This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Solution for pulling Let's Encryp Certificates from UTM to Linux Webserver?

Hi,

I m trying to wrap my brain arround this, how do you guys handle internal access to webservers? We run multiple webservers in our networks (also at home an owncloud for e.g.) in a sperate subnet that we access directly by public dns resolved to the internal IP. So we installed certbots on each server and uploaded the certificates to the UTM/WAF. Works ok for now.

Now with the 9.6 it would be a good idea to generate the LE certs on the UTM and then download them to the webservers and do a reload of the webserver. Has anyone a solution for this?

This thread was automatically locked due to age.

Parents

0 LuCar Toni over 5 years ago

You could try to download them via REST API. But to be honest, Certbots in a working environment are fair enough to be used instead of building a new deployment, isn´t it? https://www.sophos.com/en-us/medialibrary/PDFs/documentation/UTMonAWS/Sophos-UTM-RESTful-API.pdf

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 all4it over 5 years ago in reply to LuCar Toni

Yes, thats what I was thinking, a member here on the board (scorpionking) seems to have a bash script to pull the certs by rest.

I would prefer to get that going, the working solution with the bots is semi ok, we upload the certs manually right now, we never got a script running because the file names always changed.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 all4it over 5 years ago in reply to LuCar Toni

Yes, thats what I was thinking, a member here on the board (scorpionking) seems to have a bash script to pull the certs by rest.

I would prefer to get that going, the working solution with the bots is semi ok, we upload the certs manually right now, we never got a script running because the file names always changed.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data