Re: [Astlinux-users] ACME (Let's Encrypt) Certificates

[David K. <da...@ke...>]

ACME certificates are supported directly in Astlinux...
https://doc.astlinux-project.org/userdoc:tt_acme_certificates

Each of your Astlinux boxes should have a unique URL (
https://michaelpbx.example.com) and you need access to the registrar where
you keep your DNS record for michaelpbx.example.com. Each Astlinux box will
then have its own certificate.  The full list of supported DNS registrars
can be found in stat/etc/acme/dnsapi/ and you would want to go to the acme
github page for documentation on each.

Initial setup must be done at CLI, but them you add a cron job as
documented and from then on it takes care of itself.

I have FreeDNS and Cloudflare registrars working for a couple of my domains.

David





On Fri, Jun 15, 2018 at 2:23 AM, Michael Knill <
mic...@ip...> wrote:

> Ok after reading the doco page and Lets Encrypt and ACME Protocol pages, I
> realise that I don't really know what I am doing 😊
>
>
>
> The Problem:
>
> I am now providing more regular access to the Astlinux Admin interface to
> customers and the certificate error is not a good look. You can store the
> Self Signed Certificate with Firefox but Chrome does not let you now.
>
>
>
> The Solution:
>
> ACME (Let's Encrypt) Certificates with DNS.
>
> Problem is that I don't know what I need and how to do it.
>
> I currently have a domain that I use to access all my systems (
> ibcaccess.net). Can I use this?
>
> Would the customer need to access the Astlinux GUI using this domain?
> Would I need to use a subdomain for the internal address?
>
>
>
> Im just confused sorry. I am obviously too much of a noob regarding this
> stuff.
>
>
>
> Regards
>
> Michael Knill
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> Astlinux-users mailing list
> Ast...@li...
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>
> Donations to support AstLinux are graciously accepted via PayPal to
> pa...@kr....
>