Let's Encrypt SSL for System Hostname

10 posts / 0 new
Last post
#1 Sun, 02/21/2016 - 07:31
simon1066

Let's Encrypt SSL for System Hostname

Virtualmin GPL CentOS 7

I've managed to successfully install and generate a Let's Encrypt SSL cert, in Virtualmin for virtual server mydomain.com

I want to generate a cert, in Webmin, for the System Hostname of server1.mydomain.com

In Webmin > Webmin > Webmin Configuration > SSL Encryption > Let's Encrypt I have in the 'Hostnames for certificate' field server1.mydomain.com and if I 'Request Certificate' I get:

Failed to request certificate : No virtual host matching server1.mydomain.com was found

This seems to imply that I need a Virtual Server set up for server1.mydomain.com, is this correct?

I remember seeing a reference to this somewhere on the net but I can't remember where.

So, is there a way to generate the cert for the System Hostname without having a virtual server set up? Or is there another route I need to take?

Cheers

Simon

Sun, 02/21/2016 - 19:26
cruiskeen

You need to have a server set up for the domain name because the whole system depends on putting a file into the web server for that domain temporarily. That's how they determine that you actually have control over the web server for that domain.

So yes, you need to have a running web server for a domain name to request a certificate.

Mon, 02/22/2016 - 00:47
simon1066

Thank you for your reply cruiskeen, I can see that now.

Sat, 05/12/2018 - 23:29
Sri

This is an old thread, but someone like me might come here searching for an answer to the issue faced by simon1066. I went about doing lot of stuff to no use, until it dawned on me that that was not needed. It's very simple actually.

You don't need to https on the system hostname to run webmin as root.

You can do that using the :10000 suffix on any other virtual server on that system that has the LE certificate, and then login with root user instead of virtual server user. E.g.: https://mydomain.com:10000

Wed, 10/24/2018 - 18:33 (Reply to #4)
Purple Edge

Thanks, I never knew that, has saved me some messing around!

Thu, 10/25/2018 - 16:39
TheRavenKing Pro Licensee

I am looking for hours around now to find out how to renew a Let's Encrypt certificate on my server,domain.com, If I go to Webmin, Configuration, SSL Encryption, Current Certificate it shows let's encrypt valid Nov 6, but pressing Just update renewal in the Let's Encrypt tab it's not doing anything...no message, nothing happens? why?

Thu, 10/25/2018 - 18:02 (Reply to #6)
Purple Edge

Do you mean...

Virtualmin/Server Configuration/Manage SSL Certificate/Lets Encrypt

...? Or are you trying to do something else?

What version of Virtualmin are you running, do you have the option for "Months between automatic renewal" - if so, set it to 2 months, and forget about it?

Fri, 10/26/2018 - 01:57
TheRavenKing Pro Licensee

I was looking to renew the ssl certificate for the hostname, i have set it to 2 months, is that the reason nothing happens?

Sorry coming from cPanel :-)

I have found in Virtualmin how to do it for a virtual server, that works fine :-)

Webmin version 1.894 Usermin version 1.741 Virtualmin version 6.04

Everything up to date.

Fri, 10/26/2018 - 02:11
Purple Edge

Ah, OK sorry I missed that you wanted to do it for the host. Have a look at the response from SRI above - the fact is, you should never have to use the host, you can login as root from any virtual server that has an ssl certificate in place.

Fri, 10/26/2018 - 09:21
TheRavenKing Pro Licensee

Aha, that concept is new to me, different than cPanel, lot to learn... Thanks ever so much for your time and reply, much appreciated.