2 problems solved!!! 1st) If port management page looks funny and you cannot save just clear your browsers cache and reload. 2nd) I didn't have to change anything to port management to install LetsEncrypt. I followed the video no problem, but an extra step is required (if it's not automatically done). After you install the certificate head back to port management and select your FQDN under the green bar HTTPS Address.
ok, so what is that new certificate used for? communication from my computer to my local PBX? or from my local PBX to the trunking service somewhere in the cloud? maybe both?
Chris, I tried contacting you for some consultation work on your site. I got a response back from someone saying “Thanks for reaching out! Unfortunately though, we are completely overbooked and are not taking on new clients at the moment.” I was looking for help setting up a Vega 60gv2.
My screen for port management is different than yours. I have below insecure Port (http), Port 8080 and below that is Enter custom port. Then to the right is Force with an arrow. Then Secure Port (https) HTTP Not available, below that Enter custom port. When I make the changes you suggested and select update Now, ann the Enter custom port boxes go red. Firewall is not updating.
I know you done some video's about Sangoma's SBC. My question is does Sangoma's SBC also have let's encrypt pre installed with automatic renewal, As freepbx has
Hey guys for on prem installations I spent the whole day trying to figure out why when logging using my FQDN I would get a time out after the login screen. Im not sure if its router specific but apparently mine doesnt like hairpin traffic. So i have to use my local ip when on the same network but if accessed from outside my network it all works perfectly. Make sure to forward yours ports on the router. as well.
I'm wondering whether changing the Admin port and setting LE port to 80 is necessary in FreePBX 16, or if there is some extra/magic sauce that makes doing so no longer relevant...? On a clean FreePBX 16 install, with firewall enabled, sole eth0 port in Internet zone, responsive firewall enabled, and DNS/FQDN/hostname set, I requested an LE cert and received a response with certificate very quickly. I hadn't made any changes to port assignments. After installing the LE cert for Apache, I then enabled a number of the https services on their default ports (including admin on 443) and forced https. I'm a little concerned that if I don't change the Admin http port (e.g. to 8080) and explicitly set LE http to 80, auto renewals will fail...?
There was a time when Let's Encrypt didn't auto renew and you had to create a cron job that ran I believe every month to renew. If you missed that window the cert expired and hair would be pulled out.
Does this need to be done if you're using it before a firewall on a LAN? Any benefit other than the admin website being encrypted? Seems like a lot to register a public IP to a DNS record just for this.
Hi! You used the host name and could also generate the LetsEncript certificate with it. When I do it, it cannot resolve it and generation fails. What is the procedure to create a host name that will work?
@@gabomur Did you ever figure this out? I'm getting the same - letsencrypt generation failure, saying my fqdn doesn't resolve correctly (but it does when I punch it into the browser)
Hello Chris, I keep getting an error when trying to generate the certificate ( Unable to update challenge :: authorization must be pending ) any idea what's the issue here? Or anyone else got the same issue? This is on the latest version of FreePBX
![[part 20] FreePBX security avoiding newbie mistakes](http://i.ytimg.com/vi/0hUkORBhwBQ/mqdefault.jpg)
2 problems solved!!!
1st) If port management page looks funny and you cannot save just clear your browsers cache and reload.
2nd) I didn't have to change anything to port management to install LetsEncrypt. I followed the video no problem, but an extra step is required (if it's not automatically done). After you install the certificate head back to port management and select your FQDN under the green bar HTTPS Address.
Thanks for the tip. I did like you suggested and went back to Port Management and selected the FQDN their. I'm on FreePBX 16
Wow! This is the best Letsencrypt automation I've seen around. Thanks for the video.
Chris your are literally the best in the business
As always, short, sweet, and right to the point. Now I don't have to update the cert annually.
This was extremely helpful. I appreciate all of your guides. Very informative
ok, so what is that new certificate used for? communication from my computer to my local PBX? or from my local PBX to the trunking service somewhere in the cloud? maybe both?
Let's Encrypt works differently in V16 and I haven't been able to get it to work
Chris, please make a tutorial on how to configure webrtc phone ucp
Chris, I tried contacting you for some consultation work on your site. I got a response back from someone saying “Thanks for reaching out! Unfortunately though, we are completely overbooked and are not taking on new clients at the moment.”
I was looking for help setting up a Vega 60gv2.
My screen for port management is different than yours. I have below insecure Port (http), Port 8080 and below that is Enter custom port. Then to the right is Force with an arrow. Then Secure Port (https) HTTP Not available, below that Enter custom port. When I make the changes you suggested and select update Now, ann the Enter custom port boxes go red. Firewall is not updating.
I know you done some video's about Sangoma's SBC. My question is does Sangoma's SBC also have let's encrypt pre installed with automatic renewal, As freepbx has
Hey guys for on prem installations I spent the whole day trying to figure out why when logging using my FQDN I would get a time out after the login screen. Im not sure if its router specific but apparently mine doesnt like hairpin traffic. So i have to use my local ip when on the same network but if accessed from outside my network it all works perfectly. Make sure to forward yours ports on the router. as well.
I'm wondering whether changing the Admin port and setting LE port to 80 is necessary in FreePBX 16, or if there is some extra/magic sauce that makes doing so no longer relevant...? On a clean FreePBX 16 install, with firewall enabled, sole eth0 port in Internet zone, responsive firewall enabled, and DNS/FQDN/hostname set, I requested an LE cert and received a response with certificate very quickly. I hadn't made any changes to port assignments. After installing the LE cert for Apache, I then enabled a number of the https services on their default ports (including admin on 443) and forced https. I'm a little concerned that if I don't change the Admin http port (e.g. to 8080) and explicitly set LE http to 80, auto renewals will fail...?
There was a time when Let's Encrypt didn't auto renew and you had to create a cron job that ran I believe every month to renew. If you missed that window the cert expired and hair would be pulled out.
Does this need to be done if you're using it before a firewall on a LAN? Any benefit other than the admin website being encrypted? Seems like a lot to register a public IP to a DNS record just for this.
I'm wondering the same thing. Is there a benefit to doing the FQDN method?
If your endpoints need to communicate via websockets, for instance.
Hi! You used the host name and could also generate the LetsEncript certificate with it. When I do it, it cannot resolve it and generation fails. What is the procedure to create a host name that will work?
same question here
@@gabomur Did you ever figure this out? I'm getting the same - letsencrypt generation failure, saying my fqdn doesn't resolve correctly (but it does when I punch it into the browser)
@@zetto156 its because you have not pointed your domain to the ip before doing it
How to handle if XML files won’t pass after turning on let’s encript?
Port for RestAps needs to be defaulted to https?
Hello Chris,
I keep getting an error when trying to generate the certificate ( Unable to update challenge :: authorization must be pending ) any idea what's the issue here? Or anyone else got the same issue? This is on the latest version of FreePBX
Thank you
How do i change ARI username/ password and i keep getting error of firewall module is not installed can you help me out in this
Hostname / FQDN error!
"Domain name does not end with a valid public suffix (TLD)"
don't know how it works, maybe a video. nice work
Great Config, Cloud you do a Video for implementation without VPN (freePBX open port to internet)
looks like mod_ssl is installed by default and running. I can connect to 443
I had to close Chrome and re-open, then when going to my FQDN for FreePBX, it showed up all secure.
is that a white raspberry pi behind you ?! so pretty
I wish they supported dns challenge since it's not reasonable to dedicate a port just for that.
LetsEncrypt Generation Failure?
I am having the same issue on V16. Chris would you please provide an update to this video for V16 or let us know how to fix this issue. Thanks
👍
Thanks Chris!