LetsEncrypt - Certificate & Private key pair

Hi all,

Please excuse my relative ignorance of all things ssl.

I have a single server UCS 4.4-4 with the LetsEncryt App installed from the UCS AppCenter. It works very well without any problem.

What I would like to do is take the certificate & private key pair provided by LetsEncrypt & use them on another application (Coturn in this case). Have looked for documentation that would answer my questions but not turned up anything definitive.

When I take a look into /etc/univention/letsencrypt/ I see:-

-rw-r-----+  1 root        root     3243 May 13  2018 account.key
-rw-r--r--   1 letsencrypt root     4147 Jun  1  2018 chained.pem
-rw-r--r--   1 letsencrypt root     1643 Jan 28 17:36 domain.csr
-rw-r-----+  1 root        root     3243 May 13  2018 domain.key
-rw-r--r--   1 letsencrypt root       33 Jan 28 17:36 domains
-rw-r--r--   1 letsencrypt root     1647 May 13  2018 intermediate.pem
drwxr-xr-x   2 root        root     4096 Jan 19  2019 post-refresh.d
drwxr-xr-x   2 root        root     4096 Jan 19  2019 setup.d
-rw-r--r--   1 letsencrypt www-data 3929 Feb  1 03:30 signed_chain.crt
-rw-r--r--   1 letsencrypt www-data 2500 Jun  1  2018 signed.crt

I’m assuming from the date stamp that the certificate is probably “signed_chain.crt” as it’s creation date matches the “valid from” date of the certificate shown via a web browser. More than happy to be corrected if that’s a false assumption.

What I’m even less sure of is the identity of corresponding private key file. I’m guessing probably “domain.key” ???

If anyone would be kind enough to educate me on this, or even suggest a better/easier way to achieve my aim I’d be very grateful.

Ok, as usual posted too soon & well before I had thought this thru fully :frowning:

Checking into the apache config in the UCR I find:-

apache2/ssl/certificate  =  /etc/univention/letsencrypt/signed_chain.crt

AND

apache2/ssl/key  =  /etc/univention/letsencrypt/domain.key

So points for correct assumptions but demerits for posting prior to engaging brain.

Mastodon