Lets Encrypt

[jsinoy]

Hi guys ,

I am wondering how to verify if meshcentral auto renew letsencypt certificate ? I've tried le and lecheck and i noticed that "daysleft" keep on decreasing . How to verify if meshcentral does auto-renew lets encrypt certificate ?

[si458]

Meshcentral will automatically renew the certificate if its less than 30 days I believe as that's standard let's Encrypt policy for everyone,
You will also notice the days left should change bk to 90 when it renews and then start counting down again

[jsinoy]

Thank you , would it break if we have added a custom port after the certificate was generated ? So instead of 443 , we use different port .

[jsinoy]

i will try to observer this , soo it should be renewing the certificate when it is below 30 days .

[nccerhostmaster]

@jsinoy if you want to use non-standard ports with Lets Encrypt you may want to look at using DNS challenges.

[jsinoy]

[jsinoy]

Failed to obtain certificate.

[silversword411]

For LE renewal you need port 80 exposed publicly for the auto-renewals done by certbot. If you're using something other than 443 for your web server, I'm not sure if it'll work or not.

If you needed LE wildcards, you'll need DNS based LE renewal which is a manual process

[dinger1986]

a custom port is fine as long as port 80 is still open

[Ylianst]

The MeshCentral redirection port needs to be open to the internet and listening to port 80. So, you need this (which is the default):

"redirport": 80

[silversword411]

Looks like all this info is already in the docs

https://ylianst.github.io/MeshCentral/meshcentral/#lets-encrypt-support

[jsinoy]

Thanks guys . its working now.

Cheers,