Update letsencrypt_renew_hook.sh to support Red Hat, Centos or its derivatives; as well as restarting mysql and/or mariadb as letsencrypt can be use to secure them as well.

Update installer_base.lib.php to attend to comment ispconfig/ispconfig3!911 (comment 69118). Not sure if this could fix the compatibality for php5.3 which is still supported by current version of ISPConfig but seems that solution is being used in interface/lib/classes/functions.inc.php. This suggestion solution for php5.3 is not tested.

Update installer_base.lib.php to add renew-hook for the purpose of automatically re-creating ispserver.pem and re-extending it to other services and re-loading or re-starting that other services. In certbot and acme.sh --renew-hook won't be run until renewal. This added code however is not fully tested yet.

Add new file to support the recreation of ispserver.pem after each and every successful ISPConfig Server LE SSL certs renewal for other related services and to reload or restart them thereafter.

Update letsencrypt_pre_hook.sh to check for OS and other firewall or use iptables. Not fully tested.

Update letsencrypt_post_hook.sh to check for OS and other firewall or use iptables. Not fully tested.

Update installer_base.lib.php to reorganize priority i.e. to attempt to use acme.sh first if it is available, only if it is not, then we attempt certbot, if the later then is available.

Add new file "letsencrypt_post_hook.sh" to support letsencrypt standalone during ISPConfig installation or update for non-webservers. Webservers shall always use webroot.

Add new file "letsencrypt_pre_hook.sh" to support letsencrypt standalone during ISPConfig installation or update for non-webservers. Webservers shall always use webroot.

Update installer_base.lib.php to remove ufw and add letsencrypt pre and post hook scripts. Before ISPConfig is installed, a temporary link will be created for the scripts. The link will be removed and updated during install.

Update installer_base.lib.php to add check to UFW and install it if it is not installed and post-hook will only be added if the default closed port 80 (http). Port 443 (https) is dropped as it is not required for standalone.

Update installer_base.lib.php to fix ufw enable not running awaiting confirmation 'y' with --force. Tested and working good.

Update installer_base.lib.php to add pre-hook and post-hook to standalone command in both certbot and acme.sh (pending further testing) as non-webserver normally closed their http and https port.

Update installer_base.lib.php to fix line 2156-2167 for checking cert file instead of key and pem files respectively.

Update installer_base.lib.php to fix le client and acme.sh reset and fix acme.sh certs name and path.

Update installer_base.lib.php restructuring the code to support Neilpang acme.sh and to only process either one of them (certbot or acme.sh) if it is available or executable. If none is available, default openssl self-signed method can still be used.

Update installer_base.lib.php to allow all three letsencrypt client i.e. letsencrypt certbot or certbot-auto to be used instead of just certbot.

Update installer_base.lib.php as /usr/local/ispconfig/interface/acme is not available on install, though might be available on update. To use /var/www/html as an alternative if /usr/local/ispconfig/interface/acme is not available as it is still preferred.

Update installer_base.lib.php to fix dhparam which is now suggested to use 2048 instead of 4096 since the later will take too long too finish.

Update installer_base.lib.php fixing certboot webroot command using --webroot-map as an alternative to version >=0.30. I would suggest @pixcept to add add support to acme.sh since he already did the acme.sh add up in https://git.ispconfig.org/ispconfig/ispconfig3/blob/master/server/lib/classes/letsencrypt.inc.php.

Master

See merge request ispconfig/ispconfig3!895

Change height select email domain in mail_user_mailbox_edit.htm

See merge request ispconfig/ispconfig3!899

Replace wp-auth.conf

See merge request ispconfig/ispconfig3!897

Update jail.local to include xmlrpc

See merge request ispconfig/ispconfig3!896

improve datalog-viewer

See merge request ispconfig/ispconfig3!894

Fixes #5290 - Allow Certbot http challenge on nginx behind basic auth

Closes #5290

See merge request ispconfig/ispconfig3!892