Installing a SSL Certificate manually

[nkatakis]

I am a bit confused here. I think I should try to repeat the steps you went through:

• You installed manually a certbot dynamic DNS plugin after freedombox installation

@auser

So I’m using gandi.info for my domain and using GitHub - obynio/certbot-plugin-gandi: Certbot plugin for authentication using Gandi LiveDNS to get a certificate (or two).

• After that you created a certificate using the dynamic DNS plugin - How? Can you explain more?
• Then you click reobtain in Freedombox and the cerificate was put in place(?)

@auser

Out of a lar I pressed “re-obtain” and lo and behold: plinth and dashboard now work with the cert that correspond to the hostname!

I have a few objections here.

For start, Freedombox is using the webroot authenticator.

@auser

I’m not exposing port 80 or 443 to the Internet. Instead I requested a SSL cert by DNS challenge. This works as well. I Have both a domain and a matching certificate.

You re saying that you re not exposing the web server ports so FreedomBox is still not managing your certificates and wont be able to renew! In order for FreedomBox to be able to obtain certificates from Lets Encrypt you need to open those ports (80, 443).

@auser

But i guess in that case one would have to move/copy it with each renewal?

You will still need to obtain manually every time it expires if you do not expose the webserver on the Internet.