Renewing SSL Certificate on OpenVPN Server - Revision history

Admin at 10:29, 7 September 2023

2023-09-07T10:29:27Z

← Older revision		Revision as of 10:29, 7 September 2023
Line 1:		Line 1:
	~~Make sure certbot is not installed by OS packaging~~

	~~Install CertBot using Snap~~

	~~Invoke CertBot and generate the cert:~~

	Login to openvpn server from jupiter (10.0.1.55 using neal user and apoyar key)		Login to openvpn server from jupiter (10.0.1.55 using neal user and apoyar key)

Admin at 09:02, 21 September 2022

2022-09-21T09:02:19Z

← Older revision		Revision as of 09:02, 21 September 2022
Line 4:		Line 4:

	Invoke CertBot and generate the cert:		Invoke CertBot and generate the cert:

			Login to openvpn server from jupiter (10.0.1.55 using neal user and apoyar key)

	systemctl stop openvpnas		systemctl stop openvpnas
Line 9:		Line 11:
	systemctl status openvpnas		systemctl status openvpnas

	certbot certonly \		certbot certonly --force-renewal --standalone --non-interactive --agree-tos --email support@apoyar.eu --domains sslvpn.apoyar.net --pre-hook 'sudo service openvpnas stop' --post-hook 'sudo service openvpnas start'
	--force-renewal \
	--standalone \		(If getting error about port 80 while running above command, we have to kill the process running on that port)
	--non-interactive \
	--agree-tos \		to check services running on ports, run below command
	--email support@apoyar.eu \
	--domains sslvpn.apoyar.net \		netstat -anpt \| grep LISTEN
	--pre-hook 'sudo service openvpnas stop' \
	--post-hook 'sudo service openvpnas start'		check here and kill process and then try again running certbot command, once command executed get the certificate and key details, edit in below commands and execute below 2 commands

	ln -s -f /certificate path /usr/local/openvpn_as/etc/web-ssl/server.crt		ln -s -f /certificate path /usr/local/openvpn_as/etc/web-ssl/server.crt

Admin: Created page with "Make sure certbot is not installed by OS packaging Install CertBot using Snap Invoke CertBot and generate the cert: systemctl stop openvpnas systemctl status openvpnas certbot certonly \ --force-renewal \ --standalone \ --non-interactive \ --agree-tos \ --email support@apoyar.eu \ --domains sslvpn.apoyar.net \ --pre-hook 'sudo service openvpnas stop' \ --post-hook 'sudo service openvpnas start' ln -s -f /certificate path /usr/local/openvpn_as/et..."

2022-03-29T05:59:55Z

Created page with "Make sure certbot is not installed by OS packaging Install CertBot using Snap Invoke CertBot and generate the cert: systemctl stop openvpnas systemctl status openvpnas certbot certonly \ --force-renewal \ --standalone \ --non-interactive \ --agree-tos \ --email support@apoyar.eu \ --domains sslvpn.apoyar.net \ --pre-hook 'sudo service openvpnas stop' \ --post-hook 'sudo service openvpnas start' ln -s -f /certificate path /usr/local/openvpn_as/et..."

New page

Make sure certbot is not installed by OS packaging

Install CertBot using Snap

Invoke CertBot and generate the cert:

systemctl stop openvpnas

systemctl status openvpnas

certbot certonly \
--force-renewal \
--standalone \
--non-interactive \
--agree-tos \
--email support@apoyar.eu \
--domains sslvpn.apoyar.net \
--pre-hook 'sudo service openvpnas stop' \
--post-hook 'sudo service openvpnas start'

ln -s -f /certificate path /usr/local/openvpn_as/etc/web-ssl/server.crt

ln -s -f /keyfile path /usr/local/openvpn_as/etc/web-ssl/server.key

cd /usr/local/openvpn_as/scripts

./sacli stop

./sacli --key "cs.priv_key" --value_file "/etc/letsencrypt/live/sslvpn.apoyar.net/privkey.pem" ConfigPut

./sacli --key "cs.cert" --value_file "/etc/letsencrypt/live/sslvpn.apoyar.net/fullchain.pem" ConfigPut

./sacli start

reboot