MacOS Kerio connect


#1

We have inherited an LetsEncrypt ssl configuration that has nothing for letsenrypt listed in /etc/ however home-brew is installed in /usr/local/ there is Dockerfile if that means anything to anyone in there, wondering how to renew the cert don’t care if its manual or auto but if its not renewed mail will stop flowing its on Mac OSX 10.11.6
Can the cert somehow be manually installed ? as it looks like there are no scripts or anything in the bash history

My hosting provider, if applicable, is:
cpanel
I can login to a root shell on my machine (yes or no, or I don’t know):
yes
I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
no Kerio Connect
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): NA


#2

It very much depends how your server is configured. Is there anything running on port 80?

If so, follow the instructions at https://certbot.eff.org/lets-encrypt/osx-other to issue a certificate in “webroot” mode.

If there is nothing running on port 80, you can follow the instructions at https://certbot.eff.org/lets-encrypt/osx-other to issue a certificate in “standalone” mode.

Based on previous questions asking about Kerio, I’m pretty sure that you will have to manually install the certificate into Kerio unless you can figure out a programmatic way to do it from e.g. a shell script that Certbot could run.


#3

Thanks _az i have seen now looking further into cpanel that it has this area called “autossl” this appears to be cpanels conduit to letsencrypt, if i manually have to install the cert how would one go about getting the raw certificate from lets encrypt ?


#4

Not sure about MAC, but the cert files can usually be found in folder:
/etc/letsencrypt/live/{cert.name}/
Where typically the fullchain.pem and privkey.pem files are enough to satisfy.
[otherwise maybe you can search for files with such names]


#5

Thanks rg305 and via cpanel ? i believe this is where the letsencrypt cert is renewed from/by


#6

Sorry, I have even less knowledge of that (not a MAC guy).


#7

All good cpanel is perl but sits on linux (not a windows guy!)


closed #8

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.