:: Description: Start Apache, Renew Certificates, Copy and Rename the two files, stop the apache. The content of the batch file may be like: Check the C:\letsencrypt-win-simple\results-xcopy.log if the new certificates are copied correctly and that the certificates are delivered correctly by kerio! Modify the created task which runs daily:Īrguments: /c "C:\letsencrypt-win-simple\!!your-batch-file!!.bat"ġ2.
Create a batch file under "C:\letsencrypt-win-simple". If 8 is successfull, it is time to automate the rest:ġ0. perhaps try to close and open the browser or press STRG+F5.ĩ. You will need the file name of the certificate and key.Ĩ. The Certificates are now located here: C:\Program Files (x86)\Kerio\MailServer\sslcert Import it via the Kerio Admin Interface ONCE and then activate the certificate. Copy the %DOMAINNAME%-key.pem and %DOMAINNAME%-crt.pem from this folder to a location of your choice and rename it to %DOMAINNAME%.key and %DOMAINNAME%.crt. You should also use the same user for renewing as for creation. (without -test) Say YES to create the Daily Task to check and renew the certificates. If this successfull, create the certificates.
"C:\letsencrypt-win-simple\letsencrypt.exe" -manualhost > -webroot "C:\xampp\htdocs" -testįollow the instructions at the prompt of the exe-file.Ħ. If 4 is successfull, clean the htdocs folder of apache in order to minimize risks. Test Apache with "C:\xampp\apache_start.bat", try to access hxxp://>:80, stop apache with "C:\xampp\apache_start.bat" Disable Port 80 in Kerio Services in the Admin Interface (Port 4040)Ĥ.
#KERIO CONNECT AND APACHE DOWNLOAD#
Download letsencrypt-win-simple and extract it to C:\letsencrypt-win-simple ( hxxps:///Lone-Coder/letsencrypt-win-simple/release s)Ģa: Add "ServerName >:80" to c:\xampp\apache\conf\nfĢb: Optionally change the ssl port in "C:\xampp\apache\conf\extra\nf" to for example 444 instead of 443.
#KERIO CONNECT AND APACHE HOW TO#
I am NOT ALLOWED to Posts Links xDįor those who like to add Let's Encrypt Support to Kerio, which runs under Windows Server, here is how to manage it.ġa. Please replace "hxxp" in this message with "http". Re: Add SSL certificate to Kerio via CLI Would it be fine to replace the original file with a new one and restart Kerio? Let's say I just want to renew an existing certificate. I do however see a difference in adding a new certificate/domain to kerio and renewing the certificate. Since the certificates of Let's encrypt are only valid for 90 days, I would like to automate this. When I add them manually it works just fine. But after a restart, they don't show up in the GUI list. I've also add the intermediate certificate to the sslca directory. crt files to the sslcert directory in the store. I would like to know if it's possible to add SSL certificates (And intermediate certificates) to Kerio via the CLI. Since I'm starting to switch from Startcom to Let's encrypt. Home » GFI User Forums » Kerio Connect » Add SSL certificate to Kerio via CLI Show: Today's Messages :: Show Polls :: Message NavigatorĪdd SSL certificate to Kerio via CLI
0 kommentar(er)
