instead of the ACTUAL hostname despite me specifying the actual hostname.

The actual hostname is set in the admin panel settings as well, so not sure why the server-IP-address.da.direct is even being used anywhere.

This used to be a simple and straight forward process.

hostname/evo/admin/ssl doesn't help, nothing shown or able to change here.

hostname/evo/admin/server-tls, nothing here to change. Obviously shows a Not Trusted certificate since it is for the DA default hostname (I really wish they'd remove this 'feature' and stick with the IP of the server or FQDN of the server instead at install) but I can't change it. I've tried different things in the ACME settings and Change Certificate settings and nothing works.

What is the proper way to now complete this task?

I want the hostname of my server to be protected by LetsEncrypt. No self-signed cert. No forcing the DA default hostname somewhere. I'd be happy if I never have to see the *.da.direct hostname anywhere ever again, haha.

 

[Active8]

W

Thread '[Solved] SSL and hostname'

Nov 8, 2022

Hello!
I try to setup Let's encrypt for my server hostname (myserver.domain.com) but every time, the request is made for server-XXX-XX-XXX-XX.da.direct and the SSL for *.da.direct is setup as my hostname certificate

I have setup the hostname correctly on the server but the issue remain (in the control panel and with hostname.sh script)...

root@XXXXXXXXXXX:/usr/local/directadmin/scripts# ./letsencrypt.sh request myserver.domain.com 4096
Setting up certificate for a hostname: myserver.domain.com
2022/11/08 22:35:02 [INFO] [server-XXX-XX-XXX-XX.da.direct] acme: Obtaining SAN certificate...

• webaltern
• Replies: 2
• Forum: System-Level Technical Discussion

 

[Richard G]

As you see, it just uses the DA hostname instead of the ACTUAL hostname despite me specifying the actual hostname.

It's a known issue.

Check this article which also explains how to get rid of the automatic hostname definately.

Thread '[How-To] Create or change your server's hostname in Directadmin'

Mar 21, 2024

This is a guide on how to create a correct FQDN hostname on a sever or VPS.
I created this newly here in this section, for easier reference and it's also easier to find.

There is also another method, but the method described here is another method which is also still very usable.

Before you install Directadmin you can already take care the correct hostname is used bij Directadmin.

The domain mydomain.com is used her as example and 192.168.0.1 as example server ip. Ofcourse replace all examples with the domain or hostname your are using. So don't use 192.168.0.1 in the real situation...

• Richard G
• Replies: 7
• Forum: How-To Guides

•