[prev in list] [next in list] [prev in thread] [next in thread]
List: webmin-l
Subject: Re: [webmin-l] 4.99 letsencrypt new features not working?
From: Pat Erler <perler () gmail ! com>
Date: 2017-06-05 10:58:21
Message-ID: CAHk2_+ghe0h75YvTS128gP6+8PofMJdYndqeeJdtqXOK4eePEQ () mail ! gmail ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
ok, and I now tried this with a brand new domain and still, on port 993 the
primary certificate is served, not the letsencrypt certificate for the
specific domain.
On Sat, Jun 3, 2017 at 4:50 PM Pat Erler <perler@gmail.com> wrote:
> unfortunately this doesn't work that way. I tested it with
>
> #!/bin/sh
> virtualmin disable-feature --ssl --domain domains.com
> virtualmin enable-feature --ssl --domain domains.com
>
> problem mainly seems to be, that their is no letsencrypt certificate
> requested this way, so nothing is copied. this is a domain which already
> had a letsencrypt certificate.
>
> On Fri, Jun 2, 2017 at 7:49 PM Jamie Cameron <jcameron@webmin.com> wrote:
>
>> You could use the Virtualmin command-line API to loop over your domains
>> with SSL enabled ad re-enable it for each one.
>>
>> And yes, it will work in usermin too.
>>
>> On 02/Jun/2017 08:47 Pat Erler <perler@gmail.com> wrote ..
>>
>> ok, but we have a lot of domains on the servers, some bulk option would
>> be nice to have..
>> also, does the certificate works in usermin?
>>
>> On Fri, Jun 2, 2017 at 5:30 PM Michael Huntley <michael@huntley.net
>> <http://reply_mail.cgi?new=1&to=michael%40huntley%2Enet>> wrote:
>>
>>> Works for me!
>>>
>>>
>>> On 2017-06-02 08:12, Jamie Cameron wrote:
>>>
>>> You could turn SSL off and on again on the Edit Virtual Server page.
>>>
>>> On 01/Jun/2017 21:10 Michael Huntley <michael@huntley.net
>>> <http://reply_mail.cgi?new=1&to=michael%40huntley%2Enet>> wrote ..
>>>
>>> So no-joy with existing domains with SSL?
>>>
>>> On 2017-06-01 18:40, Jamie Cameron wrote:
>>>
>>> Hi Pat,
>>>
>>> You don't need to click that Copy to Dovecot button - the cert should be
>>> copied to the per-domain Dovecot config automatically (for new domains).
>>>
>>> On 30/May/2017 02:32 Pat Erler <perler@gmail.com
>>> <http://reply_mail.cgi?new=1&to=perler%40gmail%2Ecom>> wrote ..
>>>
>>> ok, first, sorry, I meant 5.99 all along.
>>> this is what I am running (s. below), but the problem is as described.
>>> As soon as I try to copy a let's encrypt certificate to webmin or dovecot
>>> every request to the servers IP gets served this certificate.
>>> Operating system Ubuntu Linux 14.04.5
>>> Webmin version 1.840
>>> Virtualmin version 5.99
>>>
>>> On Tue, May 30, 2017 at 12:01 AM Jamie Cameron <jcameron@webmin.com>
>>> wrote:
>>>
>>>> It will ... in Virtualmin 5.99 and above.
>>>>
>>>> On 29/May/2017 07:34 Pat Erler <perler@gmail.com> wrote ..
>>>>
>>>> Does it? Will it? :)
>>>>
>>>> On Fri, May 26, 2017 at 6:50 AM Pat Erler <perler@gmail.com
>>>> <http://reply_mail.cgi?new=1&to=perler%40gmail%2Ecom>> wrote:
>>>>
>>>>> ok, I've seen this option, but it's a bit confusing. I was under the
>>>>> impression that this would work for domains with a shared IP as well?
>>>>>
>>>>> On Fri, 26 May 2017, 04:14 Jamie Cameron, <jcameron@webmin.com
>>>>> <http://reply_mail.cgi?new=1&to=jcameron%40webmin%2Ecom>> wrote:
>>>>>
>>>>>> You don't need to use that button - it copies the cert to the
>>>>>> Dovecot default. Instead, there is a setting on the Virtualmin
>>>>>> Configuration page under "SSL settings" called "Copy per-IP SSL
>>>>>> certificates to Dovecot?"
>>>>>>
>>>>>> This will enable copying for new domains, or when SSL is enabled
>>>>>> for existing domains.
>>>>>>
>>>>>> On 24/May/2017 22:20 Pat Erler <perler@gmail.com
>>>>>> <http://reply_mail.cgi?new=1&to=perler%40gmail%2Ecom>> wrote ..
>>>>>> > changelog says:
>>>>>> >
>>>>>> >
>>>>>> > - SSL certificates can now be copied to Dovecot even for virtual
>>>>>> servers
>>>>>> > that don't have their own private IP address.
>>>>>> > - The SSL certificate for all virtual servers will now be
>>>>>> configured for
>>>>>> > use in t he Virtualmin UI on port 10000, so that URLs like
>>>>>> > https://admin.domain.com:10000/ work without cert errors.
>>>>>> >
>>>>>> >
>>>>>> > but when I press "copy to.." webmin/dovecot the certificates for all
>>>>>> > domains get overwritten (ie the "main" domain)
>>>>>> >
>>>>>> > so, either this setting is somewhere else or it doesn't seem to
>>>>>> work?
>>>>>> >
>>>>>> > best,
>>>>>> >
>>>>>> > PAT
>>>>>> >
>>>>>> > --
>>>>>>
>>>>>>
>>>>>> ------------------------------------------------------------------------------
>>>>>> Check out the vibrant tech community on one of the world's most
>>>>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>>>>> -
>>>>>> Forwarded by the Webmin mailing list at webadmin-list@li
>>>>>> sts.sourceforge.net
>>>>>> <http://reply_mail.cgi?new=1&to=we%0D%20badmin%2Dlist%40lists%2Esourceforge%2Enet>
>>>>>> To remove yourself from this list, go to
>>>>>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>>>>
>>>>> --
>>>>>
>>>> --
>>>>
>>>>
>>>>
>>>>
>>>> ------------------------------------------------------------------------------
>>>> Check out the vibrant tech community on one of the world's most
>>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot-
>>>> Forwarded by the Webmin mailing list at
>>>> webadmin-list@lists.sourceforge.net
>>>> To remove yourself from this list, go to
>>>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>>
>>> --
>>>
>>>
>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>>
>>> -
>>> Forwarded by the Webmin mailing list at
>>> webadmin-list@lists.sourceforge.net
>>> To remove yourself from this list, go to
>>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>>
>>>
>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>>
>>> -
>>> Forwarded by the Webmin mailing list at
>>> webadmin-list@lists.sourceforge.net
>>> <http://reply_mail.cgi?new=1&to=webadmin%2Dlist%40lists%2Esourceforge%2Enet>
>>> To remove yourself from this list, go to
>>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot-
>>> Forwarded by the Webmin mailing list at
>>> webadmin-list@lists.sourceforge.net
>>> <http://reply_mail.cgi?new=1&to=webadmin%2Dlist%40lists%2Esourceforge%2Enet>
>>> To remove yourself from this list, go to
>>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>>
>> --
>>
>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot-
>> Forwarded by the Webmin mailing list at
>> webadmin-list@lists.sourceforge.net
>> To remove yourself from this list, go to
>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>
> --
>
>
> --
[Attachment #5 (text/html)]
<div dir="ltr">ok, and I now tried this with a brand new domain and still, on port \
993 the primary certificate is served, not the letsencrypt certificate for the \
specific domain.</div><br><div class="gmail_quote"><div dir="ltr">On Sat, Jun 3, 2017 \
at 4:50 PM Pat Erler <<a href="mailto:perler@gmail.com">perler@gmail.com</a>> \
wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 \
.8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">unfortunately this \
doesn't work that way. I tested it with \
<div><br></div><div><div>#!/bin/sh</div><div>virtualmin disable-feature --ssl \
--domain <a href="http://domains.com" \
target="_blank">domains.com</a><br></div></div><div>virtualmin enable-feature --ssl \
--domain <a href="http://domains.com" \
target="_blank">domains.com</a><br></div><div><br></div><div>problem mainly seems to \
be, that their is no letsencrypt certificate requested this way, so nothing is \
copied. this is a domain which already had a letsencrypt \
certificate.</div></div><br><div class="gmail_quote"><div dir="ltr">On Fri, Jun 2, \
2017 at 7:49 PM Jamie Cameron <<a href="mailto:jcameron@webmin.com" \
target="_blank">jcameron@webmin.com</a>> wrote:<br></div><blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"><p>You could use the Virtualmin command-line API to loop over \
your domains with SSL enabled ad re-enable it for each one.<br><br>And yes, it will \
work in usermin too. </p> <p>On 02/Jun/2017 08:47 Pat Erler <<a \
href="mailto:perler@gmail.com" target="_blank">perler@gmail.com</a>> wrote .. </p>
<blockquote type="cite">
<div dir="ltr">ok, but we have a lot of domains on the servers, some bulk option \
would be nice to have.. <div>also, does the certificate works in usermin?</div>
</div><br>
<div class="gmail_quote">
<div dir="ltr">On Fri, Jun 2, 2017 at 5:30 PM Michael Huntley <<a \
href="http://reply_mail.cgi?new=1&to=michael%40huntley%2Enet" \
target="_blank">michael@huntley.net</a>> wrote:<br></div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px \
solid #cccccc;padding-left:1ex">
<div style="font-size:10pt;font-family:Verdana,Geneva,sans-serif">
<p>Works for me!</p>
</div>
<div style="font-size:10pt;font-family:Verdana,Geneva,sans-serif">
<div> </div>
<p><br></p>
<p>On 2017-06-02 08:12, Jamie Cameron wrote:</p>
<blockquote type="cite" style="padding:0px 0.4em;border-left:2px solid \
#1010ff;margin:0px">
<p>You could turn SSL off and on again on the Edit Virtual Server page. \
</p> <p>On 01/Jun/2017 21:10 Michael Huntley <<a \
href="http://reply_mail.cgi?new=1&to=michael%40huntley%2Enet" \
target="_blank">michael@huntley.net</a>> wrote ..</p>
<blockquote type="cite" style="padding:0px 0.4em;border-left:2px solid \
#1010ff;margin:0px"> <p>So no-joy with existing domains with SSL?</p>
<p>On 2017-06-01 18:40, Jamie Cameron wrote:</p>
<blockquote style="padding:0px 0.4em;border-left:2px solid \
#1010ff;margin:0px"> <p>Hi Pat,<br><br>You don't need to click that Copy to \
Dovecot button - the cert should be copied to the per-domain Dovecot config \
automatically (for new domains).</p> <p>On 30/May/2017 02:32 Pat Erler <<a \
href="http://reply_mail.cgi?new=1&to=perler%40gmail%2Ecom" \
target="_blank">perler@gmail.com</a>> wrote ..</p>
<blockquote style="padding:0px 0.4em;border-left:2px solid \
#1010ff;margin:0px">
<div dir="ltr">ok, first, sorry, I meant 5.99 all along.
<div> </div>
<div>this is what I am running (s. below), but the problem is as \
described. As soon as I try to copy a let's encrypt certificate to webmin or \
dovecot every request to the servers IP gets served this certificate.</div> <div> \
</div> <div>
<table \
class="m_-1728766091239955157m_-7642493242991982609m_-4388910018882712375inbox-inbox-table \
m_-1728766091239955157m_-7642493242991982609m_-4388910018882712375inbox-inbox-table-hover" \
style="box-sizing:border-box;border-collapse:collapse;width:982px;max-width:100%;margin-bottom:0px;color:#333333;font-family:Roboto;margin-top:4px"> \
<tbody \
style="box-sizing:border-box;border-collapse:collapse;border:0px transparent"> <tr \
style="box-sizing:border-box"> <td \
style="box-sizing:border-box;padding:8px;line-height:1.42857;vertical-align:middle;border-top:0px;width:295px"><span \
style="box-sizing:border-box">Operating system</span></td> <td \
style="box-sizing:border-box;padding:8px;line-height:1.42857;vertical-align:middle;border-top:0px;width:687px"><span \
style="box-sizing:border-box">Ubuntu Linux 14.04.5</span></td> </tr>
<tr style="box-sizing:border-box">
<td \
style="box-sizing:border-box;padding:8px;line-height:1.42857;vertical-align:middle;border-top:0px;width:295px"><span \
style="box-sizing:border-box">Webmin version</span></td> <td \
style="box-sizing:border-box;padding:8px;line-height:1.42857;vertical-align:middle;border-top:0px;width:687px"><span \
style="box-sizing:border-box"><span style="box-sizing:border-box">1.840<span \
class="m_-1728766091239955157m_-7642493242991982609m_-4388910018882712375inbox-inbox-Apple-converted-space"> \
</span></span></span> <div \
class="m_-1728766091239955157m_-7642493242991982609m_-4388910018882712375inbox-inbox-btn-group \
m_-1728766091239955157m_-7642493242991982609m_-4388910018882712375inbox-inbox-margined-left-4" \
style="box-sizing:border-box;display:inline-block;vertical-align:middle;margin-left:4px"> \
</div> </td>
</tr>
<tr style="box-sizing:border-box">
<td \
style="box-sizing:border-box;padding:8px;line-height:1.42857;vertical-align:middle;border-top:0px;width:295px"><span \
style="box-sizing:border-box">Virtualmin version</span></td> <td \
style="box-sizing:border-box;padding:8px;line-height:1.42857;vertical-align:middle;border-top:0px;width:687px"><span \
style="box-sizing:border-box">5.99</span></td> </tr>
</tbody>
</table>
</div>
</div> <br>
<div class="gmail_quote">
<div dir="ltr">On Tue, May 30, 2017 at 12:01 AM Jamie Cameron \
<<a>jcameron@webmin.com</a>> wrote:</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left:1px solid #cccccc;padding-left:1ex"> <p>It will ... in Virtualmin \
5.99 and above. </p>
<p>On 29/May/2017 07:34 Pat Erler \
<<a>perler@gmail.com</a>> wrote ..</p>
<blockquote style="padding:0px 0.4em;border-left:2px solid \
#1010ff;margin:0px"> <div dir="ltr">Does it? Will it? :)</div> <br>
<div class="gmail_quote">
<div dir="ltr">On Fri, May 26, 2017 at 6:50 AM Pat Erler \
<<a href="http://reply_mail.cgi?new=1&to=perler%40gmail%2Ecom" \
target="_blank">perler@gmail.com</a>> wrote:</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left:1px solid #cccccc;padding-left:1ex"> <p dir="ltr">ok, I've \
seen this option, but it's a bit confusing. I was under the impression that this \
would work for domains with a shared IP as well?</p> <br> <div class="gmail_quote"> \
<div dir="ltr">On Fri, 26 May 2017, 04:14 Jamie Cameron, <<a \
href="http://reply_mail.cgi?new=1&to=jcameron%40webmin%2Ecom" \
target="_blank">jcameron@webmin.com</a>> wrote:</div> <blockquote \
class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid \
#cccccc;padding-left:1ex">You don't need to use that button - it copies the cert \
to the<br> Dovecot default. Instead, there is a setting on the Virtualmin<br> \
Configuration page under "SSL settings" called "Copy per-IP SSL<br> \
certificates to Dovecot?"<br> <br> This will enable copying for new domains, or \
when SSL is enabled<br> for existing domains.<br> <br> On 24/May/2017 22:20 Pat Erler \
<<a href="http://reply_mail.cgi?new=1&to=perler%40gmail%2Ecom" \
target="_blank">perler@gmail.com</a>> wrote ..<br> > changelog says:<br> \
><br> ><br> > - SSL certificates can now be copied to Dovecot even for \
virtual servers<br> > that don't have their own private IP address.<br> \
> - The SSL certificate for all virtual servers will now be configured \
for<br> > use in t he Virtualmin UI on port 10000, so that URLs like<br> \
> <a href="https://admin.domain.com:10000/" rel="noreferrer" \
target="_blank">https://admin.domain.com:10000/</a> work without cert errors.<br> \
><br> ><br> > but when I press "copy to.." webmin/dovecot the \
certificates for all<br> > domains get overwritten (ie the "main" \
domain)<br> ><br> > so, either this setting is somewhere else or it doesn't \
seem to work?<br> ><br> > best,<br> ><br> > PAT<br> ><br> > --<br> \
<br> ------------------------------------------------------------------------------<br> \
Check out the vibrant tech community on one of the world's most<br> engaging tech \
sites, Slashdot.org! <a href="http://sdm.link/slashdot" rel="noreferrer" \
target="_blank">http://sdm.link/slashdot</a><br> -<br> Forwarded by the Webmin \
mailing list at <a href="http://reply_mail.cgi?new=1&to=we%0D%20badmin%2Dlist%40lists%2Esourceforge%2Enet" \
target="_blank">webadmin-list@li sts.sourceforge.net</a><br> To remove yourself from \
this list, go to<br> <a \
href="http://lists.sourceforge.net/lists/listinfo/webadmin-list" rel="noreferrer" \
target="_blank">http://lists.sourceforge.net/lists/listinfo/webadmin-list</a></blockquote> \
</div>
<div dir="ltr">--</div>
<div> </div>
</blockquote>
</div>
<div dir="ltr">--</div>
<div> </div>
</blockquote> <br> <br> \
------------------------------------------------------------------------------<br> \
Check out the vibrant tech community on one of the world's most<br> engaging tech \
sites, Slashdot.org! <a href="http://sdm.link/slashdot" rel="noreferrer" \
target="_blank">http://sdm.link/slashdot</a>-<br> Forwarded by the Webmin mailing \
list at <a>webadmin-list@lists.sourceforge.net</a><br> To remove yourself from this \
list, go to<br> <a href="http://lists.sourceforge.net/lists/listinfo/webadmin-list" \
rel="noreferrer" target="_blank">http://lists.sourceforge.net/lists/listinfo/webadmin-list</a>
</blockquote>
</div>
<div dir="ltr">--</div>
<div> </div>
</blockquote> <br> <br> <br>
<div \
class="m_-1728766091239955157m_-7642493242991982609m_-4388910018882712375pre" \
style="margin:0px;padding:0px;font-family:monospace">------------------------------------------------------------------------------<br> \
Check out the vibrant tech community on one of the world's most<br> engaging tech \
sites, Slashdot.org! <a href="http://sdm.link/slashdot" rel="noreferrer" \
target="_blank">http://sdm.link/slashdot</a></div> <br> <div \
class="m_-1728766091239955157m_-7642493242991982609m_-4388910018882712375pre" \
style="margin:0px;padding:0px;font-family:monospace">-<br> Forwarded by the Webmin \
mailing list at <a>webadmin-list@lists.sourceforge.net</a><br> To remove yourself \
from this list, go to<br> <a \
href="http://lists.sourceforge.net/lists/listinfo/webadmin-list" rel="noreferrer" \
target="_blank">http://lists.sourceforge.net/lists/listinfo/webadmin-list</a></div> \
</blockquote> </blockquote> <br> <br> <br>
<div class="m_-1728766091239955157m_-7642493242991982609m_-4388910018882712375pre" \
style="margin:0px;padding:0px;font-family:monospace">------------------------------------------------------------------------------<br> \
Check out the vibrant tech community on one of the world's most<br> engaging tech \
sites, Slashdot.org! <a href="http://sdm.link/slashdot" rel="noreferrer" \
target="_blank">http://sdm.link/slashdot</a></div> <br> <div \
class="m_-1728766091239955157m_-7642493242991982609m_-4388910018882712375pre" \
style="margin:0px;padding:0px;font-family:monospace">-<br> Forwarded by the Webmin \
mailing list at <a href="http://reply_mail.cgi?new=1&to=webadmin%2Dlist%40lists%2Esourceforge%2Enet" \
target="_blank">webadmin-list@lists.sourceforge.net</a><br> To remove yourself from \
this list, go to<br> <a \
href="http://lists.sourceforge.net/lists/listinfo/webadmin-list" rel="noreferrer" \
target="_blank">http://lists.sourceforge.net/lists/listinfo/webadmin-list</a></div> \
</blockquote> </div>
------------------------------------------------------------------------------<br>
Check out the vibrant tech community on one of the world's most<br>
engaging tech sites, Slashdot.org! <a href="http://sdm.link/slashdot" \
rel="noreferrer" target="_blank">http://sdm.link/slashdot</a>-<br> Forwarded by the \
Webmin mailing list at <a \
href="http://reply_mail.cgi?new=1&to=webadmin%2Dlist%40lists%2Esourceforge%2Enet" \
target="_blank">webadmin-list@lists.sourceforge.net</a><br> To remove yourself from \
this list, go to<br> <a \
href="http://lists.sourceforge.net/lists/listinfo/webadmin-list" rel="noreferrer" \
target="_blank">http://lists.sourceforge.net/lists/listinfo/webadmin-list</a><br> \
</blockquote> </div>
<div dir="ltr">-- <br></div>
<div data-smartmail="gmail_signature">
<div dir="ltr">
<p dir="ltr"><br></p>
</div>
</div>
</blockquote><br> <br>
------------------------------------------------------------------------------<br>
Check out the vibrant tech community on one of the world's most<br>
engaging tech sites, Slashdot.org! <a href="http://sdm.link/slashdot" \
rel="noreferrer" target="_blank">http://sdm.link/slashdot</a>-<br> Forwarded by the \
Webmin mailing list at <a href="mailto:webadmin-list@lists.sourceforge.net" \
target="_blank">webadmin-list@lists.sourceforge.net</a><br> To remove yourself from \
this list, go to<br> <a \
href="http://lists.sourceforge.net/lists/listinfo/webadmin-list" rel="noreferrer" \
target="_blank">http://lists.sourceforge.net/lists/listinfo/webadmin-list</a><br> \
</blockquote></div><div dir="ltr">-- <br></div><div \
data-smartmail="gmail_signature"><div dir="ltr"><p dir="ltr"><br></p> \
</div></div></blockquote></div><div dir="ltr">-- <br></div><div \
data-smartmail="gmail_signature"><div dir="ltr"><p dir="ltr"><br></p> </div></div>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
-
Forwarded by the Webmin mailing list at webadmin-list@lists.sourceforge.net
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic