SSL certs via ClouDNS - Revision history

Tinker at 21:17, 21 August 2023

2023-08-21T21:17:56Z

← Older revision		Revision as of 17:17, 21 August 2023
Line 1:		Line 1:
	<span style="font-size: 24pt; color: rgb(224, 62, 45);" >'''WIP!!!'''</span>		<span style="font-size: 24pt; color: rgb(224, 62, 45);">'''WIP!!!'''</span>

	Since moving my external DNS to [https://www.cloudns.net/ ClouDNS], they have added [https://www.cloudns.net/news/article/241/?utm_source=Mail&utm_campaign=2023_06_3_newsletter&utm_medium=freessl_news_link a VERY useful service]. The time has come to put it to use!		Since moving my external DNS to [https://www.cloudns.net/ ClouDNS], they have added [https://www.cloudns.net/news/article/241/?utm_source=Mail&utm_campaign=2023_06_3_newsletter&utm_medium=freessl_news_link a VERY useful service]. The time has come to put it to use!

2023-08-21T21:17:41Z

← Older revision		Revision as of 17:17, 21 August 2023
Line 1:		Line 1:
	<span style="font-size: 24pt;" >'''WIP!!!'''</span>Since moving my external DNS to [https://www.cloudns.net/ ClouDNS], they have added [https://www.cloudns.net/news/article/241/?utm_source=Mail&utm_campaign=2023_06_3_newsletter&utm_medium=freessl_news_link a VERY useful service]. The time has come to put it to use!		<span style="font-size: 24pt; color: rgb(224, 62, 45);" >'''WIP!!!'''</span>

			Since moving my external DNS to [https://www.cloudns.net/ ClouDNS], they have added [https://www.cloudns.net/news/article/241/?utm_source=Mail&utm_campaign=2023_06_3_newsletter&utm_medium=freessl_news_link a VERY useful service]. The time has come to put it to use!

	= Important Notes =		= Important Notes =

2023-08-21T21:17:16Z

← Older revision		Revision as of 17:17, 21 August 2023
Line 1:		Line 1:
	Since moving my external DNS to [https://www.cloudns.net/ ClouDNS], they have added [https://www.cloudns.net/news/article/241/?utm_source=Mail&utm_campaign=2023_06_3_newsletter&utm_medium=freessl_news_link a VERY useful service]. The time has come to put it to use!		<span style="font-size: 24pt;" >'''WIP!!!'''</span>Since moving my external DNS to [https://www.cloudns.net/ ClouDNS], they have added [https://www.cloudns.net/news/article/241/?utm_source=Mail&utm_campaign=2023_06_3_newsletter&utm_medium=freessl_news_link a VERY useful service]. The time has come to put it to use!

	= Important Notes =		= Important Notes =

2023-08-12T23:37:26Z

Step 4 : put the cert into a useful place

← Older revision		Revision as of 19:37, 12 August 2023
Line 41:		Line 41:

	So '''/etc/ssl/certs''' & '''/etc/ssl/private''' looks sensible to me & I've named the files '''ssl-DOMAIN.pem''' & '''ssl-DOMAIN.key''' because there's no snakeoil involved here.		So '''/etc/ssl/certs''' & '''/etc/ssl/private''' looks sensible to me & I've named the files '''ssl-DOMAIN.pem''' & '''ssl-DOMAIN.key''' because there's no snakeoil involved here.

			(Also, that script or program above should be able to directly extract the files into those locations.)

	= Step 5 : Tell Apache about it =		= Step 5 : Tell Apache about it =

	= Step 6 : Automate the update process =		= Step 6 : Automate the update process =

2023-08-12T23:36:20Z

Step 4 : put the cert into a useful place

← Older revision		Revision as of 19:36, 12 August 2023
Line 33:		Line 33:

	= Step 4 : put the cert into a useful place =		= Step 4 : put the cert into a useful place =
			Looking at the standard '''default-ssl.conf''' file for Apache, the reveals:

			<pre>
			SSLCertificateFile      /etc/ssl/certs/ssl-cert-snakeoil.pem
			SSLCertificateKeyFile   /etc/ssl/private/ssl-cert-snakeoil.key
			</pre>

			So '''/etc/ssl/certs''' & '''/etc/ssl/private''' looks sensible to me & I've named the files '''ssl-DOMAIN.pem''' & '''ssl-DOMAIN.key''' because there's no snakeoil involved here.

	= Step 5 : Tell Apache about it =		= Step 5 : Tell Apache about it =

	= Step 6 : Automate the update process =		= Step 6 : Automate the update process =

2023-08-12T21:45:09Z

Step 3 : Make the cert useable

← Older revision		Revision as of 17:45, 12 August 2023
Line 25:		Line 25:
	= Step 3 : Make the cert useable =		= Step 3 : Make the cert useable =
	(This is where it's gonna get interesting...)		(This is where it's gonna get interesting...)

			The certs are available as either an XML or a JSON payload...

			Attempt #1:  Manually extract the key & the fullchain cert set into separate files.  Seems to work...

			Attempt #2:  Write a script or actual program to extract these...

	= Step 4 : put the cert into a useful place =		= Step 4 : put the cert into a useful place =

2023-08-12T18:37:35Z

Important Notes

← Older revision		Revision as of 14:37, 12 August 2023
Line 6:		Line 6:
	# You will need to enable an '''API user'''		# You will need to enable an '''API user'''
	#* (do that [https://www.cloudns.net/api-settings/ here]')		#* (do that [https://www.cloudns.net/api-settings/ here]')
			# These certs are wildcard certs for the whole domain

	= Step 1 : Create the cert =		= Step 1 : Create the cert =

2023-08-12T18:34:12Z

Step 1 : Create the cert

← Older revision		Revision as of 14:34, 12 August 2023
Line 13:		Line 13:
	Then click the '''Free SSL''' button.		Then click the '''Free SSL''' button.

	~~Follow~~ the ~~directions given~~ & then wait for it.		Select your preferred authority, hit the "'''Activate Free SSL'''" button & then wait for it.

	(In this example, I've used the "Let's Encrypt" option.  May look into "ZeroSSL" later...)		(In this example, I've used the "Let's Encrypt" option.  May look into "ZeroSSL" later...)

2023-08-12T18:31:46Z

Step 1 : Create the cert

← Older revision		Revision as of 14:31, 12 August 2023
Line 14:		Line 14:

	Follow the directions given & then wait for it.		Follow the directions given & then wait for it.

			(In this example, I've used the "Let's Encrypt" option.  May look into "ZeroSSL" later...)

	= Step 2 : Download the cert =		= Step 2 : Download the cert =

2023-08-12T18:29:38Z

Important Notes

← Older revision		Revision as of 14:29, 12 August 2023
Line 5:		Line 5:
	# This service is only available if your account is '''Premium M''' or better		# This service is only available if your account is '''Premium M''' or better
	# You will need to enable an '''API user'''		# You will need to enable an '''API user'''
			#* (do that [https://www.cloudns.net/api-settings/ here]')

	= Step 1 : Create the cert =		= Step 1 : Create the cert =