Centova Technologies Forum

Centova Cast v3 => Bugs and issues => Topic started by: Dan SGB on April 22, 2017, 07:23:46 am

Title: Let's Encrypt and Port 80 Proxy
Post by: Dan SGB on April 22, 2017, 07:23:46 am

Hey everyone,

I am looking into SSL for the panel and Lets Encrypt seems the best way after reading through http://www.centova.com/en/faq/cast3/information/lets_encrypt

I am running Centova on port 2199 and using port 80 Proxy.

In the guide it says:

"Let's Encrypt" does have one frustrating limitation that may cause problems for some Centova Cast administrators -- for security reasons, its validation system requires that you configure a web server on port 80 to serve up a set of validation files to prove that you own the domain.

My question is can these validation files not be served in the same way that the "nothing here" index page is served when using port 80 proxy?

Title: Re: Let's Encrypt and Port 80 Proxy
Post by: getstreamhosting on November 19, 2017, 12:09:30 pm

After research and only finding this post.  Not finding any other help.

We worked out the following process. Use at own risk.

first run /usr/local/centovacast/sbin/setssl letsencrypt hostname.domain.tld

then Open to path /usr/local/centovacast/var/www with your ssh or sftp client

create folder or mkdir .well-known

next you will need to create a symlink

symlink name needs to be acme-challenge and set to path /usr/local/centovacast/etc/ssl/acme-challenges/

next run /usr/local/centovacast/sbin/setssl letsencrypt hostname.domain.tld --accept

last step service centova cast restart

Then Test the SSL

Title: Re: Let's Encrypt and Port 80 Proxy
Post by: scysys on December 09, 2017, 05:08:24 am

Quote from: getstreamhosting on November 19, 2017, 12:09:30 pm

After research and only finding this post.  Not finding any other help.

We worked out the following process. Use at own risk.

first run /usr/local/centovacast/sbin/setssl letsencrypt hostname.domain.tld

then Open to path /usr/local/centovacast/var/www with your ssh or sftp client

create folder or mkdir .well-known

next you will need to create a symlink

symlink name needs to be acme-challenge and set to path /usr/local/centovacast/etc/ssl/acme-challenges/

next run /usr/local/centovacast/sbin/setssl letsencrypt hostname.domain.tld --accept

last step service centova cast restart

Then Test the SSL

How did you renew after 3 Month. Manually?