enable lets encrypt

Howdy -- you should be able to use Let's Encrypt on an existing Virtual Server by going into Server Configuration -> Manage SSL Certificates -> Let's Encrypt.

Let us know if you run into a problem doing that though!

It's currently necessary to install the Let's Encrypt command line client in order to use their SSL certificates.

We're working on built-in support that's not dependent on that client though, that will be available in an upcoming Virtualmin version.

It works fine, but only on main domain. If I try to obtain a certificate for a subdomain I get this response:

Checking for new version... Requesting root privileges to run letsencrypt... /root/.local/share/letsencrypt/bin/letsencrypt certonly -a webroot -d gestione.societaoperaia.it --webroot-path /home/societao/domains/gestione.societaoperaia.it/public_html --duplicate --config /tmp/.webmin/551226_7214_1_letsencrypt.cgi Failed authorization procedure. gestione.societaoperaia.it (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://gestione.societaoperaia.it/.well-known/acme-challenge/Y1MZReDr2ug... [149.202.103.2]: 401 IMPORTANT NOTES: - The following errors were reported by the server:

Domain: gestione.societaoperaia.it Type: unauthorized Detail: Invalid response from http://gestione.societaoperaia.it /.well-known/acme-challenge/Y1MZReDr2ugb- qqy18OtgqZ6Z_o1-2SZmVSjG8lO608 [149.202.103.2]: 401

To fix these errors, please make sure that your domain name was entered correctly and the DNS A record(s) for that domain contain(s) the right IP address.

rinobilla, that appears to be a different issue than the one mentioned in the original request here.

We'd be happy to go over that with you, but could you create a new request for that? Then we can discuss the details of the problem there. Thanks!

If you aren't comfortable installing the Let's Encrypt client, my suggestion would be to hold off on using that functionality until we release the built-in Let's Encrypt functionality in the near-future.

I don't have an ETA on that, but it won't be too long.

FYI, Webmin version 1.791 includes built-in Let's Encrypt functionality.

Fine here as well, well done team.

I had been using the Lets Encrypt tab to grab certs for a couple of our sites just to test it out and it had been working ok. I just upgraded to the latest Virtualmin and now I'm getting the following error when attempting to update certificates... mkdir failed : mkdir: cannot create directory `/home/[any domain]/public_html/.well-known/acme-challenge': Permission denied I had a look in the public_html folder and 'well-known' already exists and is owned by root:root rather than the virtual server owner. Is the existence of this folder checked before the mkdir command is issued? Permissions on the folder are 0755. Not sure if this is a problem or not? Any ideas?

I deleted the .well-known folder for one virtual server and tried the update again. This time it worked. I'd be interested to know if anyone else has trouble once they attempt to update a certificate for a domain that already has acquired one using the Virtualmin Lets Encrypt service.

This is probably because in older Webmin releases the .well-known directory was created by root, but in the latest version it is created by the domain owner.

I tried a couple more times on a test domain and the .well-known folder is created by and assigned to the domain owner. I'll clean up any other 'root' owned .well-known folders in other domains and I should be right :)

I believe the initial issue here has been corrected by the new built-in Let's Encrypt client, so I'm closing this issue. If Let's Encrypt problems persist with the latest Webmin/Virtualmin version, please open a new ticket, as it will be a different problem from the one covered by this ticket.

.. request failed : Web-based validation failed : mkdir failed : mkdir: cannot create directory '/home/testsite/public_html/.well-known': Disk quota exceeded DNS-based validation failed : Failed to request certificate : challenge did not pass: DNS problem: NXDOMAIN looking up TXT for _acme-challenge.

This is the error I am receiving when trying to request cert for domain on webmin/virtualmin. Any insight into this will be greatly appreciated.

Thanks,

The error you're seeing suggests that this particular domain is over-quota... I'd suggest ensuring that the domain has plenty of disk space available.

It appears that you're using Virtualmin GPL there though, and it doesn't appear that you're experiencing a bug. It's no problem to get support, but you'd want to use the Forums for asking questions and troubleshooting. We monitor the Forums, along with lots of wonderful folks in the community. Thanks!