SSL install

pointblankire

Having issues generating an SSL on openpanel and via opencli
output below - am on DO droplet with 0.3.7 - seems to be something wrong with my install?

`root@shared1:~# sudo opencli ssl-domain testsites.example.ie
Checking SSL validity for domain: testsites.example.ie
The following error was encountered:
[Errno 21] Is a directory: '/var/log/letsencrypt/letsencrypt.log'
Either run as root, or set --config-dir, --work-dir, and --logs-dir to writeable paths.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/certbot-log-v1wdnzqw/log or re-run Certbot with -v for more details.
SSL is not valid. Proceeding with SSL generation.
Generating SSL for domain: testsites.example.ie
Downloading acme-dns-auth.py
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Requesting a certificate for testsites.example.ie
An unexpected error occurred:

Challenges loaded. Press continue to submit to CA.
Pass "-v" for more info about challenges.

Certbot failed to authenticate some domains (authenticator: manual). The Certificate Authority reported these problems:
Domain: testsites.example.ie
Type: unauthorized
Detail: Incorrect TXT record "google-site-verification=dkGYCZ_UTrA5Afy7tqoHDf7eszogbBxKSS-JsqCGOVU" found at _acme-challenge.testsites.example.ie

Hint: The Certificate Authority failed to verify the DNS TXT records created by the --manual-auth-hook. Ensure that this hook is functioning correctly and that it waits a sufficient duration of time for DNS propagation. Refer to "certbot --help manual" and the Certbot User Guide.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
Retrying SSL generation for testsites.pointblank.ie using file-based verification:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Requesting a certificate for testsites.example.ie
An unexpected error occurred:

/var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
SSL generation for testsites.example.ie using file verification failed with exit status 1`

stefan

Hello,

First of all, apologies for the late response, we are completely rewriting the codebase. In the future, SSL generation will be fully automated, requiring no manual intervention. Unlike traditional methods where SSL certificates must be generated before starting the web server to listen on port 443, OpenPanel will now initialize the web server without SSL and dynamically generate certificates on demand. This approach ensures faster startup times, as SSL certificates no longer need to be pre-generated or assigned to domains beforehand.

For now, on OpenPanel versions below 1.0.0, you can use the following command to generate SSL certificates with Certbot:

Stop Certbot:

cd /root && docker compose down certbot

Delete file

rm -rf /var/log/letsencrypt/letsencrypt.log

Restore script from previous version:

curl -s https://gist.githubusercontent.com/stefanpejcic/c62589e6e856a86668894b280eed65fd/raw/1d61ab1c2b6a5add6db210c677eec1d8bb6d918b/s.sh -o /usr/local/admin/scripts/ssl/domain

Run again (it will display Error response from daemon: No such container: certbot but do the generation):

opencli ssl-domain DOMAIN_HERE

To display the data in the user panel, please run:

cd /root && docker compose up -d certbot && opencli ssl-user --all

pointblankire

Thanks, look forward to v1.0.0

pointblankire

Will renewals in future have to be done this way? e.g in 4 months for lets encrypt?

stefan

Hello,

The 1.0 release is scheduled for next month. At that time, you can install it on another server, or we can provide you with a temporary server for data migration and reinstalling your current version. We also offer a free migration service, so there’s no need to wait 90 days for the renewal with Let's Encrypt. After moving to version 1.0 next month, all of these tasks will be handled automatically for you—as a panel should!