Request to provide support for Let's Encrypt

That's great news Wouter.

I've been playing around with LetsEncrypt last night (the public beta went live, finally), and I ran into a few roadblocks already (validation is always over web-ports, but I want multi-domain certs which include "smtp" and "mail" for Exim and Dovecot). But after a good night's sleep I think I can work around these issues.

Keep us informed on your progress.
 
zmippie said:
I don't quite follow why he's manually installing the certificates through DirectAdmin after he created them. Why not just write out the certificates/keys at the same locations where DA writes them? Wouldn't that produce the exact same result without having to do manual labor? It's all about automation, so I was thinking about installing the certs/keys in all appropriate places (for Exim, for Dovecot, for ProFTP, for DA itself) through a script. Ideas?
Click to expand...

I've updated the tutorial now it's in open beta: https://raymii.org/s/articles/Lets_Encrypt_Directadmin.html. I've added a part where you symlink the files from Directadmin to the letsencrypt files. This will be a burden to do, including bringing down the webserver. DirectAdmin development should integrate this including auto renewal, otherwise a lot less people will use this. The renewal part, after the initial setup, consists out of running the client again, and since the symlinks are setup, does not require entrance in DA again. However, the renewal does require to bring down the webserver...
 
raymii said:
I've updated the tutorial now it's in open beta: https://raymii.org/s/articles/Lets_Encrypt_Directadmin.html. I've added a part where you symlink the files from Directadmin to the letsencrypt files. This will be a burden to do, including bringing down the webserver. DirectAdmin development should integrate this including auto renewal, otherwise a lot less people will use this. The renewal part, after the initial setup, consists out of running the client again, and since the symlinks are setup, does not require entrance in DA again. However, the renewal does require to bring down the webserver...
Click to expand...

You should check my link of the post right above yours. It's possible to keep the default webserver running if you use the --webroot method, on top of that as it turns out there are several php libs made so it seems a da-plugin could be done very soon.
 
raymii said:
I've updated the tutorial now it's in open beta: https://raymii.org/s/articles/Lets_Encrypt_Directadmin.html. I've added a part where you symlink the files from Directadmin to the letsencrypt files. This will be a burden to do, including bringing down the webserver. DirectAdmin development should integrate this including auto renewal, otherwise a lot less people will use this. The renewal part, after the initial setup, consists out of running the client again, and since the symlinks are setup, does not require entrance in DA again. However, the renewal does require to bring down the webserver...
Click to expand...

Arieh said:
You should check my link of the post right above yours. It's possible to keep the default webserver running if you use the --webroot method, on top of that as it turns out there are several php libs made so it seems a da-plugin could be done very soon.
Click to expand...

A DA plugin would be even nicer yes. I'll check out the webroot option, thanks :)
 
I would also like to see an automated native/plugin option for directadmin. This way I am able to give all my customers SSL at once, so here is another interested party
 
So, is there any official response from the directadmin dev team on Let's Encrypt? Are they willing to put this on the feature list?
 
Hello,

Good to see that you're working on the plugin. They say there some rate limits and the rate limits will remain even after public beta ends:

For today's public beta launch the limits will remain:
  • Rate limit on registrations per IP is currently 10 per 3 hours
  • Rate limit on certificates per Domain is currently 5 per 7 days
... I think there will always be some rate limits, though we intend to raise them from time to time.
Click to expand...


https://community.letsencrypt.org/t/public-beta-rate-limits/4772

Since that... is your plugin able to deal with this and track the hourly and daily usage?
 
raymii said:
So, is there any official response from the directadmin dev team on Let's Encrypt? Are they willing to put this on the feature list?
Click to expand...

It does seem to be coming in v1.492: https://www.directadmin.com/features.php?id=1828

Functionality for the new Free Certificate Authority:
https://letsencrypt.org/

directadmin.conf option:
letsencrypt=0

where 0 is the internal default.
To enable this feature, use:
letsencrypt=1

Users can then access it from:
User Level -> SSL Certificates

where a 3rd certification creation radio box will be created:
"Free & automatic certificate from Let's Encrypt"
in addition to the other 2 'self-signed' and 'create request' options.
[..]
Click to expand...
 
Barryvdh said:
It does seem to be coming in v1.492: https://www.directadmin.com/features.php?id=1828
Click to expand...

Wow, that sounds promising, and although it's not there yet, it is sooner than I expected (I didn't expect it at all to be honest).
But does this mean that the work you guys did on the plugin becomes redundant in the foreseeable future? Or have you been in contact with Mark and John about the implementation of this feature?
 
hci said:
Will this work for email too?
Click to expand...

That's a valid question. I currently have accounts set up with LetsEncrypt certificates for Nginx, Exim and Dovecot. It would be really nice if all of them would be covered in this upcoming feature. I now set this up myself sort of half-automated, mostly to see if I could get it working, which I did. But an 'out-of-the-box' solution would of course be preferred.
 
Do we know an ETA of this native DA implementation? Because I'm currently using the plugin which is working great on a small managed production environment.
 
Sorry if this is slightly bumping an older thread;

With let's encrypt basically providing free SSL certificates there's no reason not to have any HTTPS-only websites. Will DA allow certificates on websites without their own IP? I have quite a few websites running right now but sadly I can't give them all their IP and I shouldn't have to.
 
Ieuan said:
Sorry if this is slightly bumping an older thread;

With let's encrypt basically providing free SSL certificates there's no reason not to have any HTTPS-only websites. Will DA allow certificates on websites without their own IP? I have quite a few websites running right now but sadly I can't give them all their IP and I shouldn't have to.
Click to expand...

SSL certificates with shared IP's is already possible. Just enable SNI in your DirectAdmin config: http://directadmin.com/features.php?id=1100
 
You must log in or register to reply here.
Back
Top