openmediavault-plugin-developers / openmediavault-letsencrypt Goto Github PK

This project forked from fubz/openmediavault-letsencrypt

Plugin for generating letsencrypt.org certificates for Open Media Vault

PHP 34.42% Shell 20.64% JavaScript 44.94%

openmediavault-letsencrypt's Introduction

openmediavault-letsencrypt

Using the power of Let's Encrypt, generate valid SSL certificates for your OpenMediaVault. Your SSL certificate will be recognized by the majority of browsers.

The key principles behind Let’s Encrypt are:

Free: Anyone who owns a domain name can use Let’s Encrypt to obtain a trusted certificate at zero cost.
Automatic: Software running on a web server can interact with Let’s Encrypt to painlessly obtain a certificate, securely configure it for use, and automatically take care of renewal.
Secure: Let’s Encrypt will serve as a platform for advancing TLS security best practices, both on the CA side and by helping site operators properly secure their servers.
Transparent: All certificates issued or revoked will be publicly recorded and available for anyone to inspect.
Open: The automatic issuance and renewal protocol will be published as an open standard that others can adopt.
Cooperative: Much like the underlying Internet protocols themselves, Let’s Encrypt is a joint effort to benefit the community, beyond the control of any one organization.

Linux Foundation: Let's Encrypt Homepage

openmediavault-letsencrypt's People

Contributors

Stargazers

Watchers

Forkers

luxflow vpistis hans00 muyuballs mbarczak lucasnetau brinster71 bhepburn

openmediavault-letsencrypt's Issues

feature request: add the `standalone` option to generate certs

Hi,

this plugin works very well for me, but in some case I must run a standalone webserver to renew certs. There is some chance to add this option to the plugin?

Thanx a lot

Translating this plugin

How can I translate this plugin? I can't find it on Transifex.

SSL cert not copied to /etc/ssl/ directory

Hi,

I have a problem with this plugin. It refreshes the .certs and .key file periodically. The new certs are located at /etc/letsencrypt/live. But the nginx reverse proxy requires the files at /etc/ssl/.

Is there something configured wrong?

OMV 5 Support

Hi,

any chance to bring this plugin back to OMV 5? It was a bit of a pain to set LetsEncrypt up via Docker and configure a ReverseProxy in front of it. And I think its a bit too complex and complicated.
The LetsEncrypt experience with OMV 4 was very nice and smooth though!

Notification for pending changes appears after renewal was executed

When I execute omv-rpc "LetsEncrypt" "generateCertificate" "{\"command\":\"renew\"}" I get the yellow notification in web console to apply my changes.

I guess this command is meant to be executed automatically and no further interaction should be required by the admin.

openmediavault-letsencrypt 3.4.5
OMV 4.1.22-1

Open port with upnpc (optionally)

Hello,

what do you think about optionally opening the port for the webserver during the renewal:
Quellcode
apt-get install upnpc
upnpc -d 443 TCP
letsencrypt renew
upnpc -r 443 TCP

Greetings,
Hendrik

Certificate contains not all alternative domain names given in the plugin

I saw that the automatic renewal did not work, because only my main domain was included in the cert.
omv-rpc "LetsEncrypt" "generateCertificate" "{\"command\":\"renew\"}" > /dev/null 2>&1

Then I tried to force the refresh of the cert by the plugin. This time non of the comma separated domains mentioned in the plugin made its way into the cert. Then I tried again. This time only three domains were validated. Two were missing.

letsencrypt.txt

How does it come sometimes none, another three are validated?

OMV-LE 3.4.5

Installation help

Hi,
Could you clarify how I'd parse the {distribution} and {components} bits, please? I'm on Arrakis 4.1.3-1

Would I type this: echo "deb https://dl.bintray.com/openmediavault-plugin-developers/arrakis 4.1.3-1" | sudo tee -a /etc/apt/sources.list

Or simply enter it as it is, like this?

echo "deb https://dl.bintray.com/openmediavault-plugin-developers/arrakis {distribution} {components}" | sudo tee -a /etc/apt/sources.list

I'm sorry to be so dense, but I'm not very techy.

RSA key length to 4096

It wuld be nice to us a RSA key length to 4096 by default
see more details http://forum.openmediavault.org/index.php/Thread/12452-openmediavault-letsencrypt/?postID=138402#post138402

how to change challange to DNS ?

Hi,
I wander if you can add the ability to make challenge by dns some ISPs disable the port 80 toward clients
i know that is build in already and can be done with this command (for he.net dynamic server )
acme.sh --issue --dns dns_he -d mydomain.com