LetsEncrypt SSL issue

miroslav

Hello.
I encountered this problem: if for some reason I can't obtain a certificate from the LE after installation (for example, due to a LE limit), the panel is unavailable. There used to be a --skip-ssl flag, but I see it's no longer available. Is it possible to install the panel so that a self-signed certificate is generated, and then, after installation, request a LE for the panel if needed?

stefan

miroslav if ssl generation fails, admin panel is still accessible on http://+DOMAIN - source and user panel will user http://+IP

later when ssl can be generated, you need to restart panels to use https

stefan

if you really want to use a self-signed certificate, generate it with:

DOMAIN="example-domain.com"

mkdir -p /etc/openpanel/caddy/ssl/custom/$DOMAIN

openssl genrsa -out /etc/openpanel/caddy/ssl/custom/$DOMAIN/$DOMAIN.key 2048

openssl req -new -x509 -key /etc/openpanel/caddy/ssl/custom/$DOMAIN/$DOMAIN.key -out /etc/openpanel/caddy/ssl/custom/$DOMAIN/$DOMAIN.crt -days 365

and later when you do want to use LE, remove self-signed files and restart panels:

rm -rf /etc/openpanel/caddy/ssl/custom/$DOMAIN/ && service admin restart && docker restart openpanel

EDIT: you can now use --selfsigned flag on installation