[Spce-user] LetsEncrypt - sipwise with LTS but secure user portal

[Andy Clark]

LetsEncrypt - sipwise with LTS but secure user portal

hope this helps someone who is trying to install valid cert on sipwise

spce.mydomain.com
spce = hostname
mydomain.com = your domain name

you might need to reboot after changing modifying the config.yml (I had to,
also be sure to make a backup of it)


sudo apt update && sudo apt upgrade
sudo apt-get install git
sudo git clone https://github.com/letsencrypt/letsencrypt /opt/letsencrypt
cd /opt/letsencrypt
/opt/letsencrypt/certbot-auto certonly --manual --preferred-challenges dns
--email admin at mydomain.com --domains spce.mydomain.com
NOTE: follow the instructions on the screen

---manually renew---
/opt/letsencrypt/letsencrypt-auto renew

--- Don't use---
/opt/letsencrypt/certbot-auto certonly --manual --renew-by-default
--preferred-challenges dns  --email admin at gofiber.com --domains
spce.mydomain.com
------------------

---sipwise certificate location---
edit config.yml and replace with the below lines
sslcertfile: /etc/letsencrypt/live/spce.mydomain.com/fullchain.pem
sslcertkeyfile: /etc/letsencrypt/live/spce.mydomain.com/privkey.pem

don't change TLS cert on the config.yml or your phones will stop
registering, i'm not sure why but if anyone can help me it would nice
------

---schedule renewal for sipwise---
/etc/ngcp-config/templates/etc/crontab.tt2
/etc/ngcp-config/templates/etc/crontab.customtt.tt2
vim /etc/ngcp-config/templates/etc/crontab.customtt.tt2
0 0 1 * * /opt/letsencrypt/letsencrypt-auto renew
0 0 1 * * cd /opt/letsencrypt && git pull

---check the renew config---
cat /etc/letsencrypt/renewal/spce.mydomain.com.conf

check certificate
/opt/letsencrypt/certbot-auto certificates


location of cert
cd /etc/letsencrypt/live/spce.mydomain.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/mailman/private/spce-user_lists.sipwise.com/attachments/20190315/bc0a0915/attachment.html>