zenire
Add certificate request for directadmin webportal
Would be nice if it is possible to request a certificate for the web portal in the admin panel.
Badly enough I do not understand what you would like to see. What do you mean with web portal?
Do you want to issue a SSL certificate for the hostname?
What ictabc probably meant was:
Can the option be added to request a certificate for the DirectAdmin control panel? So yes, the hostname.
Since the DA SSL certificate and the hostname certificate (e.g. da.yourdomain.com:2222 and da.yourdomain.com) are at different locations (I found that out manually installing the cert on both), automatically using / installing the same cert for both would be preferred.
I hope this clears it up a bit. I would like to see this functionality too :)
@Azerdion That is what i meant. Maybe was a bit quick with filling out the form.
Should be no problem http://daserver.domain is going to /var/www/html (Centos) so requesting it isn't a problem. Next step is to link it da itself, automagicly or manual.
Isn't it an idea to just run the python client for that? I don't there we can do that by directadmin's API..
I looked on my server (CentOS) and /var/www/html seems to be owned by root, so the directadmin user probably doesn't have access to it. So it can't make the request. I don't think there is a way to run LetsEncrypt as root, is there?
We could run as diradmin, but the idea is to keep it secure by not running it as root (or diradmin).
If that works no problem, maybe just create a custom script that runs the python script at da-letsencrypt install time and an other script that is run after the request that add the certificates and enables SSL when needed in directadmin.conf and restarts directadmin.
But will the python script follow the complete apache2 config and includes all other domains or only the default DA server domain. Haven't tested the python script yet on a DA server.
If the option is only available on the admin level (because why should users have this option) then running it as diradmin might not be that much of a risk?
I don't mind running a script as root to update this certificate and the DA web portal, but will updates to the certificates also require root access. Or do I need to run python script every time to update the certificates.
Well, I know you don't mind but this plugin is for everyone :) So we have to avoid it as much as possible. It will probably need root access every time since everything is owned by root. (Correct me if I'm wrong)
- Read something wrong, deleted last sentence -