[Spce-user] SSL Certificate

[Henk]

Hi Syaiful,

It is possible to use multiple domains for Kamailio TLS as explained 
here: 
https://lists.kamailio.org/pipermail/sr-users/2015-February/087030.html 
but I have no experience with that. I am using _one_ certificate with 
multiple domains explained here: 
https://community.letsencrypt.org/t/host-multiple-domains-with-a-single-certificate/20917/2

If you are using NGINX to verify the certificate, you will need a custom 
ngcp-panel_csc.customtt.tt2 
(/etc/ngcp-config/templates/etc/nginx/sites-available) and include the 
acme-challenge location for both web-servers on port 80 and the admin port:

     location /.well-known/acme-challenge {
         root  /usr/share/ngcp-panel;
     }

If you can generate the certificates, you only have to add them in the 
config.yml template and generate the new config.
Last thing is to change the certbot renewal cron and add a NGINX reload 
to activate the new certificate.

Mine looks like this, running every week:
0 */12 * * 1 root test -x /usr/bin/certbot -a \! -d /run/systemd/system 
&& perl -e 'sleep int(rand(1800))' && certbot -q renew
50 */12 * * 1 root service nginx reload > /dev/null 2>&1

I hope this helps,

Henk Plessius

On 13-3-2018 15:40, Syaiful Bahri Kamaruddin wrote:
> Hi All,
> To add,
>
> as spce support multi domain, ie:
>
> current server is demo.institute.org
>
> customer 1 = demo.school2.org (their own domain)
> customer 2 = demo.school3.org (their own domain)
> # both created subdomain and pointing to tje current server.
>
> how to issue ssl and where should i place it on current domain for all
> customer.
>
> You guys help is highly appreciated.
>
> Best Regards
>
> Syaiful
> Newbie
>
> On March 13, 2018 9:45:05 PM Syaiful Bahri Kamaruddin
> <chefsyaiful at outlook.com> wrote:
>
>> Hi All,
>>
>> Need your guys help,
>> How should i do for Lets Encrypt SSL to be used on SPCE Mr5.5.2 . Could you
>> guys help me.
>>
>> Best Regards
>>
>> Syaiful
>> Newbie for school project
>>
>>
>> _______________________________________________
>> Spce-user mailing list
>> Spce-user at lists.sipwise.com
>> https://lists.sipwise.com/listinfo/spce-user
>
>
> _______________________________________________
> Spce-user mailing list
> Spce-user at lists.sipwise.com
> https://lists.sipwise.com/listinfo/spce-user

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20180313/1dc34c8a/attachment-0001.html>