6.7.11. Let’s Encrypt
This service allows you to automatically issue TLS certificates for the web interface of the router using
the PKI provided by Let’s Encrypt. If HTTPS is enabled, the web interface will automatically use the
Let’s Encrypt certificate, if Let’s Encrypt is enabled. Make sure that the following preconditions are met
in order to be able to issue and use Let’s Encrypt certificates:
– HTTP and HTTPS must be enabled on the web server on the standard ports 80 and 443
– The router must be reachable from the internet using the domain name configured for Let’s
Encrypt via TCP ports 80 and 443
As soon as the Let’s Encrypt component is enabled it automatically starts requesting a certificate for
the configured domain. It also checks once a day if the certificate needs to be renewed and requests
a new certificate if necessary.
Parameter Let’s Encrypt Settings
Enable Enables/disables the component
Domain Domain for which to request a certificate
Certificate state Indicates if the certificate is installed or missing or if it is currently
beeing issued
Certificate valid not before Time at which the validity of the installed certificate started
Certificate valid not after Time at which the validity of the installed certificate ends
Renew Certificate Allows to manually request renewal of the certificate. Note that this
only works if renewal is due.
Delete Certificate Deletes the installed certificate. This is only available if Let’s Encrypt
is disabled.
For debugging you can use the tail-scripts command in the CLI which shows the log of the ACME client
which requests the certificates. Or you also find the log of the last certificate request in the following
file:
/etc/acme/<DOMAIN>/issue.log
NB1601 160 User Manual for NRSW version 4.8.0.103
To Next Page
Loading...
