OPNsense Forum

Archive => 18.7 Legacy Series => Topic started by: ccesario on January 08, 2019, 04:54:29 pm

Title: Nginx and LetsEncrypt cert
Post by: ccesario on January 08, 2019, 04:54:29 pm

Hi folks, is it possible usage letsencrypt plugin with nginx ?
If yes, Is there any documentation !?

Regards
Carlos

Title: Re: Nginx and LetsEncrypt cert
Post by: juliocbc on January 08, 2019, 05:22:08 pm

Hello Carlos!

We are using here!

We need just create the Cert in the acme plugin and in HTTP Server section enable Let's Encrypt option and select the created certificate.

Title: Re: Nginx and LetsEncrypt cert
Post by: ccesario on January 08, 2019, 07:40:06 pm

Hey Julio,

Thanks by your info.....
But im facing problems to generate certificate by LetsEncrypt plugin... DO you have any doc about create it!?

Best regards

Carlos

Title: Re: Nginx and LetsEncrypt cert
Post by: juliocbc on January 09, 2019, 01:03:02 pm

Unfortunatelly not yet. Which step do you're facing problems?

Title: Re: Nginx and LetsEncrypt cert
Post by: ccesario on January 09, 2019, 04:00:33 pm

When I enable LetsEncrypt Plugin, I lost access from my OPNSense box by WEBGUI.

Is it possible you reproduce the steps to create the certificate ?

Regards
Carlos

Title: Re: Nginx and LetsEncrypt cert
Post by: juliocbc on January 09, 2019, 04:30:21 pm

Sure!

LE: Accounts
1-Create a LE account
2-Fill the with your info

LE: Validation methods
3-Create a validation method (we're using HTTP)

LE: Certificates
4-Create a certificate
5-Fill with your info (choose the account and validation method created before)
6-Click in the reload button and have a cup o coffee...
6.1- Check the logs,  if everything worked fine, you should see a message:

Code: [Select]

_on_issue_success
6.2 - Sometimes the certificate status have a little delay to change to OK. But if you found the success message in logs, wait a little more, the status will become OK. (you should refresh the page)

Attached the screenshots for steps 3 - 6.

Hope it works!

Title: Re: Nginx and LetsEncrypt cert
Post by: ccesario on January 11, 2019, 12:55:01 pm

Hi Julio, thanks by your howto.

I got success, but my problem it was that nginx it was running too in port 80, so the Letsencrypt Challenge service it was geting error due usage this port.
After change the nginx port  to 8081, the letsEncrypt it works.

Thank you

Carlos

Title: Re: Nginx and LetsEncrypt cert
Post by: juliocbc on January 11, 2019, 09:13:04 pm

Glad to know that you succeeded!!

Cheers!