[prev in list] [next in list] [prev in thread] [next in thread] 

List:       webmin-l
Subject:    Re: [webmin-l] let's encrypt for virtualmin admin panels?
From:       "Jamie Cameron" <jcameron () webmin ! com>
Date:       2017-03-14 21:14:57
Message-ID: 1489526097.8161 () webmin ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


I'm looking into it for Dovecot, as it is at least theoretically possible. Postfix \
may be limited to doing this for domains with their own private IPs though.  

On 14/Mar/2017 11:34 Pat Erler <perler@gmail.com> wrote ..   yep, this would have \
been my next question too :)  On Tue, Mar 14, 2017 at 7:21 PM Pablo Manuel Rizzo \
<info@pablorizzo.com> wrote:   Is it possible to do the same with Dovecot and \
Postfix? So email clients validate imap and smtp ssl certificates for every hosted \
virtual server?   14 de marzo del 2017 13:46, "Pat Erler" <perler@gmail.com> \
escribi=C3=B3:     synchronicity ;)  On Tue, Mar 14, 2017 at 5:41 PM Jamie Cameron \
<jcameron@webmin.com> wrote: On 14/Mar/2017 08:40 Pat Erler <perler@gmail.com> wrote \
..> hi,>> I wonder if jamie could built the virtualmin webserver in a way, that it> \
uses the let's encrypt certificates for the virtual servers' admin panels.> Here is \
what i mean:>> right now you can use one certificate to secure the main server's \
webmin> panel:>> https://mainserver.com:10000>> when you access the server via a \
virtual server name you get the red lock:>> https://virtualserver.com:10000>> I \
wonder if i  t would be possible to server the virtualserver.com's SSL> certificate \
when accessing the address above resulting in a nice green lock> and now warnings \
from the browser.Good news - I just finished implementing this last night. Previously \
webmindidn't support per-domain SSL certs, only per-IP, so it wasn't possible todo \
what you suggest in all cases. This will be fixed in the next releases ofwebmin and \
virtualmin though. - \
Jamie------------------------------------------------------------------------------Check \
out the vibrant tech community on one of the world's mostengaging tech sites, \
Slashdot.org! http://sdm.link/slashdot-Forwarded by the Webmin mailing list at \
webadmin-list@lists.sourceforge.netTo remove yourself from this list, go \
tohttp://lists.sourceforge.net/lists/listinfo/webadmin-list   --         \
------------------------------------------------------------------------------ Check \
out the vibrant tech community on one of the world's most engaging tech sites, Slashd \
ot.org! http://sdm.link/slashdot- Forwarded by the Webmin mailing list at \
webadmin-list@lists.sourceforge.net To remove yourself from this list, go to \
http://lists.sourceforge.net/lists/listinfo/webadmin-list   --        


[Attachment #5 (text/html)]

<p>I'm looking into it for Dovecot, as it is at least theoretically possible. Postfix \
may be limited to doing this for domains with their own private IPs though.&nbsp;</p> \
<p>On 14/Mar/2017 11:34 Pat Erler &lt;perler@gmail.com&gt; wrote .. </p>
  <blockquote type="cite">
    <div dir="ltr">yep, this would have been my next question too :)</div><br />
    <div class="gmail_quote">
      <div dir="ltr">On Tue, Mar 14, 2017 at 7:21 PM Pablo Manuel Rizzo &lt;<a \
href="reply_mail.cgi?new=1&amp;to=info%40pablorizzo%2Ecom">info@pablorizzo.com</a>&gt; \
                wrote:<br /></div>
      <blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left: \
1px solid #cccccc; padding-left: 1ex;"><u class="gmail_msg"></u>  <div \
class="gmail_msg">  <div style="font-family: arial, sans-serif; font-size: 13px;" \
class="gmail_msg">Is it possible to do the same with Dovecot and Postfix? So email \
clients validate imap and smtp ssl certificates for every hosted virtual \
server?</div>  </div>
        <div class="gmail_msg">
          <div style="font-family: arial, sans-serif; font-size: 13px;" \
class="gmail_msg"><br class="gmail_msg" /><br class="gmail_msg" />14 de marzo del \
2017 13:46, &quot;Pat Erler&quot; &lt;<a \
href="reply_mail.cgi?new=1&amp;to=%22Pat%20Erler%22%20%3Cperler%40gmail%2Ecom%3E" \
class="gmail_msg" target="_blank">perler@gmail.com</a>&gt; escribió:  <blockquote \
class="gmail_msg">  <div class="gmail_msg">
                <div class="gmail_msg">
                  <div dir="ltr" class="gmail_msg">
                    <div dir="ltr" class="gmail_msg">synchronicity ;)</div>
                    <div class="gmail_msg">
                      <div dir="ltr" class="gmail_msg">On Tue, Mar 14, 2017 at 5:41 \
PM Jamie Cameron &lt;<a rel="external nofollow" \
href="reply_mail.cgi?new=1&amp;to=jcameron%40webmin%2Ecom" class="gmail_msg" \
target="_blank">jcameron@webmin.com</a>&gt; wrote:</div>  <blockquote style="margin: \
0px 0px 0px 0.8ex; border-left: 1px solid #cccccc; padding-left: 1ex;" \
class="gmail_msg">On 14/Mar/2017 08:40 Pat Erler &lt;<a rel="external nofollow" \
href="reply_mail.cgi?new=1&amp;to=perler%40gmail%2Ecom" class="gmail_msg" \
target="_blank">perler@gmail.com</a>&gt; wrote ..<br class="gmail_msg" />&gt; hi,<br \
class="gmail_msg" />&gt;<br class="gmail_msg" />&gt; I wonder if jamie could built \
the virtualmin webserver in a way, that it<br class="gmail_msg" />&gt; uses the let's \
encrypt certificates for the virtual servers' admin panels.<br class="gmail_msg" \
/>&gt; Here is what i mean:<br class="gmail_msg" />&gt;<br class="gmail_msg" />&gt; \
right now you can use one certificate to secure the main server's webmin<br \
class="gmail_msg" />&gt; panel:<br class="gmail_msg" />&gt;<br class="gmail_msg" \
/>&gt; <a rel="external nofollow" href="https://mainserver.com:10000" \
class="gmail_msg" target="  _blank">https://mainserver.com:10000</a><br \
class="gmail_msg" />&gt;<br class="gmail_msg" />&gt; when you access the server via a \
virtual server name you get the red lock:<br class="gmail_msg" />&gt;<br \
class="gmail_msg" />&gt; <a rel="external nofollow" \
href="https://virtualserver.com:10000" class="gmail_msg" \
target="_blank">https://virtualserver.com:10000</a><br class="gmail_msg" />&gt;<br \
class="gmail_msg" />&gt; I wonder if it would be possible to server the <a \
rel="external nofollow" href="http://virtualserver.com" class="gmail_msg" \
target="_blank">virtualserver.com</a>'s SSL<br class="gmail_msg" />&gt; certificate \
when accessing the address above resulting in a nice green lock<br class="gmail_msg" \
/>&gt; and now warnings from the browser.<br class="gmail_msg" /><br \
class="gmail_msg" />Good news - I just finished implementing this last night. \
Previously webmin<br class="gmail_msg" />didn't support per-domain SSL certs, only \
per-IP,  so it wasn't possible to<br class="gmail_msg" />do what you suggest in all \
cases. This will be fixed in the next releases of<br class="gmail_msg" />webmin and \
virtualmin though.<br class="gmail_msg" /><br class="gmail_msg" />&nbsp;- Jamie<br \
class="gmail_msg" /><br class="gmail_msg" \
/>------------------------------------------------------------------------------<br \
class="gmail_msg" />Check out the vibrant tech community on one of the world's \
most<br class="gmail_msg" />engaging tech sites, Slashdot.org! <a rel="external \
nofollow" href="http://sdm.link/slashdot" class="gmail_msg" \
target="_blank">http://sdm.link/slashdot</a><br class="gmail_msg" />-<br \
class="gmail_msg" />Forwarded by the Webmin mailing list at <a rel="external \
nofollow" href="reply_mail.cgi?new=1&amp;to=webadmin%2Dlist%40lists%2Esourceforge%2Enet" \
class="gmail_msg" target="_blank">webadmin-list@lists.sourceforge.net</a><br \
class="gmail_msg" />To remove yourself from  this list, go to<br class="gmail_msg" \
/><a rel="external nofollow" \
href="http://lists.sourceforge.net/lists/listinfo/webadmin-list" class="gmail_msg" \
target="_blank">http://lists.sourceforge.net/lists/listinfo/webadmin-list</a></blockquote>
  </div>
                  </div>
                  <div dir="ltr" class="gmail_msg">--</div>
                  <div data-smartmail="gmail_signature" class="gmail_msg">
                    <div dir="ltr" class="gmail_msg"></div>
                  </div>
                </div>
              </div>
            </blockquote>
          </div>
        </div>
------------------------------------------------------------------------------<br \
class="gmail_msg" /> Check out the vibrant tech community on one of the world's \
most<br class="gmail_msg" /> engaging tech sites, Slashdot.org! <a \
href="http://sdm.link/slashdot" rel="noreferrer" class="gmail_msg" \
target="_blank">http://sdm.link/slashdot</a>-<br class="gmail_msg" /> Forwarded by \
the Webmin mailing list at <a \
href="reply_mail.cgi?new=1&amp;to=webadmin%2Dlist%40lists%2Esourceforge%2Enet" \
class="gmail_msg" target="_blank">webadmin-list@lists.sourceforge.net</a><br \
class="gmail_msg" /> To remove yourself from this list, go to<br class="gmail_msg" /> \
<a href="http://lists.sourceforge.net/lists/listinfo/webadmin-list" rel="noreferrer" \
class="gmail_msg" target="_blank">http://lists.sourceforge.net/lists/listinfo/webadmin-list</a><br \
class="gmail_msg" />  </blockquote>
    </div>
    <div dir="ltr">-- <br /></div>
    <div data-smartmail="gmail_signature">
      <div dir="ltr">
        <p dir="ltr"><br /></p>
      </div>
    </div>
  </blockquote><br /> <br />



------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

-
Forwarded by the Webmin mailing list at webadmin-list@lists.sourceforge.net
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic