Koha/debian/scripts
Mirko Tietgen 2f634f2862 Bug 15303 Letsencrypt option for Debian package installations
New option koha-create --letsencrypt

- installs the letsencrypt package if needed
- creates <instance>
- generates letsencrypt certificates for <instance>
- sets up a https-only website for <instance>
- redirects http to https for <instance>

! you need to enable jessie backports to install letsencrypt: add
deb http://http.debian.net/debian jessie-backports main contrib non-free
to your /etc/apt/sources.list

! this patch uses the letsencrypt staging server
to create real certificates, apply thy "LE production server" patch

Test plan:
- build a debian package with patch applied
- use apache mod_ssl
  sudo a2enmod ssl
- make sure the machine is accessible on 80 (needed for letsencrypt) and 443 from the internet
- install koha with your new package
- Put your (existing) domain options in /etc/koha/koha-sites.conf
- use koha-create with the new options:
  sudo koha-create --create-db --letsencrypt <instance>
- if you do not have the letsencrypt package installed, you will be prompted to do that
  [
    if there is no package available, a symlink to the git checkout will work:

    on your test server, get letsencrypt via git
    git clone https://github.com/letsencrypt/letsencrypt

    create a symlink from /usr/bin/letsencrypt to letsencrypt-auto
    sudo ln -s /path/to/letsencrypt/letsencrypt-auto /usr/bin/letsencrypt
  ]

- wait until setup is finished, check that you got a working OPAC and staff client with certificates
- check that http redirects to https

Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>

Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
2016-04-29 13:04:31 +00:00
..
koha-create Bug 15303 Letsencrypt option for Debian package installations 2016-04-29 13:04:31 +00:00
koha-create-dirs
koha-disable
koha-dump Bug 14532: (followup) Use tar's --exclude for simplicity 2016-03-02 04:39:51 +00:00
koha-dump-defaults
koha-email-disable
koha-email-enable
koha-enable
koha-enable-sip
koha-foreach Bug 15303 Letsencrypt option for Debian package installations 2016-04-29 13:04:31 +00:00
koha-functions.sh Bug 15303 Letsencrypt option for Debian package installations 2016-04-29 13:04:31 +00:00
koha-indexer
koha-list Bug 15303 Letsencrypt option for Debian package installations 2016-04-29 13:04:31 +00:00
koha-mysql
koha-mysqlcheck
koha-passwd Bug 13143 - Detect if the password is in a pipe 2016-01-27 06:27:08 +00:00
koha-plack
koha-rebuild-zebra [SIGNED-OFF] Bug 15113: koha-rebuild-zebra should check USE_INDEXER_DAEMON and skip if enabled 2016-04-19 17:47:42 +00:00
koha-remove
koha-reset-passwd
koha-restart-zebra
koha-restore
koha-run-backups
koha-shell
koha-start-sip
koha-start-zebra Bug 15714: Remove zebra.log and add loglevels 2016-02-24 03:38:18 +00:00
koha-stop-sip
koha-stop-zebra Bug 15714: Remove zebra.log and add loglevels 2016-02-24 03:38:18 +00:00
koha-translate
koha-upgrade-schema
koha-upgrade-to-3.4