SSL CSR file jitsi-meet nginx fullchain.pem sign

Help
1

Hi,

My domain is: tmamjappy.online (provideb by EURODNS)
jitsi.tmamjappy.online is my self hosted jitsi-meet server (With Upcloud)

I want to upload a certficate to EurDNS to submit a CSR file to be signed (SSL)
I can’t find which file I need to use:
(from /etc/letsencrypt/live/jitsi.tmamjappy.online-0001

cert.pem -> …/…/archive/jitsi.tmamjappy.online-0002/cert2.pem
chain.pem -> …/…/archive/jitsi.tmamjappy.online-0002/chain2.pem
fullchain.pem -> …/…/archive/jitsi.tmamjappy.online-0002/fullchain2.pem
privkey.pem -> …/…/archive/jitsi.tmamjappy.online-0002/privkey2.pem

(I guess fullchain.pem and certainly not privkey.pem ???)

And: do I need to covert the file first into a .csr file (some command ?)

Thanks a lot for any help or suggestions !!

Yvo.

I ran these command after installing jitsi-meet:
cerbot-nginx
===== cerbot-nginx choices ================================
What would you like to do?

1: Attempt to reinstall this existing certificate
2: Renew & replace the cert (limit ~5 per 7 days)

Select the appropriate number [1-2] then [enter] (press ‘c’ to cancel): 2
Renewing an existing certificate
Running deploy-hook command: /etc/letsencrypt/renewal-hooks/deploy/0000-coturn-certbot-deploy.sh
Deploying Certificate to VirtualHost /etc/nginx/sites-enabled/jitsi.tmamjappy.online.conf

Please choose whether or not to redirect HTTP traffic to HTTPS, removing HTTP access.

1: No redirect - Make no further changes to the webserver configuration.
2: Redirect - Make all requests redirect to secure HTTPS access. Choose this for
new sites, or if you’re confident your site works on HTTPS. You can undo this
change by editing your web server’s configuration.

Select the appropriate number [1-2] then [enter] (press ‘c’ to cancel): 2
Redirecting all traffic on port 80 to ssl in /etc/nginx/sites-enabled/jitsi.tmamjappy.online.conf

Your existing certificate has been successfully renewed, and the new certificate
has been installed.

==> so I wanted all URL request to be redirected to https://

  • sudo service ufw restart
  • sudo service nginx restart
  • sudo service cotun restart
  • sudo service coturn restart
  • sudo service jitsi-videobridge2 restart
  • sudo systemctl daemon-reload

It produced this output:

  1. all status OK,

My web server is (include version):

The operating system my web server runs on is (include version):
Ubuntu 18.04

My hosting provider, if applicable, is:
Upcloud

I can login to a root shell on my machine (yes or no, or I don’t know):
Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
Yes (just for DNS and hosted server, not for jitsi-meet ==> ssh + commandline

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):
certbot 0.31.0

2

Why? You've just issued a certificate--why are you trying to get another one?

3

Hi,
I had no experience whatsoever…I got a free ssl certificate from eurodns, and thought I had to generate a key and it be signed by them ,as proposed in their screen to redeem my free key.

I lost it now… I changed ports 4445 and 4446 in the nginx conf, because I saw no such port in my ufw setup.

Putting that back solved it, and I realise now I have a signed + a potential certificate… maybe the eurodns doesn’t need a refresh every 6 month…

Thanks anyway !

Yvo

1 Like
4

I guess you've now understood that Let's Encrypt and EuroDNS are offering separate and essentially unrelated services, and so you can use one or the other as you prefer—but using files from one with the other probably won't make it easier.

5

You are completely right !
By the way, I noticed I used the expression ’ I lost it now’, but I meant ’ I solved it now…

Guess the influence of my mothertongue (Netherlands) ‘ik heb het opgelost’ and my wife’s (Swedish) ‘jag har löst det’.

Sorry for that…

Yvo.

1 Like
6

I’m a little lost (!) in the etymological question of whether each of these terms comes from a root meaning ‘wash (away)’ or a root meaning ‘untie’, but I’ll have to try to answer that some other time. But it seems clear that there is an etymological connection in the idea of either washing away or untying a problem, and hence being rid of it. :slight_smile:

In present-day English “lost” is most used for cases where things have gone away against our will, but I think that connotation isn’t present in many related words, in English and other languages, where they may also apply to things that we actively wished to be rid of. In this case, I’m glad that you’ve gotten rid of this problem!

1 Like
7

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.