No it’s not, since we want to integrate it inside the web interface.
We were thinking a “Certificate page” where the user can create LE certificate, self-signed certificate and upload its own certificate.
I want to give some short feedback about Let’s encrypt integration in Nethserver 6.7 using this guide: http://wiki.nethserver.org/doku.php?id=developer:letsencrypt
So far it works fine for the Nethserver Server Manager.
One thing I would change in the guide: put the “Options” in front of the “Test certificate creation” part. Otherwise almost everybody will recognize the options after the certificate is created (like me).
And one other thing:
How about using Let’s Encrypt for other websites without using one certificate for all? i.e. don’t want to mix up my certificates with the certificates of my customers.
What is the current status of the let’s encrypt project? I would like to use it on NS 7.4. Does the server FQDN have to be the private one or can I use my public domain pointed to server IP?
Just to make sure I understand. It is OK to have a private FQDN as server name as long as you have a registered domain with A record pointing to server IP?
Where do I find instructions?
Set public DNS record for your servername.domain.com to your public IP with an A record … or a cname referencing an a.
Set port forwarding on your firewall/router to go from your public IP to your server IP for the needed ports, let’s encrypt uses 443 iirc. It uses the requested names to check if it can find the server like that and performs a handshake with itself.
Optional: disable the port forward. RE-enable at renewal.
I do not want all my servers exposed on port 80 or any other non-internet service, so there is a procedure in place to check certs and act accordingly but yeah, it was forgotten several times before