/ Register

Join the community today
Register Now

Letsencrypt Official acmetool.sh testing thread for Centmin Mod 123.09beta01

Discussion in 'Domains, DNS, Email & SSL Certificates' started by eva2000, Jul 26, 2016.

Tags:
Previous Thread Next Thread
Loading...
Page 16 of 26
  1. Oct 26, 2016 #301
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    9:56 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    acmetool.sh 1.0.13 released to update DNS mode to always use --force for issue/renew.
     
  2. Oct 26, 2016 #302
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    9:56 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
  3. Oct 31, 2016 #303
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    9:56 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Update note for addons/acmetool.sh Amazon S3 related options are not yet available and will be added later on but there's a good chance I'll be able to use another Centmin Mod addons/rclone.sh added to 123.09beta01 branch to support syncing SSL certificates to multiple cloud storage providers including Google Drive, Dropbox, OneDrive, Hubic as well as AWS S3 etc. So more to come :D
     
  4. Nov 4, 2016 #304
    dorobo

    dorobo Active Member

    420
    104
    43
    Jun 6, 2014
    Ratings:
    +162
    Local Time:
    7:56 AM
    latest
    latest
    if you do these commands in succession

    Code (Text):
    ./acmetool.sh issue domainname live


    and then

    Code (Text):
    ./acmetool.sh reissue domainname lived


    inside domainname.com.ssl.conf

    at around line 58, root becomes

    Code (Text):
    root domainname.com;


    when it should be

    Code (Text):
    root /home/nginx/domains/domainname.com/public;
     
  5. Nov 4, 2016 #305
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    9:56 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    thanks for heads up.. it's why need end user feedback as steps an end user takes may not be what I'd think of or do myself :)
     
  6. Nov 4, 2016 #306
    dorobo

    dorobo Active Member

    420
    104
    43
    Jun 6, 2014
    Ratings:
    +162
    Local Time:
    7:56 AM
    latest
    latest
    I find that by going to the first command first (live) instead of going directly to lived, I don't get the error I used to get that I've posted here before that's why I go live and then lived and everything's running ok except for that root line which I just edit.
     
  7. Nov 4, 2016 #307
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    9:56 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    strange just tried your steps

    Code (Text):
    ./acmetool.sh issue domainname live


    and then

    Code (Text):
    ./acmetool.sh reissue domainname lived


    but the domain.com.ssl.conf vhost root is properly set to
    Code (Text):
    root /home/nginx/domains/domainname.com/public;

    At end of lived run you should have 2 logs created i.e.
    Code (Text):
    log files saved at /root/centminlogs
-rw-r--r--  1 root root  31K Nov  3 23:26 acmetool.sh-debug-log-031116-232621.log
-rw-r--r--  1 root root  13K Nov  3 23:26 acmesh-reissue_031116-232621.log

    would need those logs - post contents of log to pastebin.com or gist.github.com
     
  8. Nov 4, 2016 #308
    dorobo

    dorobo Active Member

    420
    104
    43
    Jun 6, 2014
    Ratings:
    +162
    Local Time:
    7:56 AM
    latest
    latest
  9. Nov 4, 2016 #309
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    9:56 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    have you run other acmetool.sh command configurations on that same domain prior without removing the nginx vhost ? could be related as running just live for me works for correct root setting.
     
  10. Nov 4, 2016 #310
    dorobo

    dorobo Active Member

    420
    104
    43
    Jun 6, 2014
    Ratings:
    +162
    Local Time:
    7:56 AM
    latest
    latest
    No. That's a newly created subdomain using centminmod command 2.
     
  11. Nov 4, 2016 #311
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    9:56 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    ah that's probably the missing piece of your steps i need to reproduce, as normally you do not need to run centmin.sh menu option 2 to create nginx vhost first as acmetool.sh itself will do that i.e. when you run
    Code (Text):
    ./acmetool.sh issue domainname

    or
    Code (Text):
    ./acmetool.sh issue domainname live

    or
    Code (Text):
    ./acmetool.sh issue domainname lived

    all will auto create nginx vhost as well as get letsencrypt ssl certificate so no need to run centmin.sh menu option 2
     
  12. Nov 4, 2016 #312
    dorobo

    dorobo Active Member

    420
    104
    43
    Jun 6, 2014
    Ratings:
    +162
    Local Time:
    7:56 AM
    latest
    latest
    Oh I see. But I only made that nginx vhost step to test. The first time I encountered that bug, the vhost was long been created because I just decided to migrate one of my old domains to https

    btw, the root bug is only found on domain.com.ssl.conf

    and not on

    domain.com.conf
     
  13. Nov 4, 2016 #313
    dorobo

    dorobo Active Member

    420
    104
    43
    Jun 6, 2014
    Ratings:
    +162
    Local Time:
    7:56 AM
    latest
    latest
    Ah okay I get it. acmetools.sh can't be used on domains where the vhost has already been created.

    acmetools.sh itself should create the vhost.

    OK so what's the option for vhosts that's already been configured?
     
  14. Nov 4, 2016 #314
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    9:56 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    yeah i saw from your log at this part
    Code (Text):
    [sslvhostsetup] create /usr/local/nginx/conf/conf.d/t1.domain.com.ssl.conf

Reloading nginx configuration (via systemctl):  [  OK  ]
grep 'root' /usr/local/nginx/conf/conf.d/t1.domain.com.conf
  root /home/nginx/domains/t1.domain.com/public;
grep 'root' /usr/local/nginx/conf/conf.d/t1.domain.com.ssl.conf
  root t1.domain.com;

    Will try reproducing the issue with centmin.sh menu option 2 run first
     
  15. Nov 4, 2016 #315
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    9:56 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    actually the end goal once addons/acmetool.sh is stable is to be able to run it on existing nginx vhosts created by centmin.sh menu option 2. Though there's so many combinations and orders of runs that end users can make for centmin.sh menu option 2 and acmetool.sh. Hence, why all the beta testing needed by end users like yourself :)
     
  16. Nov 4, 2016 #316
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    9:56 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
  17. Nov 6, 2016 #317
    pamamolf

    pamamolf Well-Known Member

    4,125
    429
    83
    May 31, 2014
    Ratings:
    +841
    Local Time:
    2:56 AM
    Nginx-1.29.x
    MariaDB 10.6.x
    Any ideas why i am getting (Invision forum)?

    [​IMG]

    and

    [​IMG]

    Can i do anything to fix them and get the green pad on the link? :)

    I install it using the acme menu and option 4 and then option 4 again :)
     
  18. Nov 6, 2016 #318
    pamamolf

    pamamolf Well-Known Member

    4,125
    429
    83
    May 31, 2014
    Ratings:
    +841
    Local Time:
    2:56 AM
    Nginx-1.29.x
    MariaDB 10.6.x
    Also to enable the HSTS i just need to uncomment:

    Code:
      
#add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";
 #add_header X-Frame-Options SAMEORIGIN;
 #add_header X-Xss-Protection "1; mode=block" always;
 #add_header X-Content-Type-Options "nosniff" always;
 #spdy_headers_comp 5;
    and restart Nginx?
     
  19. Nov 6, 2016 #319
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    9:56 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    read Nginx Vhost & NSD DNS Setup - CentminMod.com LEMP Nginx web stack for CentOS

    that is web app specific, you need to understand your web app i.e invision board and troubleshoot it's HTTPS compatibility so something for a more appropriate forum Forum software usage | Centmin Mod Community as this thread is for addons/acmetool.sh which just issues the letsencrypt ssl cert and nginx vhost setup. The HTTPS compatibility of your web app is specific to your own web app and official web app documentation for HTTPS usage.
     
  20. Nov 6, 2016 #320
    pamamolf

    pamamolf Well-Known Member

    4,125
    429
    83
    May 31, 2014
    Ratings:
    +841
    Local Time:
    2:56 AM
    Nginx-1.29.x
    MariaDB 10.6.x
    Great thanks now is working perfect !!!!! :)

    Recommendations:

    My recommendation is to have the file staticfiles-hsts.conf already in place when Cenminmod install or at least auto generated when a user try to enable https using the acme tool as it doesn't seem so hard to do :)

    Also when a user try to enable https to have that line commented on the ssh vhost generated config.

    Code:
    #include /usr/local/nginx/conf/staticfiles-hsts.conf;
    That will make it a lot more easy and faster :)
     
Previous Thread Next Thread
Loading...
Page 16 of 26

.