Posts by fulltilt

  • LetsEncrypt - SSL certificate is not valid

    another necessary fix for Proftpd TLS


    FileZilla needs TLSProtocol TLSv1.2

    nano /etc/proftpd/proftpd.conf

    change TLS 1 to TLS1.2


    Code
    1. cd /etc/imscp
    2. wget https://letsencrypt.org/certs/isrgrootx1.pem
    3. nano /etc/proftpd/proftpd.conf
    4. nano /etc/imscp/proftpd/working/proftpd.conf
    5. below:
    6. TLSRSACertificateKeyFile /etc/imscp/imscp_services.pem
    7. add:
    8. TLSCACertificateFile /etc/imscp/isrgrootx1.pem
    10. sudo service proftpd restart

  • LetsEncrypt - SSL certificate is not valid

    Thanks Kess! It works with my test vps ... but I think it would be a better idea to be patient until Nuxwin is done with his work.

    Manual changes in database or OS (via snapd sources) could possibly cause problems afterwards ...

    For now I prefer the solution of vege.net ... an undo is very simple because only line 134 needs to be activated again.

  • LetsEncrypt - SSL certificate is not valid

    everything seems to work with the letsencrypt patch, but I discovered a problem when installing a purchased certificate ...

    To install a paid certificate line 134 needs to be reactivated in OpenSSL.pm (afterwards deactivate again).

    Therefore I have deactivated / changed the button links in the client theme to prevent customers being able to create and edit certificates themselves except letsencrypt

    Code
    1. # nano /var/www/imscp/gui/themes/default/client/domains_manage.tpl
    2. #from:
    3. <a href="{CERT_SCRIPT}" class="icon i_edit" title="{VIEW_CERT}">{VIEW_CERT}</a>
    4. #to
    5. <a href="" class="icon i_edit" title="{VIEW_CERT}">{VIEW_CERT}</a>
    6. service imscp_panel restart

    also w/ any other line with {CERT_SCRIPT} for alias, alias-sub, sub ...


    or simply

    Code
    1. sed -i 's|{CERT_SCRIPT}||g' /var/www/imscp/gui/themes/default/client/domains_manage.tpl
    2. sudo service imscp_panel restart
    4. # reverse - make buttons available again
    5. sed -i 's|""|"{CERT_SCRIPT}"|g' /var/www/imscp/gui/themes/default/client/domains_manage.tpl
    6. sudo service imscp_panel restart


    I will try to make this accessible only to the administrator

    if ... admin

    <a href="{CERT_SCRIPT}" ...

    else

    <a href=""

    ...

  • LetsEncrypt - SSL certificate is not valid

    openssl verify still shows an error but the certificate seems to be valid

    Code
    1. #openssl verify -CAfile fullchain1.pem cert1.pem
    2. C = US, O = Internet Security Research Group, CN = ISRG Root X1
    3. error 2 at 2 depth lookup: unable to get issuer certificate
    4. error cert1.pem: verification failed

    I also tried to remove the CA X3 incl. reboot afterwards but that didn't change anything ...

    Code
    1. nano /etc/ca-certificates.conf
    2. changed
    3. mozilla/DST_Root_CA_X3.crt
    4. to
    5. !mozilla/DST_Root_CA_X3.crt
    7. sudo update-ca-certificates
    8. sudo reboot

  • LetsEncrypt - SSL certificate is not valid

    Quote from vege.net

    no, just added the cert.. dont know if the others are necessary.. (?)


    your welcome :-)

    OK, it seems it shows existing & available, only one cert (letsencrypt) was added

    Code
    1. Updating certificates in /etc/ssl/certs...
    2. 1 added, 0 removed; done.
    3. Processing triggers for ca-certificates (20200601~deb9u2) ...
    4. Updating certificates in /etc/ssl/certs...


    in /var/www/imscp/engine/PerlLib/iMSCP/OpenSSL.pm

    Only 'openssl', 'verify' should remain active?

  • LetsEncrypt - SSL certificate is not valid

    Thank You!

    should only the mozilla/letsencryypt-r3.crt selected in the dialog?

    I mean should any other be de-selected?