Search found 484 matches

by JDunphy
Thu Apr 27, 2017 3:14 pm
Forum: Administrators
Topic: Another Letsencrypt method
Replies: 111
Views: 129429

Re: Another Letsencrypt method

Will I be allowed to replace the certs before expiry? Yes... acme.sh now uses 60 days as does letsencrypt I believe since I first began this thread last fall, but if you want to do it sooner... just add the --force option to acme.sh when you issue/renew them. This free cert thing is hard to get use...
by JDunphy
Thu Apr 27, 2017 1:26 pm
Forum: Administrators
Topic: Another Letsencrypt method
Replies: 111
Views: 129429

Re: Another Letsencrypt method

Plus, reading your how-to, I think I have too many domain directories in my .acme.sh file: root@zmail:/home/rick/.acme.sh# ls account.conf acme.sh.env deploy http.header zmail.stephenleacock.ca acme.sh ca dnsapi zmail.myriad.ca zmail.watermarkpromo.com Shouldn't all the certs be in the one FQDN fol...
by JDunphy
Thu Apr 27, 2017 5:22 am
Forum: Administrators
Topic: Another Letsencrypt method
Replies: 111
Views: 129429

Re: Another Letsencrypt method

Now I just have to put all this together so that I can automate it through various cron jobs. One last question (I promise), if I have multiple domains on the same server do I need multiple 'deploy' scripts for each domain? I missed your posting where you appear to have it working and were asking f...
by JDunphy
Thu Apr 27, 2017 1:57 am
Forum: Administrators
Topic: Another Letsencrypt method
Replies: 111
Views: 129429

Re: Another Letsencrypt method

Strange. Script is trying to copy your .acme.sh files so it needs read permission and it needs write permission in /opt/letsencrypt for zimbra. So if you can't do this, it won't work well. su - zimbra cd /opt/letsencrypt /bin/cp -rf $user/.acme.sh . I would look at $user/.acme.sh and /opt/letsencryp...
by JDunphy
Thu Apr 27, 2017 12:33 am
Forum: Administrators
Topic: Another Letsencrypt method
Replies: 111
Views: 129429

Re: Another Letsencrypt method

there is an error: '/bin/cp: cannot create directory './.acme.sh': Permission denied My guess is you have .acme.sh owned by root in /opt/letsencrypt Here is what mine looks like: cd /opt/letsencrypt % ls -al total 28 drwxr-xr-x 3 zimbra root 4096 Apr 2 18:15 . drwxr-xr-x 6 root root 4096 Feb 17 18:...
by JDunphy
Wed Apr 26, 2017 11:54 pm
Forum: Administrators
Topic: Another Letsencrypt method
Replies: 111
Views: 129429

Re: Another Letsencrypt method

You are moments away. :-) And yes you want to stop until the permissions are fixed. What is your working directory? ie. pwd? This is how I use it. su - zimbra cd /opt/letsencrypt ./deploy-zimbra-letsencrypt.sh Provided that /opt/letsencrypt is owned by zimbra and there are no directories inside that...
by JDunphy
Wed Apr 26, 2017 11:36 pm
Forum: Administrators
Topic: Another Letsencrypt method
Replies: 111
Views: 129429

Re: Another Letsencrypt method

I am using 8.7.0. The .acme.sh directory inside the /opt/letsencrypt directory is owned by root but has 755 permissions. Needs to be owned by zimbra so it can write. You are close. Reference: https://github.com/JimDunphy/deploy-zimbra-letsencrypt.sh As zimbra user: su - zimbra git clone https://git...
by JDunphy
Wed Apr 26, 2017 10:58 pm
Forum: Administrators
Topic: Another Letsencrypt method
Replies: 111
Views: 129429

Re: Another Letsencrypt method

OK. Got it going with a few errors: * /bin/cp: cannot create directory './.acme.sh': Permission denied * /opt/letsencrypt/deploy-zimbra-letsencrypt.sh: line 108: fullchain.cer: Permission denied Looks like you are going off script a bit... Make sure that the following conditions are met. 1) run dep...
by JDunphy
Wed Apr 26, 2017 9:59 pm
Forum: Administrators
Topic: Another Letsencrypt method
Replies: 111
Views: 129429

Re: Another Letsencrypt method

Also, your deploy-zimbra-letsencrypt.sh won't run at all. when I execute it it returns nothing. Thought I would answer part 2 of your question. Full link and instructions are here: https://github.com/JimDunphy/deploy-zimbra-letsencrypt.sh That new script needs you to set a few variables before it w...
by JDunphy
Wed Apr 26, 2017 9:40 pm
Forum: Administrators
Topic: Another Letsencrypt method
Replies: 111
Views: 129429

Re: Another Letsencrypt method

So should I just re-install acme using your 'deploy-zimbra-letsencrypt.sh' method and re-create new certificates? I originally created everything using the original blog post before you had created your script. You should already have acme.sh installed. Look inside ~/.acme.sh to see your files ... ...

Go to advanced search