From: "Peter Moylan" Received: from [192.168.100.201] (HELO mail.2rosenthals.com) by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10) with ESMTP id 11330798 for ecs-isp@2rosenthals.com; Sun, 08 Dec 2024 05:00:20 -0500 Received: from [192.168.200.201] (port=50880 helo=mail2.2rosenthals.com) by mail.2rosenthals.com with esmtp (Exim 4.97.1) (envelope-from ) id 1tKE5F-000000004fF-1z4U for ecs-isp@2rosenthals.com; Sun, 08 Dec 2024 05:00:15 -0500 Received: from pmoylan.org ([144.6.37.71]:55926 helo=mail.pmoylan.org) by mail2.2rosenthals.com with esmtp (Exim 4.97.1) (envelope-from ) id 1tKE5B-000000007SL-1rgN for ecs-isp@2rosenthals.com; Sun, 08 Dec 2024 05:00:11 -0500 X-SASI-Hits: BODYTEXTP_SIZE_3000_LESS 0.000000, BODY_ENDS_IN_URL 0.000000, BODY_SIZE_2000_2999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_7BIT 0.000000, DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, KNOWN_MSGID 0.000000, LEGITIMATE_SIGNS 0.000000, MSG_THREAD 0.000000, NO_URI_HTTPS 0.000000, REFERENCES 0.000000, SENDER_NO_AUTH 0.000000, SINGLE_URI_IN_BODY 0.000000, SUSP_DH_NEG 0.000000, TO_IN_SUBJECT 0.500000, USER_AGENT 0.000000, __ANY_URI 0.000000, __BODY_NO_MAILTO 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __COURIER_PHRASE 0.000000, __CP_URI_IN_BODY 0.000000, __CT 0.000000, __CTE 0.000000, __CT_TEXT_PLAIN 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HEADER_ORDER_FROM 0.000000, __INVOICE_MULTILINGUAL 0.000000, __IN_REP_TO 0.000000, __MAIL_CHAIN 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MOZILLA_MSGID 0.000000, __MOZILLA_USER_AGENT 0.000000, __NO_HTML_TAG_RAW 0.000000, __PASSWORD_IN_BODY 0.000000, __PHISH_PHRASE1_C 0.000000, __PHISH_SPEAR_PASSWORD_1 0.000000, __RCVD_FROM_DOMAIN 0.000000, __REFERENCES 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __SINGLE_URI_TEXT 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_IN_SUBJECT 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_IN_BODY 0.000000, __URI_MAILTO 0.000000, __URI_NOT_IMG 0.000000, __URI_NO_PATH 0.000000, __URI_NS 0.000000, __URI_WITHOUT_PATH 0.000000, __USER_AGENT 0.000000 X-SASI-Probability: 9% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2024.12.8.92446 X-SASI-Hits: BODYTEXTP_SIZE_3000_LESS 0.000000, BODY_ENDS_IN_URL 0.000000, BODY_SIZE_2000_2999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_7BIT 0.000000, DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, KNOWN_MSGID 0.000000, LEGITIMATE_SIGNS 0.000000, MSG_THREAD 0.000000, NO_URI_HTTPS 0.000000, REFERENCES 0.000000, SENDER_NO_AUTH 0.000000, SINGLE_URI_IN_BODY 0.000000, SUSP_DH_NEG 0.000000, TO_IN_SUBJECT 0.500000, USER_AGENT 0.000000, __ANY_URI 0.000000, __BODY_NO_MAILTO 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __COURIER_PHRASE 0.000000, __CP_URI_IN_BODY 0.000000, __CT 0.000000, __CTE 0.000000, __CT_TEXT_PLAIN 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HEADER_ORDER_FROM 0.000000, __INVOICE_MULTILINGUAL 0.000000, __IN_REP_TO 0.000000, __MAIL_CHAIN 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MOZILLA_MSGID 0.000000, __MOZILLA_USER_AGENT 0.000000, __NO_HTML_TAG_RAW 0.000000, __PASSWORD_IN_BODY 0.000000, __PHISH_PHRASE1_C 0.000000, __PHISH_SPEAR_PASSWORD_1 0.000000, __RCVD_FROM_DOMAIN 0.000000, __REFERENCES 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __SINGLE_URI_TEXT 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_IN_SUBJECT 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_IN_BODY 0.000000, __URI_MAILTO 0.000000, __URI_NOT_IMG 0.000000, __URI_NO_PATH 0.000000, __URI_NS 0.000000, __URI_WITHOUT_PATH 0.000000, __USER_AGENT 0.000000 X-SASI-Probability: 9% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2024.12.8.92446 DKIM-Signature: v=1; q=dns/txt; a=rsa-sha256; c=relaxed/relaxed; s=default; d=pmoylan.org; bh=GDiQezXCqS8DJX+U04pCl4NzV6GhNjuYTe5Gdp7VK1k=; h=From:To:Date:Message-ID; b=hiBrLuq28P4Dr1+i0lRI3npQ+axLKS1HysH4pBXAGI0L9gwOIFtJMGxLN6NCxDwyjAqNM C0xGSUBBIXcaNO+fH+j2vgQRkNd49+5B9Jobc3zj6SELtrlHApBaimYwAGH3sLn4Qk7uB54 BkC2DxmC+yNw3+tQELB18FH1DvDNQiY= Received: from [192.168.20.3] (peter.pmoylan.org [192.168.20.3]) by mail.pmoylan.org (Weasel v3.0) for ; Sun, 08 Dec 2024 21:00:04 +1100 Subject: Re: [eCS-ISP] Getting started with Let's Encrypt To: eCS ISP Mailing List References: Message-ID: <67556E24.90707@pmoylan.org> Date: Sun, 8 Dec 2024 21:00:04 +1100 User-Agent: Mozilla/5.0 (OS/2; Warp 4.5; rv:38.0) Gecko/20100101 Thunderbird/38.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit On 07/12/24 16:42, Steven Levine wrote: > Then you need to register yourself with Let's Encrypt using > > uacme -v new > > to create your production account. This will create > c:\etc\ssl\uacme\private\key.pem - your account's private key. SYS1804: The system cannot find the file GTLS30. I've tracked down a copy of gnutls-3.5.8.zip from OS2Site, and extracted GTLS30.DLL from that. SYS1804: The system cannot find the file CURL4. Hmm. ANPM says that I have curl installed. It sounds as if I'm going to be spending a few days on a DLL hunt. I think I'll switch to another job before tackling that. > going to automatically work for other folks setups. When time > permits, I plan to modify uacme-hook and uacme-renew to use a single > configuration file which will make the scripts easier to use for > others. Suggestion: modify the format of your uacme-renew.domains file so that the first field on each line gives the HTML document root for that domain. Because, no matter what "logical" file layout plan you devise, you will find installations where that arrangement doesn't work. Some time back I rearranged my HTML files to put them all in subdirectories of D:\Domains. But it turned out that my main domain pmoylan.org (the only one that's in serious use at present) broke the logical pattern, because I ended up with directories D:\Domains\pmoylan.org\Public and D:\Domains\pmoylan.org\Private. The private part is necessary because I have a lot of password-protected web pages, and also several password-protected FTP accounts. In hindsight, I now see that I should change D:\Domains\pmoylan.org\Private to D:\Domains\Private\pmoylan.org, and move everything in the "Public" part one level up in the tree, so that all the public pages in all domains follow a simple logical tree structure. But to do this I'll have to change some directory entries in Setup for WebServe, FtpServer, SFtpServer, and maybe some others that I've forgotten. Reorganisation always has a cost. I noticed that your uacme-hook has a lot of error checking that could, in my opinion, be once-only checks. (In my case, the error messages prompted me to create a number of directories that didn't exist.) If I were doing that job, I'd write a separate "configure" script that created all the necessary directories and configuration file, and where needed prompted the user for some locations; and then simplify the uacme-hook code. -- Peter Moylan peter@pmoylan.org http://www.pmoylan.org