DehydratedISPConfig

Provides Let's Encrypt certificates to ISPConfig hosted sites, including master/slave SHOULD NO LONGER BE NEEDED NOW ISPConfig PROVIDES NATIVE SUPPORT IN VERSION > 3.1

Requirements:

1. dehydrated: git clone https://github.com/paralinguist/DehydratedISPConfig
2. oursql: pip install oursql
3. tld: pip install tld

config

Create a file called config in the dehydrated directory with the following contents:
IMPORTANT Make sure you set the email correctly.

####WARNING#####
#If you change between authorities (eg, testing to live) you MUST delete
#private_key.pem in your BASEDIR
CA="https://acme-v01.api.letsencrypt.org/directory"
#CA="https://acme-staging.api.letsencrypt.org/directory"
BASEDIR="/etc/ssl/private"
WELLKNOWN="/var/le-ispconfig/"
# E-mail to use during the registration (default: <unset>)
CONTACT_EMAIL="you@example.com"

Create the wellknown:

mkdir /var/le-ispconfig

Apache Config

Create dehydrated_isp.conf in the apache conf folders (usually /etc/apache2/conf-available/):

Alias "/.well-known/acme-challenge/" /var/le-ispconfig/  
<Directory /var/le-ispconfig>  
  Require all granted  
</Directory>  

<IfModule mod_headers.c>  
  <LocationMatch "/.well-known/acme-challenge/*">  
    Header set Content-Type "text/plain"  
  </LocationMatch>  
</IfModule>

Enable the config:
a2enconf dehydrated_isp
Restart Apache:
service apache2 restart