pull down to refresh

Hi Stackers, I would like to learn how to renew the SSL for domains since it needs to be renewed from time to time. I'm currently using https://letsencrypt.org/. A dev set up a bot for this before, but it failed to renew it somehow, and the idea of needing to deal with this every few months is quite annoying if I don't have the skill for it.
I looked around and found this tool: https://webmin.com/; it seems quite handy, what do you think of this tool? I wish I had been taught the good information from the start. Now, we are relying on so many tools without actually knowing what's working under the hood, but the good news is that it is never too late to learn.
@ek taught me once how to get into the terminal, and we were reaching the step where all my domains were shown, then I don't know what is the next step.
Happy to give the bounty to the best answer:)
10,000 sats paid
Natalia's bounties
Updated
I managed to go through all the steps with Certbot, and it said" Successfully received certificate. "🥁
but it's not showing the https yet, only http.
reply
It mostly depends on how your hosting provider is set. if you have cPanel installed in your server, there are some tools there to manage and renew SSL certs. cPanel can also be installed. Not ideal, but useful.
I'll be happy to make a specific tutorial for your case if you are happy to share which hosting provider you are using, or at least your web server setup.
Other tools you can check:
reply
deleted by author
reply
I feel you, SSL are a pain (at least have been for me) if you are not set properly. I assume you got a Cloud VPS?
Another good option is to bother the tech support and ask for suggestions. They have probably other clients facing the same issue. They may try to upsell you cPanel VPS, for 4x the price... excluded I guess!
Also noticed they sell SSL themselves... so maybe the tech support will be not that useful. https://help.contabo.com/en/support/solutions/articles/103000269954-can-i-setup-an-ssl-certificate-with-contabo-
Installing a SSL certificate manager or a web server manager like CloudPanel is a good option, especially if you don't want to pay a license for cPanel yourself.
Here a demo, pretty simple and intuitive that allow you to create and manage LetsEncrypt SSL certs without extra cost https://demo.cloudpanel.io/site/mynodeapp.com/lets-encrypt-certificate/new
reply
deleted by author
reply
You are at good stage, you basically need a MySQL database, does your hosting provider has it installed? How do you manage the database for your existing sites?
reply
yes
How do you manage the database for your existing sites?
I think it should be MySQL, but isn't the problem now is the Ubuntu incompatible which means I should update it first?
A dev set up a bot
It's probably https://certbot.eff.org/ if its a raw VPS server, since its not automated though they probably set it up badly, so your mileage will vary on the generic instructions
or is it a webhosting service with a control panel? If so the correct place to manage it would be there, but again it should be automated...
Great tool but your server will be pwned very quickly by exploit scrapers if its not secured properly
reply
deleted by author
reply
Certificates are free via certbot, so the host sounds very scammy to be charging for that. Most webhosts control panels just provide a wrapper around the free certs.
VPS's are great but do require a little linux expertise. I'm going to assume your dev set up some directives with static certs out of inexperience.
My recommendation would be move the reverse proxy directives they implemented over to Caddy, thats my preferred reverse-proxy since it has built-in auto-renewal and has a very simple config file format. It will handle all your domains and subdomains.
A billed out hour to do it would be less than your host wants for the wildcard (wildcard isn't appropriate in some cases either, browsers treat them differently)
reply
Caddy,
A billed out hour to do it would be less than your host wants for the wildcard
Exactly! it's so much cheaper hiring someone to fix it, but then it's not solving the root problem 😂 thus I would like to learn it myself:)
reply
AI should be able to walk you through it too...
"I have have several websites hosted on a VPS but don't know how the developer configured them, SSL certs are not automatically renewing. Help me identify the existing reverse-proxy config and help me set up Caddy and move them to it"
reply
You can use Certify the web tool. Automated process to renew and manage SSL certificates for your webs with letsencrypt.
reply
thanks, but it seems only for windows, is it any similar one for mac 🙊
reply
you need to install it on the server, not on your PC
reply
reply
To participate in early testing and provide feedback contact support at certifytheweb.com to register your interest.
not available yet 🤔
reply
you can install it on linux too. There are some other bots for letsencrypt but I don't have at hand rn the links.
reply
121 sats \ 2 replies \ @sox 21 Mar
I can vouch for Certbot! It's really effortless and kind of a standard ^^
If you use CloudFlare you can skip this and let them handle SSL, they will provide you with a CA root cert and certs that are valid for domain and subdomains
reply
reading about this bot atm:)
reply
deleted by author
then will need to learn about linux as well. 😂
reply
is that web self-hosted or in a cloud server?
reply
cloud server 👀
certbot renew
reply
deleted by author
reply
What are you using for serving your website. I use nginx so I do certbot --nginx and then run certbot renew every so often
reply
deleted by author
reply
You need to setup nginx first
reply