bors-mailu[bot]
6b5bb5fcd1
Merge #3559
...
3559: Fix #3531 (backport #3557 ) r=mergify[bot] a=mergify[bot]
## What type of PR?
bug-fix
## What does this PR do?
Ensure we have both RSA and ECDSA certs when using letsencrypt now that the default behaviour from certbot has changed.
This is only important for new installs, not those renewing existing certs.
### Related issue(s)
- closes #3531
## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.
- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog ) entry file.
<hr>This is an automatic backport of pull request #3557 done by [Mergify](https://mergify.com ).
Co-authored-by: Florent Daigniere <nextgens@freenetproject.org >
2024-09-23 09:16:11 +00:00
Florent Daigniere
e47da4ba0d
Fix #3531
...
(cherry picked from commit 8e4af5ad05
2024-09-22 13:25:31 +00:00
Florent Daigniere
bd7a5bd235
Add delay
...
(cherry picked from commit c11815b3a0
2024-09-13 07:29:26 +00:00
Florent Daigniere
6d2daebe68
Maybe fix #3402
...
(cherry picked from commit 8b34fbe881
2024-09-13 07:29:25 +00:00
Florent Daigniere
055b216627
log.critical() where useful
2023-10-17 14:05:08 +02:00
Florent Daigniere
9f93ed6593
Fix letsencrypt on master
2023-10-17 13:58:38 +02:00
Florent Daigniere
5230c28713
Fix letsencrypt on master
2023-10-06 13:48:09 +02:00
Florent Daigniere
45ef205887
Serve actual content as requested in review
2023-08-28 17:43:20 +02:00
Florent Daigniere
e7e169f1c1
Fix the obvious issue
2023-08-09 19:10:07 +02:00
Florent Daigniere
64ce3d1c96
Implement a busy loop for letsencrypt
2023-08-09 15:28:07 +02:00
Alexander Graf
a29f066858
Move even more python deps to base image
2022-10-12 16:32:27 +02:00
Florent Daigniere
1630a18dd8
Ensure that Mailu keeps working even if it can't obtain a certificate from letsencrypt for one of the HOSTNAMES
2022-10-08 15:32:08 +02:00
Florent Daigniere
6d80eea649
ghostwheel42's suggestion
2022-03-17 11:35:31 +01:00
Florent Daigniere
d677c465a7
Handle spaces too
2022-03-16 14:04:02 +01:00
Florent Daigniere
3a56525e21
As discussed on #mailu-dev
...
Don't attempt to guess what the user wants
2022-03-16 14:04:02 +01:00
Florent Daigniere
81b592f3cb
try to get LE certs for the new names
2022-03-16 14:04:02 +01:00
Florent Daigniere
0816cb9497
simplify as per ghostwheel42's suggestion
2022-02-20 11:56:21 +01:00
Florent Daigniere
e4a32b55f5
Send ISRG_X1 on port 25, make DANE pin that
2022-02-19 14:35:45 +01:00
Florent Daigniere
3e676e232a
fix #1270
2021-08-23 19:41:44 +02:00
Jack Murray
dd127f8f06
Change letsencrypt timer from 1h --> 1 day
...
There's no need to be calling certbot so frequently
2021-08-18 15:57:53 +02:00
Jack Murray
e304c352a1
Change letsencrypt timer from 1h --> 1 day
...
There's no need to be calling certbot so frequently
2021-08-18 15:40:44 +02:00
Florent Daigniere
c76a76c0b0
make it optional, add a knob
2021-08-10 12:19:51 +02:00
Florent Daigniere
109a8aa000
Ensure that we always have CERT+INTERMEDIARY CA
...
Let's encrypt may change things up in the future...
2021-08-10 10:55:21 +02:00
Florent Daigniere
12c842c4b9
In fact in fullchain we want all but the last
2021-08-09 23:27:03 +02:00
Florent Daigniere
24f9bf1064
format certs for nginx
2021-08-09 22:51:23 +02:00
Florent Daigniere
f05cc99dc0
Add ECC certs for modern clients
2021-08-09 21:06:15 +02:00
Florent Daigniere
cb68cb312b
Reduce the size of the RSA key to 3072bits
...
This is already generous for certificates that have a 3month validity!
We rekey every single time.
2021-08-09 20:40:56 +02:00
Tim Möhlmann
42e2dbe35d
Standarize image by using shared / similair layers
2018-10-31 19:17:23 +02:00
kaiyou
ac53b3ed97
Merge branch 'master' into refactor-repo
2017-11-01 18:29:25 +01:00
kaiyou
689be5f2d9
Move all directories per theme
2017-11-01 12:11:04 +01:00
