[Koha-bugs] [Bug 15303] Letsencrypt option for Debian package installations

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15303

Mirko Tietgen <mirko at abunchofthings.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #46746|0                           |1
        is obsolete|                            |

--- Comment #31 from Mirko Tietgen <mirko at abunchofthings.net> ---
Created attachment 46749
  -->
http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=46749&action=edit
Bug 15303 Letsencrypt option for Debian package installations

New option koha-create --letsencrypt

- installs the letsencrypt package if needed
- creates <instance>
- generates letsencrypt certificates for <instance>
- sets up a https-only website for <instance>
- redirects http to https for <instance>

! letsencrypt and dependencies are only available in debian unstable right now
! but koha-common does not work in debian unstable, so you cannot test there
! apply the "Workaround" patch to test without letsencrypt package

! this patch uses the letsencrypt staging server
! to create real certificates, apply thy "LE production server" patch

Test plan:
- build a debian package with patch applied
- use apache mod_ssl
  sudo a2enmod ssl
- make sure the machine is accessible on 80 (needed for letsencrypt) and 443
from the internet
- install koha with your new package
- Put your (existing) domain options in /etc/koha/koha-sites.conf
- use koha-create with the new options:
  sudo koha-create --create-db --letsencrypt <instance>
- if you do not have the letsencrypt package installed, you will be prompted to
do that
  [ as long as there is no package available, a symlink to the git checkout
will work ]
- wait until setup is finished, check that you got a working OPAC and staff
client with certificates
- check that http redirects to https

Bug 15303 Recreate accidentally deleted C4/Auth_cas_servers.yaml.orig

-- 
You are receiving this mail because:
You are watching all bug changes.