|
@@ -3,7 +3,7 @@
|
3
|
3
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
|
4
|
4
|
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
|
5
|
5
|
<head>
|
6
|
|
-<!-- 2015-12-18 Fri 22:25 -->
|
|
6
|
+<!-- 2015-12-19 Sat 22:29 -->
|
7
|
7
|
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
|
8
|
8
|
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
9
|
9
|
<title></title>
|
|
@@ -544,21 +544,10 @@ When the install is complete you will see a lot of warnings but just ignore thos
|
544
|
544
|
<h2 id="orgheadline6">Social Network</h2>
|
545
|
545
|
<div class="outline-text-2" id="text-orgheadline6">
|
546
|
546
|
</div><div id="outline-container-orgheadline14" class="outline-3">
|
547
|
|
-<h3 id="orgheadline14">Certificates</h3>
|
|
547
|
+<h3 id="orgheadline14">Domains</h3>
|
548
|
548
|
<div class="outline-text-3" id="text-orgheadline14">
|
549
|
549
|
<p>
|
550
|
|
-You will need to have a non self-signed SSL certificate in order to use Hubzilla. Put the public certificate in <b>/etc/ssl/certs/yourhubzilladomainname.crt</b> and the private certificate in <b>/etc/ssl/private/yourhubzilladomainname.key</b>. If there is an intermediate certificate needed (such as with StartSSL) then this will need to be concatenated onto the end of the crt file, like this:
|
551
|
|
-</p>
|
552
|
|
-
|
553
|
|
-<div class="org-src-container">
|
554
|
|
-
|
555
|
|
-<pre class="src src-bash">cat /etc/ssl/certs/yourhubzilladomainname.crt /etc/ssl/chains/startssl-sub.class1.server.ca.pem >
|
556
|
|
- /etc/ssl/certs/yourhubzilladomainname.bundle.crt
|
557
|
|
-</pre>
|
558
|
|
-</div>
|
559
|
|
-
|
560
|
|
-<p>
|
561
|
|
-Then change ssl_certificate to <b>/etc/ssl/certs/yourhubzilladomainname.bundle.crt</b> within <b>/etc/nginx/sites-available/yourhubzilladomainname</b>
|
|
550
|
+Both Hubzilla and GNU Social try to obtain certificates automatically at the time of installation via Let's Encrypt. This will likely mean that in order for this to work you'll need to have obtained at least one "official" domain via a domain selling service, since Let's Encrypt mostly doesn't seem to work with free subdomains from sites such as freeDNS.
|
562
|
551
|
</p>
|
563
|
552
|
</div>
|
564
|
553
|
</div>
|