Synchronet v3.17b-Win32 (install) has been released (Jan-2019).

New Synchronet YouTube channel

You can donate to the Synchronet project using PayPal.

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
module:letsyncrypt [2019/07/17 00:48]
digital man [Setup] Add syntax highlighting
module:letsyncrypt [2019/12/07 15:12] (current)
digital man Added more clarifications regarding letsyncrypt.ini and moved stuff around.
Line 3: Line 3:
 LetSyncrypt is a [[https://​letsencrypt.org/​|Let'​s Encrypt]] client for Synchronet which uses the ACMEv2 protocol. LetSyncrypt is a [[https://​letsencrypt.org/​|Let'​s Encrypt]] client for Synchronet which uses the ACMEv2 protocol.
  
-===== Setup =====+===== Install ​=====
  
 LetSyncrypt should be added as a timed event. LetSyncrypt should be added as a timed event.
Line 26: Line 26:
 </​file>​ </​file>​
  
-If you have multiple domain names, you can have LetSyncrypt ​put them all in a single certificate,​ even if you have virtual hosts. ​ Edit the ''​[[dir:​ctrl]]/​letsyncrypt.ini''​ file and add a [Domains] ​section ​where the key is the hostname, and the value is the web root for that domain:+===== Configure ===== 
 + 
 +LetSyncrypt ​is configured via the ''​[[dir:​ctrl]]/​[[http://​cvs.synchro.net/​cgi-bin/​viewcvs.cgi/​ctrl/​letsyncrypt.ini|letsyncrypt.ini]]''​ file
 + 
 +You must indicate that you agree to the Let's Encrypt Terms of Service by setting ''​TOSAgreed = true''​ in this file. 
 + 
 +You can specify the ACMEv2 endpoint using the ''​Host'' ​and ''​Directory''​ keys in the [[config:​ini_files#​root_section|root ​section]] of this file.  ''​Host'' ​is the domain name of the ACMEv2 endpoint, and ''​Directory'' ​is appended to it to generate ​the URL that is fetched for the Directory object.  ​
  
 <file ini> <file ini>
-[Domains] +Host = acme-v02.api.letsencrypt.org 
-nix.synchro.net=/​sbbs/​web/​root +Directory ​= /directory 
-home.bbsdev.net=/sbbs/​web/​root +TOSAgreed ​true 
-gallery.bbsdev.net=/​sbbs/​web/​root/​gallery.bbsdev.net +GroupReadableKeyFile ​false
-pics.bbsdev.net=/​sbbs/​web/​root/​pics.bbsdev.net+
 </​file>​ </​file>​
  
-This example has four domains ​(nix.synchro.net,​ home.bbsdev.net,​ gallery.bbsdev.net,​ and pics.bbsdev.net).  The last two are virtual hosts, so have their web root as subdirectory of the main web root.+Note that without setting ''​TOSAgreed = true'',​ you will likely never get a certificate,​ but the first few words in this file at present are "This Subscriber Agreement ​(“Agreement”is legally binding contract"​.
  
-You can specify the ACMEv2 endpoint using the ''​Host'' ​and ''​Directory'' ​keys in the [[config:ini_files#​root_section|root section]].  ''​Host''​ is the domain name of the ACMEv2 endpoint, ​and ''​Directory'' ​is appended to it to generate the URL that is fetched ​for the Directory object. ​ You can also indicate that you agree to the Terms of Service by setting TOSAgreed to true.+Do not modify ​the ''​[State]'' ​or ''​[key_id]'' ​sections of this file. 
 + 
 +==== Domains ==== 
 + 
 +If you have multiple domain names, you can have LetSyncrypt put them all in a single certificate,​ even if you have virtual hosts. ​ Edit the ''​[[dir:ctrl]]/​letsyncrypt.ini'' ​file and add a ''​[Domains]'' ​section (if it doesn'​t already exist) and a key for each hostname with the value of the web root for that domain:
  
 <file ini> <file ini>
-Host=acme-v02.api.letsencrypt.org +[Domains] 
-Directory=/directory +nix.synchro.net = /​sbbs/​web/​root 
-TOSAgreed=true+home.bbsdev.net = /​sbbs/​web/​root 
 +gallery.bbsdev.net ​= /sbbs/​web/​root/​gallery.bbsdev.net 
 +pics.bbsdev.net ​/​sbbs/​web/​root/​pics.bbsdev.net
 </​file>​ </​file>​
  
-Note that without the TOSAgreed=true lineyou will likely never get a certificatebut the first few words in this file at present ​are "This Subscriber Agreement (“Agreement”) is legally binding contract"​ +This example has four domains (nix.synchro.nethome.bbsdev.net,​ gallery.bbsdev.netand pics.bbsdev.net). ​ The last two are virtual hosts, so have their web root as subdirectory of the main [[server:​web]] root.
- +
-Do not modify ​the ''​State''​ or ''​key_id''​ sections of this file.+
  
 ===== Running Manually ===== ===== Running Manually =====
  
-You can also run the script using jsexec. ​ It accepts a number of arguments:+You can also run the LetSyncrypt ​script using [[util:jsexec]].  It accepts a number of arguments:
  
 ''​%%--new-key%%''​ Changes the account key ''​%%--new-key%%''​ Changes the account key
Line 63: Line 72:
  
 ===== See Also ===== ===== See Also =====
-  * [[:module:|module index]]+  * [[:module:|Modules]]
  
-{{tag>}}+{{tag>tls ssl cert https crypt}}
  

In Other Languages