Lets Encrypt

[techs221]

Hello 

I am new to sentora, I have it installed and I used this guide to setup ssl http://docs.sentora.org/?node=102

since I did that I am connecting to my login page with ssl but it is an untrusted cert. Is there a way to get a trusted cert?


Also how would I add a ssl for other domains that I am going to be hosting with Sentora using lets encrypt 


Thanks in advance

[Me.B]

Are you sure over the url of the certificate you generated if it doesn't match the url it will show the broken certificate warning.

M B

[TGates]

Also how would I add a ssl for other domains that I am going to be hosting with Sentora using lets encrypt 

Same place you found the other tutorial, listed right below it.
http://docs.sentora.org/?node=103

[techs221]

Also how would I add a ssl for other domains that I am going to be hosting with Sentora using lets encrypt 

Same place you found the other tutorial, listed right below it.
http://docs.sentora.org/?node=103

I am sorry I am not sure what you mean or do I just run the same think again for each domain i want a cert for

[TGates]

It is not the 'same' as the one for the Sentora panel login. They are similar, but the custom vhost entries and port forwarding work different. Obviously you can skip the parts about installing openSSL, mod_ssl, etc. since those where installed earlier in the panel login tutorial.

[worksmarter]

If you desire to have your URL's include the "www" subdomain, you must place that in all of the variables noted in the tutorial for domains. I excluded the "www" on my panel certificate set up on purpose once I understood all of this vaguely, but feel if only for nostalgia sake my domains should include the "www" subdomain after the https:// and before your FQDN. (This little thing also makes the address look nicer/more traditional as the address in most browsers will default to displaying "www.your.domain.com" which is smaller and cleaner looking than having the https:// in there on its own.)

Without including the "www" in the tutorial varribles, https://panel.yourdomin.com will not issue you a warning when you go to the aforementioned address, but if you try and reach the domain with https://www.panel.yourdomain.com or simply:

Code:

www.panel.yourdomain.com

you will get the "broken certificate" warning.

Personally I did NOT use the "www" subdomain for my SENTORA panel, but DID include it for any website domains SENTORA is hosting.

@TGates, is this mentioned in any of the tutorials yet? I know I have it right for the domain tutorial, but did not actually try it for the panel (including the www...) If not, might it be something to include? Tiny things like this, for me waste countless hours of my time over something so simple that I had merely overlooked it. -> just as I had overlooked which file needed the Listen 443 commented out (

#Listen

443) and separate installation of mod_ssl in CentOS for SENTORA which was my own oversite, I should have come to that conclusion quickly, but sometimes I can not see the forest for the trees in front of me.  

lol What do I say now? "Don't ask me how I know this..." (Because I make lots of mistakes!)

[TGates]

www. is mentioned in regular domains, not for the panel sub domain.

www. can be used for sub domains or your panel login, but it is not set as default practice for your panel login.

Although, who wants to type https://www.panel.domain.com?? (or for any sub domain for that matter.)

[worksmarter]

www. is mentioned in regular domains, not for the panel sub domain.

www. can be used for sub domains or your panel login, but it is not set as default practice for your panel login.

Although, who wants to type https://www.panel.domain.com?? (or for any sub domain for that matter.)

Agreed I didn't want it on the SENTORA panel for the reasons you state and mentioned that, but when I was making certificates and securing my own domains, I wanted them to use the "www" subdomain. At that time I must have missed the mention of www as the code windows did not have www in them when I copied and modified them. So they are still in Notepad++'s buffer and I had to do the first domain twice because the www was not in what I copied out of the code boxes the first time.  The way SENTORA works everything,

Code:

www.mydomain.com

uses the SSL port by default once it is set up for ssl and as I mentioned above, maybe I am getting too old, but I would prefer see the www in the address window of my chosen browser. Different strokes for different folks.

Although, who wants to type https://www.panel.domain.com?? (or for any sub domain for that matter.)

My setup allows you to type *only*

Code:

www.thencool.com

and it automatically uses https and port 443. "www" is less characters than https://

Anywho...

[TGates]

Ah yes, the old 'To www or not to www, that is the question.' LOL
All depends on user preference in the end.