Learn about Centmin Mod LEMP Stack today
Become a Member

Letsencrypt with custom certificate -subj information

Discussion in 'Domains, DNS, Email & SSL Certificates' started by R0rke, Dec 29, 2017.

  1. R0rke

    R0rke Member

    102
    16
    18
    Jun 2, 2016
    Iran
    Ratings:
    +24
    Local Time:
    4:51 AM
    1.11.1
    10.1
    is it possible to replace

    -subj \"/C=${SELFSIGNEDSSL_C}/ST=${SELFSIGNEDSSL_ST}/L=${SELFSIGNEDSSL_L}

    to : -subj \"/C=Country/ST=State/any=anything/
    i want to use my custom information on Issued lets encrypt SSL
     
  2. eva2000

    eva2000 Administrator Staff Member

    31,657
    7,032
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,639
    Local Time:
    10:51 PM
    Nginx 1.13.x
    MariaDB 5.5
    letsencrypt doesn't use those fields only untrusted self-signed ssl certificates that centmin mod nginx vhost can generate. You can override those values via persistent config file /etc/centminmod/custom_config.inc setting PRIOR to running centmin.sh nginx vhost creation menu routines the variables for
    Code (Text):
    SELFSIGNEDSSL_C=
    SELFSIGNEDSSL_ST=
    SELFSIGNEDSSL_L=
    
     
    • Informative Informative x 1
  3. R0rke

    R0rke Member

    102
    16
    18
    Jun 2, 2016
    Iran
    Ratings:
    +24
    Local Time:
    4:51 AM
    1.11.1
    10.1
    there is no custom_config file there . i checked /etc/centminmod directory
     
  4. pamamolf

    pamamolf Well-Known Member

    2,903
    261
    83
    May 31, 2014
    Ratings:
    +464
    Local Time:
    2:51 PM
    Nginx-1.13.x
    MariaDB 10.1.x
    You can create it :)

     
    • Agree Agree x 1
    • Friendly Friendly x 1
  5. R0rke

    R0rke Member

    102
    16
    18
    Jun 2, 2016
    Iran
    Ratings:
    +24
    Local Time:
    4:51 AM
    1.11.1
    10.1
    i don't know how to fill it i mean put code in it .

    is it ok i use this ?

    Code:
    SELFSIGNEDSSL_C='US'
    SELFSIGNEDSSL_ST='California'
    SELFSIGNEDSSL_L='Los Angeles'
    SELFSIGNEDSSL_O=''
    SELFSIGNEDSSL_OU=''
     
  6. pamamolf

    pamamolf Well-Known Member

    2,903
    261
    83
    May 31, 2014
    Ratings:
    +464
    Local Time:
    2:51 PM
    Nginx-1.13.x
    MariaDB 10.1.x
    Yes you just put the code inside and save it.....but the code inside should be values that was set to use there and Centminmod can understand them and not any custom yours code....
     
    • Like Like x 1
    • Agree Agree x 1
  7. R0rke

    R0rke Member

    102
    16
    18
    Jun 2, 2016
    Iran
    Ratings:
    +24
    Local Time:
    4:51 AM
    1.11.1
    10.1
    i do but when i check the certificate its showing same before i mean i set custom orginazation name but its empty on browser
     
  8. eva2000

    eva2000 Administrator Staff Member

    31,657
    7,032
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,639
    Local Time:
    10:51 PM
    Nginx 1.13.x
    MariaDB 5.5
    existing self-signed ssl certs won't change, only new ones created once variables changed in persistent config file will change.

    to change existing ssl cert, you need to create a new self-signed ssl certificate - i.e. on separate test vps create and copy and overwrite files in /usr/local/nginx/conf/ssl/yourdomain.com with new ones created a separate test vps server

    remember this is for self-signed ssl certs only not letsencrypt ssl certs which don't have these fields and can't be controlled via above variables
     
    • Informative Informative x 1
  9. R0rke

    R0rke Member

    102
    16
    18
    Jun 2, 2016
    Iran
    Ratings:
    +24
    Local Time:
    4:51 AM
    1.11.1
    10.1
    so you mean i create new self signed ssl then replace with older certificates ?
     
  10. eva2000

    eva2000 Administrator Staff Member

    31,657
    7,032
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,639
    Local Time:
    10:51 PM
    Nginx 1.13.x
    MariaDB 5.5
    yes for existing self-signed ssl certs