From 6b6133d6623b86c93b8e16323a6ca1c66d1d0a32 Mon Sep 17 00:00:00 2001 From: Bob Mottram Date: Sat, 16 Jun 2018 21:22:37 +0100 Subject: [PATCH] Since letsencrypt is now automatic this isn't needed anymore --- doc/EN/faq.org | 11 ------ website/EN/faq.html | 88 ++++++++++++++++----------------------------- 2 files changed, 31 insertions(+), 68 deletions(-) diff --git a/doc/EN/faq.org b/doc/EN/faq.org index 016d100c..43e16564 100644 --- a/doc/EN/faq.org +++ b/doc/EN/faq.org @@ -43,7 +43,6 @@ | [[Why isn't dynamic DNS working?]] | | [[How do I change my encryption settings?]] | | [[How do I get a domain name?]] | -| [[How do I get a "real" SSL/TLS/HTTPS certificate?]] | | [[How do I renew a Let's Encrypt certificate?]] | | [[I tried to renew a Let's Encrypt certificate and it failed. What should I do?]] | | [[Why not use the services of $company instead? They took the Seppuku pledge]] | @@ -306,16 +305,6 @@ service exim4 restart You should now be able to send an email from /postmaster@mynewdomainname/ and it should arrive in your inbox. -* How do I get a "real" SSL/TLS/HTTPS certificate? -If you did the full install or selected the social variant then the system will have tried to obtain a Let's Encrypt certificate automatically during the install process. If this failed for any reason, or if you have created a new site which you need a certificate for then do the following: - -#+begin_src bash -ssh username@mydomainname -p 2222 -#+end_src - -Select /Administrator controls/ then *Security settings* then *Create a new Let's Encrypt certificate*. - -One thing to be aware of is that Let's Encrypt doesn't support many dynamic DNS subdomains, such as those from freeDNS, so to run Hubzilla and GNU Social you will need to have your own official domains for those. There are many sites from which you can buy cheap domain names, and while this isn't ideal in terms of making you dependent upon another company it's the only option currently. * How do I renew a Let's Encrypt certificate? Normally certificates will be automatically renewed once per month, so you don't need to be concerned about it. If anything goes wrong with the automatic renewal then you should receive a warning email. diff --git a/website/EN/faq.html b/website/EN/faq.html index 9ba77a42..f572afea 100644 --- a/website/EN/faq.html +++ b/website/EN/faq.html @@ -4,7 +4,7 @@ - + @@ -275,39 +275,35 @@ for the JavaScript code in this tag. -How do I get a "real" SSL/TLS/HTTPS certificate? +How do I renew a Let's Encrypt certificate? -How do I renew a Let's Encrypt certificate? +I tried to renew a Let's Encrypt certificate and it failed. What should I do? -I tried to renew a Let's Encrypt certificate and it failed. What should I do? +Why not use the services of $company instead? They took the Seppuku pledge -Why not use the services of $company instead? They took the Seppuku pledge +Why does my email keep getting rejected as spam by Gmail/etc? -Why does my email keep getting rejected as spam by Gmail/etc? +Tor is censored/blocked in my area. What can I do? -Tor is censored/blocked in my area. What can I do? +I want to block a particular domain from getting its content into my social network sites -I want to block a particular domain from getting its content into my social network sites +The mesh system doesn't boot from USB drive -The mesh system doesn't boot from USB drive - - - -Mesh system doesn't connect to the network +Mesh system doesn't connect to the network @@ -952,31 +948,9 @@ You should now be able to send an email from postmaster@mynewdomainname a
-

How do I get a "real" SSL/TLS/HTTPS certificate?

+

How do I renew a Let's Encrypt certificate?

-If you did the full install or selected the social variant then the system will have tried to obtain a Let's Encrypt certificate automatically during the install process. If this failed for any reason, or if you have created a new site which you need a certificate for then do the following: -

- -
- -
ssh username@mydomainname -p 2222
-
-
- -

-Select Administrator controls then Security settings then Create a new Let's Encrypt certificate. -

- -

-One thing to be aware of is that Let's Encrypt doesn't support many dynamic DNS subdomains, such as those from freeDNS, so to run Hubzilla and GNU Social you will need to have your own official domains for those. There are many sites from which you can buy cheap domain names, and while this isn't ideal in terms of making you dependent upon another company it's the only option currently. -

-
-
-
-

How do I renew a Let's Encrypt certificate?

-
-

Normally certificates will be automatically renewed once per month, so you don't need to be concerned about it. If anything goes wrong with the automatic renewal then you should receive a warning email.

@@ -995,9 +969,9 @@ Select Administrator controls then Security settings then Renew

-
-

I tried to renew a Let's Encrypt certificate and it failed. What should I do?

-
+
+

I tried to renew a Let's Encrypt certificate and it failed. What should I do?

+

Most likely it's because Let's Encrypt doesn't support your particular domain or subdomain. Currently free subdomains tend not to work. You'll need to buy a domain name, link it to your dynamic DNS account and then do:

@@ -1013,17 +987,17 @@ Select Administrator controls then Security settings then Creat

-
-

Why not use the services of $company instead? They took the Seppuku pledge

-
+
+

Why not use the services of $company instead? They took the Seppuku pledge

+

That pledge is utterly worthless. Years ago people trusted Google in the same sort of way, because they promised not be be evil and because a lot of the engineers working for them seemed like honest types who were "on our side". Post-nymwars and post-PRISM we know exactly how much Google cared about the privacy and security of its users. But Google is only one particular example. In general don't trust pledges made by companies, even if the people running them seem really sincere.

-
-

Why does my email keep getting rejected as spam by Gmail/etc?

-
+
+

Why does my email keep getting rejected as spam by Gmail/etc?

+

Welcome to the world of email. Email is really the archetypal decentralized service, developed during the early days of the internet. In principle anyone can run an email server, and that's exactly what you're doing with Freedombone. Email is very useful, but it has a big problem, and that's that the protocols are totally insecure. That made it easy for spammers to do their thing, and in response highly elaborate spam filtering and blocking systems were developed. Chances are that your emails are being blocked in this way. Sometimes the blocking is so indisciminate that entire countries are excluded. What can you do about it? Unless you control the block list at the receiving end you may not be able to do much unless you can find an email proxy server which is trusted by the receiving server.

@@ -1055,9 +1029,9 @@ So the situation with email presently is pretty bad, and there's a clear selecti

-
-

Tor is censored/blocked in my area. What can I do?

-
+
+

Tor is censored/blocked in my area. What can I do?

+

If you can find some details for an obfs4 Tor bridge (its IP address, port number and key or nickname) then you can set up the system to use it to connect to the Tor network. Unlike relay nodes the IP addresses for bridges are not public information and so can't be easily known and added to block lists by authoritarian regimes or over-zealous ISPs.

@@ -1082,9 +1056,9 @@ You can also set your system to act as a Tor bridge, although this is not recomm
-
-

I want to block a particular domain from getting its content into my social network sites

-
+
+

I want to block a particular domain from getting its content into my social network sites

+

If you're being pestered by some domain which contains bad/illegal/harrassing content or irritating users you can block domains at the firewall level. Go to the administrator control panel and select domain blocking. You can then block, unblock and view the list of blocked domains.

@@ -1099,9 +1073,9 @@ Select Administrator controls then Domain blocking.
-
-

The mesh system doesn't boot from USB drive

-
+
+

The mesh system doesn't boot from USB drive

+

If the system doesn't boot and reports an error which includes /dev/mapper/loop0p1 then reboot with Ctrl-Alt-Del and when you see the grub menu press e and manually change /dev/mapper/loop0p1 to /dev/sdb1, then press Ctrl-x. If that doesn't work then reboot and try /dev/sdc1 instead.

@@ -1112,9 +1086,9 @@ After the system has booted successfully the problem should resolve itself on su
-
-

Mesh system doesn't connect to the network

-
+
+

Mesh system doesn't connect to the network

+

Sometimes after boot the mesh system won't connect to other peers on the network. If this happens select the network restart icon and enter the password, which by default is just "freedombone". Wait for a few minutes to see if it connects.