You are here: start » tools » ssl

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
tools:ssl [2023/04/25 10:27] – [Install] darrontools:ssl [2024/07/17 12:03] (current) – [Issue cert] darron
Line 70: Line 70:
  
 export LE_WORKING_DIR="$HOME/.acme.sh" export LE_WORKING_DIR="$HOME/.acme.sh"
-$HOME/.acme.sh/acme.sh --issue -d $VHOST -w /var/www/htdocs/$VHOST+$HOME/.acme.sh/acme.sh --force --issue -d $VHOST -w /var/www/htdocs/$VHOST -k 2048
  
 sudo mkdir -p /var/www/ssl sudo mkdir -p /var/www/ssl
Line 140: Line 140:
 $HOME/.acme.sh/acme.sh --remove -d $VHOST $HOME/.acme.sh/acme.sh --remove -d $VHOST
  
-rm -Rf $HOME/.acme.sh/$VHOST+rm -Rf $HOME/.acme.sh/$VHOST*
 sudo rm -Rf /var/www/ssl/$VHOST sudo rm -Rf /var/www/ssl/$VHOST
  
Line 164: Line 164:
 <code> <code>
 acme.sh --set-default-ca --server zerossl acme.sh --set-default-ca --server zerossl
 +</code>
 +
 +===Other===
 +
 +After issuing and later renewing certificates fullchain.pem and key.pem may be
 +copied and utilised by both exim and dovecot. Exim will
 +need read permission for the exim user.
 +
 +For example, fullchain and key are copied into /etc/exim4/ssl
 +
 +==Exim4==
 +
 +<code>
 +tls_certificate = /etc/exim4/ssl/certificate.pem
 +tls_privatekey  = /etc/exim4/ssl/privatekey.pem
 +</code>
 +
 +==Dovecot==
 +
 +<code>
 +ssl_cert = </etc/exim4/ssl/certificate.pem
 +ssl_key = </etc/exim4/ssl/privatekey.pem
 </code> </code>