/ Register

Welcome to Centmin Mod Community
Register Now

Cloudflare Letsencrypt On New Server with CloudFlare

Discussion in 'Domains, DNS, Email & SSL Certificates' started by BamaStangGuy, Oct 19, 2019.

Previous Thread Next Thread
Loading...
  1. Oct 19, 2019 #1
    BamaStangGuy

    BamaStangGuy Active Member

    669
    192
    43
    May 25, 2014
    Ratings:
    +272
    Local Time:
    8:26 PM
    Who all has moved to a new server using CentminMod and setup LetsEncrypt before moving the site? Can you? If not, what is the process for moving the site to the new server, then using CentminMod's acme behind CloudFlare?
     
  2. Oct 19, 2019 #2
    rdan

    rdan Well-Known Member

    5,452
    1,418
    113
    May 25, 2014
    Ratings:
    +2,212
    Local Time:
    9:26 AM
    Mainline
    10.2
    If planning to use Cloudflare, then just use their self signed origin certificate.
     
  3. Oct 19, 2019 #3
    BamaStangGuy

    BamaStangGuy Active Member

    669
    192
    43
    May 25, 2014
    Ratings:
    +272
    Local Time:
    8:26 PM
    We can't do to using Ezoic. Some of their tools require a valid orgin certificate.
     
  4. Oct 19, 2019 #4
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    11:26 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Yeah if you copy SSL certs from old server from /usr/local/nginx/conf/ssl/yourdomain.com directory along with nginx vhost files (/usr/local/nginx/conf/conf.d/yourdomain.com.conf and /usr/local/nginx/conf/conf.d/yourdomain.com.ssl.conf), they will work on new server. One thing is with letsencrypt they need auto renewal as they have 90 day expiry, so you need to setup addons/acmetool.sh via acmeinstall command on new server
    Code (Text):
    ./acmetool.sh acmeinstall

    and then copy over the /root/.acme.sh/yourdomain.com directory from old server too which contains the details acme.sh client needs for auto renew cronjobs.
     
  5. Oct 19, 2019 #5
    BamaStangGuy

    BamaStangGuy Active Member

    669
    192
    43
    May 25, 2014
    Ratings:
    +272
    Local Time:
    8:26 PM
    We do not currently use acmetool.sh. That is the issue. Once I transfer the site over to the new server, will I be able to use acmetool.sh with CloudFlare?
     
  6. Oct 19, 2019 #6
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    11:26 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    what are you currently using then ?

    You will be able to use acmetool.sh if Centmin Mod after transfer but only if DNS for domains points to new server/migrated server.

    If not using acmetool.sh or letsencrypt ssl certs, then easiest way I can see would be to use Cloudflare for domain then Cloudflare can provide HTTPS/SSL cert on front end and then either:
    1. you can set Cloudflare SSL to Flexible SSL while you have Centmin Mod non-HTTPS Nginx vhost and change Cloudflare SSL to Full SSL once you internally changed Centmin Mod non-HTTPS Nginx vhost to HTTPS based Nginx vhost or
    2. you can set Cloudflare SSL to Full (non-strict) and have Centmin Mod HTTPS vhosts with the default generated self-signed SSL certs that centmin.sh menu option 2, 22 or nv command prompt/features for. Cloudflare Full (non-strict) allows self-signed ssl/invalid ssl certs on origin server. Then once you internally ready DNS wise for letsencrypt acmetool.sh, you can run acmetool.sh reissue-only option
     
Previous Thread Next Thread
Loading...

.