GO HERE SSL for Incredible PBX at CrownCloud

[ericboss]

I'm running Incredible PBX 2022 on Rocky Linux hosted by CrownCloud. First of all, thank you for making that happen @wardmundy. I'm happy not to have to deal with local server issues anymore.

My issue is with SSL/HTTPS access. When generating a Let's Encrypt key in the GUI under Certificate Management I get a timeout error, likely due to a firewall issue. Any ideas here?

lechecker: Pest_Curl_Exec – Operation timed out after 30001 milliseconds with 0 bytes received
The LetsEncrypt servers only send challenge queries to port 80. Certificate requests will fail if public access via port 80 is not available.

 

[ostridge]

I'm running Incredible PBX 2022 on Rocky Linux hosted by CrownCloud. First of all, thank you for making that happen @wardmundy. I'm happy not to have to deal with local server issues anymore.

My issue is with SSL/HTTPS access. When generating a Let's Encrypt key in the GUI under Certificate Management I get a timeout error, likely due to a firewall issue. Any ideas here?

lechecker: Pest_Curl_Exec – Operation timed out after 30001 milliseconds with 0 bytes received
The LetsEncrypt servers only send challenge queries to port 80. Certificate requests will fail if public access via port 80 is not available.

I do not have a server running incrediblePBX-Rocky

Have a look at ward's post for setting up Virtual Hosts see
Access your webserver by FQDN
This provides a secure way to access your server mainly by your VPN, and also providing security for bad actors who don't know your FQDN.
For setting up openvpn refer to the openvpn articles listed at the bottom of the wiki page at -
the IncrediblePBX Tiki Wiki /Latest-Issues-of-Interest

See Ward's post where he explains why SSL access is undesirable / not necessary

There is however a project of @jerrm - jerrm/fpbx-lewatch which provides a method for running letsencrypt - certbot, that you are asking but further to Wards statement that would be a bit off piste and unsupported here - so by all means try that but I believe you would be going it alone. That said you may try my post about loading lewatch.sh into incrediblepbx (YMMV) if that helps.