imbrish / letsencrypt Goto Github PK
View Code? Open in Web Editor NEWAutomatic issuing and renewal of Let's Encrypt SSL certificates on shared hostings.
License: GNU General Public License v3.0
letsencrypt's People
Contributors
Stargazers
Watchers
letsencrypt's Issues
Use UAPI to install certificates
It looks like cPanel provides uapi tool to access its features from the command line:
Issues when running on GoDaddy hosting
First, this is an amazing tool that makes letsencrypt be viable when managing multiple domains.
I have a working web environment (separate domain from other ticket) with a certificate already set up with LetsEncrypt. I'm trying to use the script to check it.
Instead, it looks like it's requesting a new cert, and failing
'/opt/alt/php56/usr/bin/php' '/home/ricksdomain/letsencrypt/bin/acme' 'setup' '--email' '[email protected]' '--server' 'letsencrypt' '--storage' '/home/ricksdomain/letsencrypt/storage'
Using existing private key ...
Registering with acme-v01.api.letsencrypt.org/directory ...
Registration successful. Contacts: mailto:[email protected]
'/opt/alt/php56/usr/bin/php' '/home/ricksdomain/letsencrypt/bin/acme' 'check' '--name' 'dnd.ricksdomain.net' '--ttl' '30' '--names' 'dnd.ricksdomain.net' '--server' 'letsencrypt' '--storage' '/home/ricksdomain/letsencrypt/storage'
Certificate not found.
'/opt/alt/php56/usr/bin/php' '/home/ricksdomain/letsencrypt/bin/acme' 'issue' '--domains' 'dnd.ricksdomain.net' '--path' '/home/ricksdomain/public_html/dnd.ricksdomain.net' '--bits' '4096' '--server' 'letsencrypt' '--storage' '/home/ricksdomain/letsencrypt/storage'
Providing payload at http://dnd.ricksdomain.net/.well-known/acme-challenge/j51Pt8jKWDkGkeB4AA9G6wVkNBaJbDfSEmmacXg7Eds
dnd.ricksdomain.net is now authorized.
Requesting certificate ...
Successfully issued certificate.
See /home/ricksdomain/letsencrypt/storage/certs/acme-v01.api.letsencrypt.org.directory/dnd.ricksdomain.net
Certificate issued for domains: dnd.ricksdomain.net.
'/opt/alt/php56/usr/bin/php' '/home/ricksdomain/letsencrypt/vendor/neurobin/sslic/sslic.php' 'dnd.ricksdomain.net' '/home/ricksdomain/letsencrypt/storage/certs/acme-v01.api.letsencrypt.org.directory/dnd.ricksdomain.net/cert.pem' '/home/ricksdomain/letsencrypt/storage/certs/acme-v01.api.letsencrypt.org.directory/dnd.ricksdomain.net/key.pem' '/home/ricksdomain/letsencrypt/storage/certs/acme-v01.api.letsencrypt.org.directory/dnd.ricksdomain.net/chain.pem'
domain: dnd.ricksdomain.net
The CURL call did not return valid JSON
Error when installing certificate for dnd.ricksdomain.net
Switch to Neilpang/acme.sh?
The https://github.com/Neilpang/acme.sh may be a more robust alternative to automatically issue, renew and install Let's Encrypt certificates. It doesn't require root access, offers wide configuration options, supports shared hostings of many providers and can even register itself in the crontab.
A few relevant guides:
.well-known/acme-challenge is not created
Do we have option for deleting old SSL certificates
Is there any option for deleting old Certificates automatically from server along with old Private Keys, those are listing like junk in cPanel.
.well-known/acme-challenge is not created or cert not installed.
At least I think that's the problem. Installation went fine.
Here's the output from bin/letsencrypt (I modified the expire to 91 so it would run a second time).
ricksID@servername [~/letsencrypt]$ bin/letsencrypt
'/opt/alt/php56/usr/bin/php' '/home/ricksID/letsencrypt/bin/acme' 'setup' '--email' '[email protected]' '--server' 'letsencrypt' '--storage' '/home/ricksID/letsencrypt/storage'
Using existing private key ...
Registering with acme-v01.api.letsencrypt.org/directory ...
Registration successful. Contacts: mailto:[email protected]
'/opt/alt/php56/usr/bin/php' '/home/ricksID/letsencrypt/bin/acme' 'check' '--name' 'ricksdomain.net' '--ttl' '91' '--names' 'ricksdomain.net,www.ricksdomain.net' '--server' 'letsencrypt' '--storage' '/home/ricksID/letsencrypt/storage'
Certificate is valid until 16.09.2018
Certificate is going to expire within the specified 91 days.
'/opt/alt/php56/usr/bin/php' '/home/ricksID/letsencrypt/bin/acme' 'issue' '--domains' 'ricksdomain.net:www.ricksdomain.net' '--path' '/home/ricksID/public_html/www.ricksdomain.net:/home/ricksID/public_html/www.ricksdomain.net' '--bits' '4096' '--server' 'letsencrypt' '--storage' '/home/ricksID/letsencrypt/storage'
Providing payload at http://ricksdomain.net/.well-known/acme-challenge/18ZrkzA947gTmoWrI2ubQNyMp9j1XJ1Gvbp-oPfiw2M
Providing payload at http://www.ricksdomain.net/.well-known/acme-challenge/V9dDR2GTG-Rfa3AKt948EPi7EGjwJTDXD3oYZ7aLTck
ricksdomain.net is now authorized.
www.ricksdomain.net is now authorized.
Requesting certificate ...
Successfully issued certificate.
See /home/ricksID/letsencrypt/storage/certs/acme-v01.api.letsencrypt.org.directory/ricksdomain.net
Certificate issued for domains: ricksdomain.net, www.ricksdomain.net.
I went ahead and created the directories, but they don't seem to populate. The files are in /home/ricksID/letsencrypt/storage/certs/acme-v01.api.letsencrypt.org.directory/ricksdomain.net
They do not show up in the GoDaddy Manage SSH Keys page.
It could relate to the fact that I'm trying to add the keys for a sub domain? I don't know.
I'm aware that I'll have to update the .htaccess file, but I need the certs to install first.
different config file from CLI
I know the script supports multiple domains inside the same config file. Does it support different config files from the cli, such as:
bin/letsencrypt domain1.config.yml
or
bin/letsencrypt ./domain.config.yml
?
Acme v1 - End of life
Hi imbrish,
As you probably know Let's encrypt ended its support for ACME V1 a few months ago.
Do you think it would be possible for you to update your repository to use ACME V2.
I had this running on a friends GoDaddy server (although I personally do not like GoDaddy at all, very crapy service) but all his websites have invalid certificates now.
Thanks
Errors Out On NameCheap Shared Host
I am working with Namecheap's "Professional" hosting package, connected to my host via SSH.
Running a "which php" gives me /usr/local/bin/php.
Running "/usr/local/bin/php -v" returns "PHP 5.3.29 (cli) (built: Jul 17 2017 19:21:27)"
Executed the following commands:
cd ~/;
git clone https://github.com/imbrish/letsencrypt;
cd letsencrypt;
composer install;
cp config.yml.example config.yml;
chmod 600 config.yml;
nano config.yml;
chmod 775 bin/letsencrypt;
bin/letsencrypt;
This generates the following error:
[10-Aug-2017 19:35:49 America/New_York] PHP Parse error: syntax error, unexpected '[' in /home/(MyUsernameHere)/letsencrypt/bin/letsencrypt on line 37
UAPI access to cPanel is not available
I have no ssh access to my shared server so I have put it on a corn job and when it runs, it sends me an error as mentioned above. I do have the cPanel UAPI token with me but I have no clue where to put it on your solution. Can you please shed some light on this?
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.