openmediavault-letsencrypt

Quote from Poincare1

Hello folks. I tried searching but didn't seem to find any infos. For OMV5 there does not seem to be leetsencrypt plugin. I enabled the testing toggle in OMV-Extras but still can't seem to find letsencrypt listed in plugins. Is there a way to use the plug-in for OMV5?

https://forum.openmediavault.o…?postID=186122#post186122

Here is how I do it. Unfortunately I don't see a way to do it in the gui. This is for a wild card cert.

Find the currently used certs.
ls /etc/ssl//private/
ls /etc/ssl/certs

Then I run a script to copy the new cert to the proper place. It works but it is not pretty.

#!/bin/bash


# scp username@remote:/file/to/send /where/to/put


# letsencrypt is the local server that generates the certs


scp root@letsencrypt:/etc/letsencrypt/live/example.com/privkey.pem /etc/ssl//private/openmediavault-your-cert.key


scp root@letsencrypt:/etc/letsencrypt/live/example.com/fullchain.pem /etc/ssl/certs/openmediavault-your-cert.crt


systemctl restart nginx

It will ask for password but you could use ssh key to get around that.
https://www.digitalocean.com/c…ication-on-a-linux-server

Did you change the name to match the one OMV is using?

/ls /etc/ssl//private/ls /etc/ssl/certs

Quote from moreje

would it be possible to have a select file option instead of a drop-down menu to define the cert to use?

The plugin is not being maintained anymore.

Quote from moreje

it is not plugin related, it is in general settings, secure connections.

I doubt Volker would change that since there is a section for certs with an option to import a cert. Once imported, it will show up in the drop down. Otherwise, here is the php code from the plugin that updates an existing cert with a new cert.

Import your cert the first time.

Then you can use the script above. Just change the name and maybe fix the file type if required.

I asked for the import file a long time ago. It was thought not to be needed. Or might be too hard. I forget. There are many types of file and it may take a lot of code to determine what form your cert is and convert it to what omv expects. This is open source and I am sure pull requests would be looked at. It is above my skill level.

I showed what works for me on 4,x and it should be very similar for 5.x. If it does not work for you post a new thread and maybe some of us can help. It's been a while since I did this so maybe things have changed. But it still works for me.

Quote from moreje

If I'm not wrong, Import a cert in the cert section is by Copy-Paste the text .
It is not so easy than importing a file, that is updated monthly by letsencrypt...

I understand that. I was just mentioning why Volker probably won't change it to a file. And that is why I pointed to the code. It wouldn't be hard to have a cron job take the cert that the letsencrypt container is making and update the cert in OMV.

Quote from ryecoaaron

I understand that. I was just mentioning why Volker probably won't change it to a file. And that is why I pointed to the code. It wouldn't be hard to have a cron job take the cert that the letsencrypt container is making and update the cert in OMV.

Did I miss the code?

Quote from donh

Did I miss the code?

Yep, you missed the link I forgot to post lol. Previous posted fixed too.

https://github.com/OpenMediaVa…/rpc/letsencrypt.inc#L223

Quote from tinh_x7

We still missing some piece of the puzzle to key it import into OMV GUI.

Line 229-234 does that. If you don't want to use php, the original bash code may still work - https://github.com/OpenMediaVa…/sbin/omv-letsencrypt#L50