Subj : Re: fTelnet
To   : tassiebob
From : maskreet
Date : Thu Oct 17 2024 02:57 pm

On 17 Oct 2024, tassiebob said the following...
 
 ta> Hi All,
 ta> 
 ta> I've been trying to get fTelnet working in a fully self-hosted
 ta> arrangement. I'm coming unstuck trying to work out how to configure the
 ta> WSS certificate for the proxy.
 ta> 
 ta> The server is using LetsEncrypt certificates and I'm hoping to use that
 ta> same certificate for the fTelnetProxy application, but thus far I've
 ta> been unable to come up with a working configuration.  It looks like
 ta> .net/mono needs a PFX format certificate, which I can generate, but it
 ta> does't work when I do.  I either get "--Error loading cert file", or it
 ta> throws an error in SSL.AuthenticateAsServer.
 ta> 
 ta> The proxy application definitely has permission to read the required
 ta> files.  I've tested my client config against a public proxy and it works
 ta> fine, so I'm 99% sure the problem is with my own proxy config.  The
 ta> client host can reach the proxy on the WSS port (confirmed with telnet).
 ta> 
 ta> Has anyone else out there made this work, using a LetsEncrypt
 ta> certificate (or a conversion from an LE certificate), on Linux?  Ubuntu
 ta> 22.04.5 LTS if it matters.

Yep. This is the command I use in a bash script to get Websockify and Let's
Encrypt working:

https://pastebin.com/7e2A3EDL

It's not the most secure way to do it, since it echoes the system password, but I'm literally the only person with access to that part of the server, so I don't usually care. Whatever works.  =)

--- Mystic BBS v1.12 A49 2024/05/12 (Linux/64)
 * Origin: throwbackbbs.com -\- meriden, ct -\- (21:1/114)

.