[Request] Lets encrypt Certificate manager Module.

[bubundas17]

Today I just installed Santora panel. and the first look was awesome! 
I like each and every feature of it. But it lacks an important feature which is, let's encrypt support.

is there any module available to enable let's encrypt support?

[M0HX]

Today I just installed Santora panel. and the first look was awesome! 
I like each and every feature of it. But it lacks an important feature which is, let's encrypt support.

is there any module available to enable let's encrypt support?

Sentora actually supports let's encrypt. but not sure if there is a module to install. you can do it manually! checkout these tutorials:

Sentora login: http://docs.sentora.org/?node=102

Any other domains: http://docs.sentora.org/?node=103

[bubundas17]

okey but it is the native way to install letsencrypt. Nothing is new in it.
it would be great if there is any other way to allow normal sentora panel users to add lets encrypt support to their domain.

[TGates]

okey but it is the native way to install letsencrypt. Nothing is new in it.
it would be great if there is any other way to allow normal sentora panel users to add lets encrypt support to their domain.

Not exactly the 'native way' as it is customized for Sentora configs
But, there is no Let's Encrypt module yet. I started working on one but have not had the time to continue on with it lately.
The main problem is getting apache and root to play together nicely through the module. Some parts work, others do not because I haven't sorted out how to get apache to tell root what to do, like grab the certificate files.
So far, it creates all the config changes, appearance is OK, main issue is grabbing and writing the certificates. (Permission issues with apache and root.)
The current mess is on my GitHub here: https://github.com/TGates71/sencrypt

[andykimpe]

not bad tom but it's only for ubuntu

those who are on centos that I find more stable for me

could not install it would be better to make a multisystem version

by applying the same commands as that of the doc

then there would just have to add the apache config

in your place I would not change the original apache configuration

nor even use the modules provided by the system

I would simply install like this for my part

Code:

exec("git clone https://github.com/letsencrypt/letsencrypt /usr/local/letsencrypt");
exec("ln -s /usr/local/letsencrypt/letsencrypt-auto /usr/local/bin/letsencrypt-auto");

once it's small order run

it only remains to call letsencrypt-auto

with exec and modify the apache config

for whom the generator as indicate in the doc

Code:

SSLEngine on

SSLProtocol ALL -SSLv2 -SSLv3

SSLHonorCipherOrder On

SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS

SSLCertificateFile /etc/letsencrypt/live/domain.com/cert.pem

SSLCertificateKeyFile /etc/letsencrypt/live/domain.com/privkey.pem

SSLCertificateChainFile /etc/letsencrypt/live/domain.com/chain.pem

# Keeping bellow for future upgrades.

# Requires Apache >= 2.4

SSLCompression off

I do not remember the parameters but there is an option

to launch letsencrypt-auto in silent mode

without any user interaction

advantage also letsencrypt-auto works just as well to create the certificate
than to renew it

the order and totally identical

edit I find the command to run it silently eg

Code:

letsencrypt-auto certonly --standalone -d domain.com -n --agree-tos -m contact@sentora.org

[TGates]

This has actually been updated elsewhere to use the newer HTTP AUTH which is much more simple. You nolonger need to start/stop apache to add domains.

Code:

create certificates:

   sudo certbot certonly --webroot -w /var/sentora/hostdata/[client]/public_html/domain_com -d domain.com -d www.domain.com

update certificates after running the above with no errors:

   sudo certbot renew

revoke a certificate:

    sudo certbot revoke --cert-path /etc/letsencrypt/archive/domain.com/cert1.pem
    
    it will ask if you want to delete the related certificates, select Y and hit enter.

Unfortunately certificates still need to be created manually. I made a module to work with the older method of certbot, but they changed something and it no longer works. I need to update it to use this newer method. The difficult problem is getting the daemon (more specifically the module's OnDaemonRun.hook.php) to execute the above command line actions. The module is basically done, it just needs a fresh set of eyes to find the error and add the revoke coding.
https://github.com/TGates71/sencrypt

If it can be made to run command line functions, the code can be stripped down to about 1/4 of what it is now.