LetsEncrypt - Where are the certs?

procrastinate · May 13, 2017, 7:21pm

I installed LetsEncrypt:
sudo su box install letsencrypt

But I don’t see any certificates in /etc/letsencrypt/live, only some different locations that were added in /etc/apache2/sites-enabled/default-ssl.conf:
SSLCertificateFile /etc/apache2/ssl/certs/site.com-ssl.pem
SSLCertificateKeyFile /etc/apache2/ssl/certs/site.com-ssl.key

I noticed that the script didn’t add the weekly renewal cron job every, so I added it manually according to the old instructions: https://quickbox.io/wiki/install-lets-encrypt-on-your-seedbox

The SSL works for rutorrent and the main dashboard, but I’m wanting to follow https://quickbox.io/wiki/get-other-programs-on-quickbox-to-use-le-certs/ to get BTSync setup. What went wrong with the LetsEncrypt script, and how do I get the certs to use for other services?

bate · May 13, 2017, 9:13pm

All changes are made to said .conf

line="30 2 * * 1 "~/acme.sh"/acme.sh --cron --home "~/acme.sh" > /dev/null" (crontab -u root -l; echo "$line" ) | crontab -u root -

To see what takes place behind the "scene"

github.com

QuickBox/QB/blob/master/packages/package/install/installpackage-letsencrypt

#!/bin/bash
#
# [Quick Box :: Install Let's Encrypt package]
#
# GITHUB REPOS
# GitHub _ packages  :   https://github.com/QuickBox/quickbox_packages
# LOCAL REPOS
# Local _ packages   :   /etc/QuickBox/packages
# Author             :   Neilpang | adaptive build QuickBox.IO ~JMSolo
# URL                :   https://quickbox.io
#
# QuickBox Copyright (C) 2017 QuickBox.io
# Licensed under GNU General Public License v3.0 GPL-3 (in short)
#
#   You may copy, distribute and modify the software as long as you track
#   changes/dates in source files. Any modifications to our software
#   including (via compiler) GPL-licensed code must also be made available
#   under the GPL along with build & install instructions.

service apache2 stop

This file has been truncated. show original

procrastinate · May 14, 2017, 8:21pm

Ok, the wiki threw me off. I’ve copied from /etc/apache2/ssl/certs/ into .config/resilio/sync
To keep it private I’ve added to /etc/resilio-sync/config.json

"login" : "DESIRED_LOGIN",
"password" : "",

The le-post-hook.sh commands I added (as listed in the wiki) via sudo crontab -e. Resilio is working fine now with SSL (and hopefully past 3 month mark). Thanks for the pointers.