Provides Let's Encrypt certificates to ISPConfig hosted sites, including master/slave SHOULD NO LONGER BE NEEDED NOW ISPConfig PROVIDES NATIVE SUPPORT IN VERSION > 3.1
- dehydrated: git clone https://github.com/paralinguist/DehydratedISPConfig
- oursql: pip install oursql
- tld: pip install tld
Create a file called config in the dehydrated directory with the following contents:
IMPORTANT Make sure you set the email correctly.
####WARNING##### #If you change between authorities (eg, testing to live) you MUST delete #private_key.pem in your BASEDIR CA="https://acme-v01.api.letsencrypt.org/directory" #CA="https://acme-staging.api.letsencrypt.org/directory" BASEDIR="/etc/ssl/private" WELLKNOWN="/var/le-ispconfig/" # E-mail to use during the registration (default: <unset>) CONTACT_EMAIL="email@example.com"
Create the wellknown:
dehydrated_isp.conf in the apache conf folders (usually
Alias "/.well-known/acme-challenge/" /var/le-ispconfig/ <Directory /var/le-ispconfig> Require all granted </Directory> <IfModule mod_headers.c> <LocationMatch "/.well-known/acme-challenge/*"> Header set Content-Type "text/plain" </LocationMatch> </IfModule>
Enable the config:
service apache2 restart