/ Register

Want to subscribe to topics you're interested in?
Become a Member

Letsencrypt with custom certificate -subj information

Discussion in 'Domains, DNS, Email & SSL Certificates' started by R0rke, Dec 29, 2017.

Previous Thread Next Thread
Loading...
  1. Dec 29, 2017 #1
    R0rke

    R0rke Member

    168
    22
    18
    Jun 2, 2016
    Iran
    Ratings:
    +37
    Local Time:
    4:03 PM
    2
    10
    is it possible to replace

    -subj \"/C=${SELFSIGNEDSSL_C}/ST=${SELFSIGNEDSSL_ST}/L=${SELFSIGNEDSSL_L}

    to : -subj \"/C=Country/ST=State/any=anything/
    i want to use my custom information on Issued lets encrypt SSL
     
  2. Dec 29, 2017 #2
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    9:03 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    letsencrypt doesn't use those fields only untrusted self-signed ssl certificates that centmin mod nginx vhost can generate. You can override those values via persistent config file /etc/centminmod/custom_config.inc setting PRIOR to running centmin.sh nginx vhost creation menu routines the variables for
    Code (Text):
    SELFSIGNEDSSL_C=
SELFSIGNEDSSL_ST=
SELFSIGNEDSSL_L=
     
  3. Jan 5, 2018 #3
    R0rke

    R0rke Member

    168
    22
    18
    Jun 2, 2016
    Iran
    Ratings:
    +37
    Local Time:
    4:03 PM
    2
    10
    there is no custom_config file there . i checked /etc/centminmod directory
     
  4. Jan 5, 2018 #4
    pamamolf

    pamamolf Well-Known Member

    4,125
    429
    83
    May 31, 2014
    Ratings:
    +841
    Local Time:
    2:03 AM
    Nginx-1.29.x
    MariaDB 10.6.x
    You can create it :)

     
  5. Jan 5, 2018 #5
    R0rke

    R0rke Member

    168
    22
    18
    Jun 2, 2016
    Iran
    Ratings:
    +37
    Local Time:
    4:03 PM
    2
    10
    i don't know how to fill it i mean put code in it .

    is it ok i use this ?

    Code:
    SELFSIGNEDSSL_C='US'
SELFSIGNEDSSL_ST='California'
SELFSIGNEDSSL_L='Los Angeles'
SELFSIGNEDSSL_O=''
SELFSIGNEDSSL_OU=''
     
  6. Jan 5, 2018 #6
    pamamolf

    pamamolf Well-Known Member

    4,125
    429
    83
    May 31, 2014
    Ratings:
    +841
    Local Time:
    2:03 AM
    Nginx-1.29.x
    MariaDB 10.6.x
    Yes you just put the code inside and save it.....but the code inside should be values that was set to use there and Centminmod can understand them and not any custom yours code....
     
  7. Jan 5, 2018 #7
    R0rke

    R0rke Member

    168
    22
    18
    Jun 2, 2016
    Iran
    Ratings:
    +37
    Local Time:
    4:03 PM
    2
    10
    i do but when i check the certificate its showing same before i mean i set custom orginazation name but its empty on browser
     
  8. Jan 5, 2018 #8
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    9:03 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    existing self-signed ssl certs won't change, only new ones created once variables changed in persistent config file will change.

    to change existing ssl cert, you need to create a new self-signed ssl certificate - i.e. on separate test vps create and copy and overwrite files in /usr/local/nginx/conf/ssl/yourdomain.com with new ones created a separate test vps server

    remember this is for self-signed ssl certs only not letsencrypt ssl certs which don't have these fields and can't be controlled via above variables
     
  9. Jan 6, 2018 #9
    R0rke

    R0rke Member

    168
    22
    18
    Jun 2, 2016
    Iran
    Ratings:
    +37
    Local Time:
    4:03 PM
    2
    10
    so you mean i create new self signed ssl then replace with older certificates ?
     
  10. Jan 7, 2018 #10
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    9:03 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    yes for existing self-signed ssl certs
     
Previous Thread Next Thread
Loading...

.