I set mine up on Ubuntu 18.04 with certificates from Let's Encrypt (I believe there are advantages to using them as a CA rather than using self-signed certificates). I found it to be fairly straightforward. The guide from Let's Encrypt takes you through EFF's "certbot", which has a plugin for Apache. These are the steps for basic install:
install apache2.
pull in the certbot repository and install certbot.
use certbot to generate certificates, but don't install them in apache ("certbot certonly...")
certbot will tell you that files "fullchain.pem" and "privkey.pem" have been created.
install openproject.
run "openproject configure",
Say "yes" to SSL.
When prompted for your "cert", give the path to the "fullchain.pem" file.
When prompted for your "key", give the path to the "privkey.pem" file.
For the "CA", leave it blank.
I believe with these steps, openproject's auto-configure took care of the rest.
Replies (2)
I set mine up on Ubuntu 18.04 with certificates from Let's Encrypt (I believe there are advantages to using them as a CA rather than using self-signed certificates). I found it to be fairly straightforward. The guide from Let's Encrypt takes you through EFF's "certbot", which has a plugin for Apache. These are the steps for basic install:
I believe with these steps, openproject's auto-configure took care of the rest.
Hi Zack,
your steps are exactly right. Some more information regarding renewal and certbot output can be found in our FAQ on the download and installation page.
Best,
Oliver