Add Letsencrypt certificate manualy

Install & Config
#1

Hello
I install jitsi on a local network computer (192.168.0.X)
On this network I have also an other computer for a web server (192.168.0.Y using port 80) which has also letsencrypt certificate.
I have haded the jitsi.mydomain.com to the web server certificate.
The web server has nginx which forward the trafic to the jitsi computer.

The jitsi works fine between 2 computer but with the auto sign certificate. An you have to “enter” in a non secure web site…

I would like to replace manualy (because the letencrypt script need the port 80 acces which is not possible…)
Where can I do this ?

Thanks for help

#2
  1. You can do it via reverse proxy
    OR
  2. Copy the fullchain cert + key to jitsi server and adjust nginx.conf accordingly
#3

Thanks for reply

I would like the option 2.
On the Jitisi computer in /etc/jitsi/meet i have a mydomaine.crt
And on the other computer in /etc/letsencrypt/live/mydomaine/ i have some pem files

Which one do I have to put ? and do I just have to rename .pem in .crt ?

#4

convert your main server cert to a wildcard one and copy these 2 files over

ssl_certificate /etc/letsencrypt/archive/meet.mydomain.com/fullchain1.pem;
ssl_certificate_key /etc/letsencrypt/archive/meet.mydomain.com/privkey1.pem;

make sure you set the permissions correctly

then edit your

/etc/nginx/sites-available/meet.mydomain.com.conf accordingly

#5

Thanks Masteryoda
So I get from my web server to jitsi server on the /etc/letsencrypt/live/mydomain/ dir the
fullchain.pem and privkey.pem

in fact I have a nginx on the web server, but on the jitsi computer i have a apache.
I have in the /etc/apache2/site-available/jitsi.mydomain.conf file 2 line almost as the one describe in nginx :
SSLCertificateFile /etc/jitsi/meet/jitsi.mydomain.crt
SSLCertificateKeyFile /etc/jitsi/meet/jitsi.mydomain.key
which is the autosign creat during jitsi install.
I try :
SSLCertificateFile /etc/letsencrypt/live/mydomain/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/mydomain/privkey.pem

And its works!

Many thanks

#6

Sorry for that but how do I edit the title to add “Resolve” ? I can do it…