ASL Web Portal SSL certificate

OS Help
1

Hello Everyone,

I know this has been asked before (link below), but I need a little more info…. I’m using certbot it has generated multiple certificates. I’ve tried to copy these directly into /etc/cockpit/ws-certs.d and deleting the self signed certificates. I’ve tried to rename the .pem files to .key and .cert to match the self signed keys, but no luck.

I have these files in the live directory of letsencript: cert.pem, chain.pem, fullchain.pem, privkey.pem

Which ones do I need and what should the file name be once copied?

FYI. The keys work for for supermon, allmon3, DVSwitch & the ASL main cockpit page.

Thanks,

Will
WY7WL

2

All you need to do is create symlinks to the "live" links:

root@node48496:/etc/cockpit/ws-certs.d# pwd
/etc/cockpit/ws-certs.d
root@node48496:/etc/cockpit/ws-certs.d# ls -l
total 0
lrwxrwxrwx 1 root root 56 Jan  3  2025 50-node48496.cert -> ../../letsencrypt/live/node48496.w8wky.org/fullchain.pem
lrwxrwxrwx 1 root root 54 Jan  3  2025 50-node48496.key -> ../../letsencrypt/live/node48496.w8wky.org/privkey.pem

And delete the rest.

3

Ok, I wasn’t using the fullchain.pem

However, its still making self signed keys… All browsers closed, rebooted the server, and using incognito browser.

total 8
-rw-r--r-- 1 root root 1314 Jan  5 02:26 0-self-signed.cert
-rw------- 1 root root 1704 Jan  5 02:26 0-self-signed.key
lrwxrwxrwx 1 root root   52 Jan  5 02:21 fullchain.pem -> /etc/letsencrypt/live/ke8vny.wy7wl.com/fullchain.pem
lrwxrwxrwx 1 root root   50 Jan  5 02:21 privkey.pem -> /etc/letsencrypt/live/ke8vny.wy7wl.com/privkey.pem
4

Got it.

The file name needs to reflect the domain.key or domian.cert.

Missed that.

Thanks

5

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.