direct support for letsencrypt certificate rather than znc.pem #685

Closed
opened 2026-10-05 04:38:32 +02:00 by adam · 5 comments
Owner

Having to regenerate znc.pem (http://wiki.znc.in/Signed_SSL_certificate#LetsEncrypt) each time you renew a letsencrypt certificate rotates is annoying. It would be great if znc supported reading the letsencrypt certificate directly.

Having to regenerate znc.pem (http://wiki.znc.in/Signed_SSL_certificate#LetsEncrypt) each time you renew a letsencrypt certificate rotates is annoying. It would be great if znc supported reading the letsencrypt certificate directly. <!-- github-sync-id:137130881 -->
adam closed this issue 2026-10-05 04:38:32 +02:00
Author
Owner

i think ive seen people on the LetsEncrypt github talk about adding alternate output methods for things such as lighttpd,znc,etc. this might be more of a letsencrypt issue than a znc one.

maybe you need to utilise some of the scripts that are out there or write some bash to add generating the znc.pem to your certificate renewal process. and the znc.pem can be anywhere, SSLCertFile in znc.conf just needs to point to it

i think ive seen people on the LetsEncrypt github talk about adding alternate output methods for things such as lighttpd,znc,etc. this might be more of a letsencrypt issue than a znc one. maybe you need to utilise some of the scripts that are out there or write some bash to add generating the znc.pem to your certificate renewal process. and the znc.pem can be anywhere, `SSLCertFile` in znc.conf just needs to point to it <!-- github-comment-id:190020166 -->
Author
Owner

Even if LetsEncrypt supported ZNC directly, it would be useless because of #1215 and ZNC not supporting running as root or even dropping out of root.

Even if LetsEncrypt supported ZNC directly, it would be useless because of #1215 and ZNC not supporting running as root or even dropping out of root. <!-- github-comment-id:190055778 -->
Author
Owner

Sure, but these all sound like workarounds. It would be nice if znc could support them directly without needing scripts to create znc.pem.

Sure, but these all sound like workarounds. It would be nice if znc could support them directly without needing scripts to create znc.pem. <!-- github-comment-id:190056472 -->
Author
Owner

And I just remembered this is already done or is https://github.com/znc/znc/pull/1192 not what you are asking?

And I just remembered this is already done or is https://github.com/znc/znc/pull/1192 not what you are asking? <!-- github-comment-id:190057113 -->
Author
Owner

Ah, that does look like what I'm after, thanks!

Ah, that does look like what I'm after, thanks! <!-- github-comment-id:190059939 -->
Sign in to join this conversation.
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/znc#685