Free SSL certificates through Let's Encrypt

Yes, but nothing will be installed.

Only the certificates will be created in /etc/letsencrypt/archive/domain.com/ directory and a link will be set into /etc/letsencrypt/live/domain.com/ with the latest certificate version.

Me too.

Public beta rate limits

• Rate limit on registrations per IP is currently 10 per 3 hours
• Rate limit on certificates per Domain is currently 5 per 7 days

For admin panel (nginx) or imscp services (courier/dovecot, postfix, proftpd) you have to do these steps:

• Execute the command to reconfigure ssl and panel_ssl: /var/www/imscp/engine/setup/imscp-setup -dr ssl panel_ssl
• On the screen for the Private key choose the file /etc/letsencrypt/live/domain.com/privkey.pem.
  

  
  

  dialog_private_key.png dialog_choose_private_key.png

  
  

  
  

• On the Password dialog enter nothing (only hit enter)
  

  
  

  dialog_passphrase.png

  
  

  
  

• On the screen for the Intermediate certificate choose the file /etc/letsencrypt/live/domain.com/chain.pem.
  

  
  

  dialog_intermediate_certificate.png dialog_choose_intermediate_certificate.png

  
  

  
  

• On the screen for the Certificate choose the file /etc/letsencrypt/live/domain.com/cert.pem.
  

  
  

  dialog_certificate.png dialog_choose_certificate.png

  
  

  
  

The setps 2 - 5 have to be done twice. Once for the panel domain and another time for the imscp services.

For a customer domain follow this howto:

• Go to the letsencrypt certificate directory:
  
  
  Code

  1. cd /etc/letsencrypt/live/domain.com
• Open the file privkey.pem and copy the content into the input field Private key of the customer domain in the i-MSCP panel.
• Open the file cert.pem and copy the content into the input field Certificate of the customer domain in the i-MSCP panel.
• Open the file chain.pem and copy the content into the input field Intermediate certificate(s) of the customer domain in the i-MSCP panel.
• Click on Add or Update button.
  

  
  

  SSL_certificate.png
  

WARNING: More advanced howto for the panel certificate (you should know what you do):

• Backup your current certificates:
  
  
  Code

  1. cp -a /etc/imscp/panel.domain.com.pem /etc/imscp/panel.domain.com.pem.BAKcp -a /etc/imscp/imscp_services.pem /etc/imscp/imscp_services.pem.BAK
• Go to the letsencrypt certificate directory:
  
  
  Code

  1. cd /etc/letsencrypt/live/domain.com
• Execute the following:
  
  
  Code

  1. cat privkey.pem > /etc/imscp/panel.domain.com.pemcat cert.pem >> /etc/imscp/panel.domain.com.pemcat chain.pem >> /etc/imscp/panel.domain.com.pem
• Copy the panel certificate file to the imscp services certificate file:
  
  
  Code

  1. cp -a /etc/imscp/panel.domain.com.pem /etc/imscp/imscp_services.pem
• Restart the services:
  
  
  Code

  1. service nginx restart
  2. service dovecot/courier restart
  3. service postfix restart
  4. service proftpd restart

@mrpink for services and panel I recommend the official way perl imscp-autoinstall -dr ssl panel_ssl. Just if someone don't want to rerun the installer and already have certs installed he can go your way (still not supported). Think it's better before someone breaks his system

@Ninos yes that's true. For me it's easier and faster this way.