How to install Let's Encrypt SSL certificate for the SolusVM Master hostname?

Applicable to:

• SolusVM

Question

How to install Let's Encrypt SSL certificate for the SolusVM Master hostname?

Answer

Note: Master node should be configured with nginx Webserver.

Note: Instructions below uses a 3rd-party acme.sh script and below is just an example of usage in scope of SolusVM product.

1. Connect to SolusVM Master server over SSH.

2. Download installation package:

   # wget -O - https://get.acme.sh | sh -s email=my@example.com

   Replace my@example.com with the actual mail address you are going to use for Let's Encrypt registration

3. Issue the certificate:

   # /root/.acme.sh/acme.sh --set-default-ca --server letsencrypt --issue -d <MASTER_HOSTNAME> -w /usr/local/solusvm/www/.verification

   where <MASTER_HOSTNAME> - is actual master server hostname. 

4. Install the certificate:

   # /root/.acme.sh/acme.sh --installcert -d <MASTER_HOSTNAME> \
   --key-file /usr/local/svmstack/nginx/ssl/ssl.key \
   --fullchain-file /usr/local/svmstack/nginx/ssl/ssl.crt

   where <MASTER_HOSTNAME> - is actual master server hostname. 

5. Restart the services below to apply changes:

   # cd /usr/local/svmstack/nginx/ssl && cat ssl.key ssl.crt > ssl.pem
   # service svmstack-nginx restart
   # sh /usr/local/svmstack/sshwebsocket/quit
   # sh /usr/local/svmstack/sshwebsocket/port_check

6. Create a cert.pem file for noVNC and HTML5 consoles:

   # cat /usr/local/svmstack/nginx/ssl/ssl.crt /usr/local/svmstack/nginx/ssl/ssl.key > /usr/local/solusvm/includes/nvnc/cert.pem