* Wed Sep 10 2025 Jean-Philippe Pialasse <jpp@koozali.org> 11.0-10.sme

- fix unexpected behaviour when item set as disabled [SME: 13136]
  rewrite of 10Domains fragment

root/etc/e-smith/db/configuration/defaults/letsencrypt/algorithm

@@ -0,0 +1 @@
+rsa

root/etc/e-smith/templates/etc/dehydrated/config/45Algorithm

@@ -1,6 +1,6 @@
 # Which public key algorithm should be used? Supported: rsa, prime256v1 and secp384r1
 # KEY_ALGO=secp384r1 (default)
-#elliptic curve was not supported  (qpsmtpd and perl-IO-Socket-SSL < 1.95) 
+# elliptic curve was not supported  (qpsmtpd and perl-IO-Socket-SSL < 1.95)
 # SME 11 has perl-IO-Socket-SSL-2.066
-#KEY_ALGO=rsa
+KEY_ALGO="{$letsencrypt{algorithm}||rsa}"
 

root/etc/e-smith/templates/etc/dehydrated/domains.txt/10Domains

@@ -2,132 +2,91 @@
     use strict;
     use warnings;
     use esmith::ConfigDB;
+    
+    # $domain : current domain name
+    # $DomainName : primary domain name
+    # $domainname :  domain name related to current host
 
     my $configDB = esmith::ConfigDB->open_ro or die("can't open Config DB");
     my $domainsDB = esmith::ConfigDB->open_ro('domains')
         or die("can't connect to domains database");
     my $hostsDB = esmith::ConfigDB->open_ro('hosts')
         or die("can't connect to hosts database");
-
-    # my $dbKey     = 'domain';
-
-    #    my $systemMode = $configDB->get("SystemMode")->value;
-
-    #    if ( $systemMode ne 'servergateway' ) {
-    #        $OUT .= "# System not in Server Gateway mode\n";
-    #    }
-
+    
     my $letsencryptStatus = $configDB->get_prop( 'letsencrypt', 'status' )
         || 'disabled';
-
-    if ( $letsencryptStatus ne 'disabled' ) {
-
-        # This should get all the connections in an array
-
-        my @domains = $domainsDB->keys;
-        my @hosts   = $hostsDB->keys;
-
-        # print "@domains\n";
-
-        # Need to check here if we want ALL set
-        # all, domains, hosts, both, none
-        my $letsencryptConfig = $configDB->get_prop( 'letsencrypt', 'configure' ) || 'none';
-
-        # First get all the domains
-        # We could do this BUT only once as the array drops $vars
-
-        # my $dom = shift @domains;
-
-        # Patch from JPP
-        # Put Primary domain at top
-        my $DomainName = $configDB->get('DomainName')->value;
-        my $mainDomainStatus = $domainsDB->get_prop( "$DomainName", 'letsencryptSSLcert' )
-            || 'disabled';
-        $OUT .= "$DomainName " unless $mainDomainStatus eq 'disabled';
-
-        foreach my $domain (@domains) {
-
-            # If we are all or domains then lets do all regardless
-            if ( $letsencryptConfig eq 'all' || $letsencryptConfig eq 'domains' ) {
-
-                # Check for self
-                #my $domainStatus =
-                #  $domainsDB->get_prop( "Nameservers", 'HostType' ) || '';
-                #
-                #if ( $domainStatus eq 'Localhost' ) {
-                $OUT .= "$domain ";
-
-                #}
-            }
-
-            else {
-                my $domainEnabled = $domainsDB->get_prop( "$domain", 'letsencryptSSLcert' )
-                    || 'disabled';
-
-                if ( $domainEnabled eq 'enabled' ) {
-                    $OUT .= "$domain " unless $DomainName eq $domain;
-                }
-            }
-
-            # Now check for hosts
-
-            # Buggered if I remember why we check that
-            # the host has a domain name in domains !
-            # Must have been a reason
-
-            foreach my $fqdn (@hosts) {
-
-                # If we are set to all or hosts just do it
-                if ( $letsencryptConfig eq 'all' || $letsencryptConfig eq 'hosts' ) {
-                    $OUT .= "$fqdn " unless $DomainName eq $fqdn;
-                }
-
-                # Just do selected entries
-                else {
-                    # Lets get the hostname
-                    my $hostname = $fqdn;
-                    $hostname =~ s/\..*//;
-
-                    # print "$hostname\n";
-
-                    # Lets get the domain name
-                    my $domainname = $fqdn;
-                    $domainname =~ s/.*?\.//;
-
-                    # print "$domainname\n";
-
-                    # is the domain name from the hosts file
-                    # the same as that in the domains file ?
-                    my $hostEnabled = $hostsDB->get_prop( "$fqdn", 'letsencryptSSLcert' )
+    
+    return "# letsencrypt is disabled\n" if ( $letsencryptStatus eq 'disabled' ) ;
+   
+    # if disabled will only ask certs for host pointing to self. 
+    # if set otherwise, will try to get one even if host set as remote or local.
+    my $hostOverride = $configDB->get_prop( 'letsencrypt', 'hostOverride' )
                         || 'disabled';
-
-                    if ( $domainname eq $domain && $hostEnabled eq 'enabled' ) {
-
-                        # Are we self ?
-                        my $type = $hostsDB->get_prop( "$fqdn", 'HostType' );
-                        my $hostOverride = $configDB->get_prop( 'letsencrypt', 'hostOverride' )
-                            || 'disabled';
-
-                        # print "Override $hostOverride";
-
-                        if ( $hostOverride eq 'yes' ) {
-                            $OUT .= "$fqdn " unless $DomainName eq $fqdn;
-                        }
-
-                        elsif ( $type eq 'Self' ) {
-
-                            # print "Here: $fqdn  $type\n";
-                            $OUT .= "$fqdn " unless $DomainName eq $fqdn;
-                        }
-
-                    }
-                }
+ 
+    my @domains = $domainsDB->keys;
+    my @hosts   = $hostsDB->keys;
+    
+    # Need to check here if we want ALL set if not explicitly disabled
+    # all, domains, hosts, both, none
+    my $letsencryptConfig = $configDB->get_prop( 'letsencrypt', 'configure' ) || 'none';
+    
+    # Put Primary domain at top : needs to be the main cert domain.
+    my $DomainName = $configDB->get('DomainName')->value;
+    my $mainDomainStatus = $domainsDB->get_prop( "$DomainName", 'letsencryptSSLcert' )
+        || 'disabled';
+    $OUT = "$DomainName " unless $mainDomainStatus eq 'disabled';
+    
+    foreach my $domain (@domains) {
+        
+        # If default set to all or domains then do all except if explicitly disabled
+        if ( $letsencryptConfig eq 'all' || $letsencryptConfig eq 'domains' ) {
+            my $domainEnabled = $domainsDB->get_prop( "$domain", 'letsencryptSSLcert' )
+                || 'enabled';
+            $OUT .= "$domain " unless ( $domainEnabled eq 'disabled' || $DomainName eq $domain) ;
+        }
+        # otherwise only do if explicitly enabled
+        else {
+            my $domainEnabled = $domainsDB->get_prop( "$domain", 'letsencryptSSLcert' )
+                || 'disabled';
+            if ( $domainEnabled eq 'enabled' ) {
+                $OUT .= "$domain " unless $DomainName eq $domain;
             }
         }
+        
+        # Now check for this domain hosts
+        foreach my $fqdn (@hosts) {
+            
+            # exclude host identical to primary domain, already done
+            next if $DomainName eq $fqdn;
+            # exclude host identical to current domain, already done
+            next if $domain eq $fqdn;
 
-    }
+            # overide hostOverride : default disabled do not ask if host is not self
+            my $type = $hostsDB->get_prop( "$fqdn", 'HostType' ) || "Self";
+            next unless ( $type eq "Self" || $hostOverride eq "disabled");
 
-    else {
-        $OUT .= "# letsencrypt is disabled\n";
+            # check if host related to current domain
+            # Lets get the hostname
+            my $hostname = $fqdn;
+            $hostname =~ s/\..*//;
+            # Lets get the domain name
+            my $domainname = $fqdn;
+            $domainname =~ s/.*?\.//;
+            next unless ($domainname eq $domain);
+            
+            # If we are set to all or hosts just do it
+            if ( $letsencryptConfig eq 'all' || $letsencryptConfig eq 'hosts' ) {
+                my $hostEnabled = $hostsDB->get_prop( "$fqdn", 'letsencryptSSLcert' )
+                    || 'enabled';
+                $OUT .= "$fqdn " unless $hostEnabled eq 'disabled';
+            }
+            else {
+                # the same as that in the domains file ?
+                my $hostEnabled = $hostsDB->get_prop( "$fqdn", 'letsencryptSSLcert' )
+                    || 'disabled';
+                $OUT .= "$fqdn " unless $hostEnabled eq 'disabled';
+                    
+            }
+        }
     }
 }

root/usr/share/smanager/lib/SrvMngr/Controller/Letsencrypt-Custom.pm

@@ -7,20 +7,15 @@
 #
 use esmith::util;
 use esmith::util::network;
-use esmith::ConfigDB;
-use esmith::HostsDB;
-use esmith::AccountsDB;
-use esmith::NetworksDB;
-use esmith::DomainsDB;
+use esmith::ConfigDB::UTF8;
+use esmith::HostsDB::UTF8;
+use esmith::AccountsDB::UTF8;
+use esmith::NetworksDB::UTF8;
+use esmith::DomainsDB::UTF8;
 use constant FALSE => 0;
 use constant TRUE  => 1;
 
-#The most common ones
-#our $cdb = esmith::ConfigDB->open()   || die("Couldn't open config db");
-#our $adb = esmith::AccountsDB->open() || die("Couldn't open Accounts db");
-#our $ndb = esmith::NetworksDB->open() || die("Couldn't open Network db");
-#our $hdb = esmith::HostsDB->open()    || die("Couldn't open Hosts db");
-#our $ddb = esmith::DomainsDB->open()  || die("Couldn't open Domains db");
+our ($cdb,$adb,$ndb,$hdb,$ddb);
 
 # Validation routines - parameters for each panel
 sub validate_LIST {
@@ -161,7 +156,7 @@ sub validate_CHECKONEDOMAIN {
 # Get singleton data for each panel
 sub get_data_for_panel_LIST {
 
-	my $cdb = esmith::ConfigDB->open()   || die("Couldn't open config db");
+    $cdb = esmith::ConfigDB->open()   || die("Couldn't open config db");
     # Return a hash with the fields required which will be loaded into the shared data
     my $c = shift;
 
@@ -186,7 +181,7 @@ sub get_data_for_panel_PARAMS {
 
     # Return a hash with the fields required which will be loaded into the shared data
     my $c   = shift;
-   	my $cdb = esmith::ConfigDB->open()   || die("Couldn't open config db");
+    $cdb = esmith::ConfigDB->open()   || die("Couldn't open config db");
     my %ret = (
         'Data1'  => 'Data for PARAMS',                                  #Example
                                                                         # fields from Inputs in PARAMS $fields['PARAMS']
@@ -242,6 +237,7 @@ sub get_data_for_panel_CHECKONEDOMAIN {
 # Get control data for table(s)
 # Define a constant hash for field name mapping
 use constant DomainList_FIELD_MAPPING => (
+    'Table1-TYPE'                   => 'Type',
     'Table1-Domain name / HOSTNAME' => 'Domain',
     'Table1-Brief description'      => 'Description',
     'Table1-Content'                => 'Content',
@@ -251,6 +247,7 @@ use constant DomainList_FIELD_MAPPING => (
     'Table1-IS_IN_CERT'             => 'isincert',
     'Table1-CHECK'                  => 'Check'
 
+
         #'target_field2' => 'source_field2',
         # Add more mappings as needed
 );
@@ -274,8 +271,8 @@ sub actual_DomainList {
     #		 #print $element . "\n";
     #		 push @list, $element;
     #	}
-	my $ddb = esmith::DomainsDB->open()  || die("Couldn't open Domains db");
-	my $hdb = esmith::HostsDB->open()    || die("Couldn't open Hosts db");
+    $ddb = esmith::DomainsDB::UTF8->open()  || die("Couldn't open Domains db");
+    $hdb = esmith::HostsDB::UTF8->open()    || die("Couldn't open Hosts db");
     my @data  = ();
     my $check = $c->l('Check Domain');
 
@@ -285,14 +282,15 @@ sub actual_DomainList {
         my $dname     = $_->key;
         my $isincert  = "N";
         my $link      = $c->create_link("letsencryptd", "CHECKONEDOMAIN", "");
-        my $checklink = "<a href='" . $link . "&CHECKONEDOMAIN=" . $_->key . "'>" . $check . "</a>";
+        my $checklink = $link . "&CHECKONEDOMAIN=" . $_->key;
 
         #my $checklink = "<a href=''>check</a>";
-        $isincert = "Y" if ($dname ~~ @list);
+        $isincert = "Y" if (grep(/^$dname$/, @list));
 
         # domain
         push @data,
             {
+            Type => "Domain",
             Domain => $_->key,
             $_->props,
             letsencryptSSLcert => $le,
@@ -303,13 +301,15 @@ sub actual_DomainList {
 
         #and hosts
         for my $h ($hdb->get_hosts_by_domain($dname)) {
-            next if $ddb->get($h->key);
+	    my $hname = $h->key;
+            next if $ddb->get($hname);
             next unless ($h->prop('HostType') eq "Self" || $h->prop('HostType') eq "Local");
             $le       = $h->prop('letsencryptSSLcert') || 'disabled';    #letsencrypt configure all
             $isincert = "N";
-            $isincert = "Y" if ($h->key ~~ @list);
+            $isincert = "Y" if (grep(/^$hname$/, @list));
             push @data, {
-                Domain => "--> " . $h->key,
+                Type => "Host",
+                Domain => $hname,
                 $h->props,
                 Description => $h->prop('ExternalIP') || $h->prop('InternalIP') || "",
                 Content     => $h->prop('HostType'),
@@ -444,7 +444,7 @@ sub perform_PARAMS {
     my $c           = shift;
     my $prefix_data = shift;           #Data hash as parameter
     my $ret         = "";
-   	my $cdb = esmith::ConfigDB->open()   || die("Couldn't open config db");
+    $cdb            = esmith::ConfigDB::UTF8->open()   || die("Couldn't open config db");
     my $db          = $cdb;            #maybe one of the others
     my $dbkey       = 'letsencrypt';
 
@@ -485,7 +485,7 @@ sub perform_CHECKALLDOMAINS {
     my $c           = shift;
     my $prefix_data = shift;          #Data hash as parameter
     my $ret         = "";
-	my $cdb = esmith::ConfigDB->open()   || die("Couldn't open config db");
+    $cdb            = esmith::ConfigDB::UTF8->open()   || die("Couldn't open config db");
     my $db          = $cdb;           #maybe one of the others
     my $dbkey       = 'ChangeThis';
 
@@ -502,7 +502,7 @@ sub perform_CHECKALLENABLEDDOMAINS {
     my $c           = shift;
     my $prefix_data = shift;          #Data hash as parameter
     my $ret         = "";
-	my $cdb = esmith::ConfigDB->open()   || die("Couldn't open config db");
+    $cdb            = esmith::ConfigDB::UTF8->open()   || die("Couldn't open config db");
     my $db          = $cdb;           #maybe one of the others
     my $dbkey       = 'ChangeThis';
 
@@ -553,6 +553,7 @@ sub get_my_ip {
 
 sub update_one_domain {
     my ($self, $domain) = @_;
+    $ddb = esmith::DomainsDB::UTF8->open()  || die("Couldn't open Domains db");
     return "$domain not domain" unless ($ddb->get($domain) || $hdb->get($domain));
     ($domain) = ($domain =~ /([\w\p{L}.]+)/);
     my $output = `/etc/e-smith/events/actions/letsencrypt-setdomains " " $domain `;

root/usr/share/smanager/lib/SrvMngr/Controller/Letsencrypt.pm

@@ -30,11 +30,11 @@ use SrvMngr qw(theme_list init_session);
 use Data::Dumper;
 use esmith::util;
 use esmith::util::network;
-use esmith::ConfigDB;
-use esmith::AccountsDB;
-use esmith::NetworksDB;
-use esmith::HostsDB;
-use esmith::DomainsDB;
+use esmith::ConfigDB::UTF8;
+use esmith::AccountsDB::UTF8;
+use esmith::NetworksDB::UTF8;
+use esmith::HostsDB::UTF8;
+use esmith::DomainsDB::UTF8;
 require
     '/usr/share/smanager/lib/SrvMngr/Controller/Letsencrypt-Custom.pm';   #The code that is to be added by the developer
 
@@ -53,11 +53,11 @@ sub main {
     $c->app->log->info($c->log_req);
 
     #The most common ones
-    my $cdb = esmith::ConfigDB->open()   || die("Couldn't open config db");
-    my $adb = esmith::AccountsDB->open() || die("Couldn't open Accounts db");
-    my $ndb = esmith::NetworksDB->open() || die("Couldn't open Network db");
-    my $hdb = esmith::HostsDB->open()    || die("Couldn't open Hosts db");
-    my $ddb = esmith::DomainsDB->open()  || die("Couldn't open Domains db");
+    my $cdb = esmith::ConfigDB::UTF8->open()   || die("Couldn't open config db");
+    my $adb = esmith::AccountsDB::UTF8->open() || die("Couldn't open Accounts db");
+    my $ndb = esmith::NetworksDB::UTF8->open() || die("Couldn't open Network db");
+    my $hdb = esmith::HostsDB::UTF8->open()    || die("Couldn't open Hosts db");
+    my $ddb = esmith::DomainsDB::UTF8->open()  || die("Couldn't open Domains db");
     my %lets_data = ();
     my $title     = $c->l('lets_Letsencrypt_certificate');
     my $modul     = '';
@@ -98,11 +98,11 @@ sub do_update {
     my $modul = '';
 
     #The most common ones - you might want to comment out any not used.
-    my $cdb = esmith::ConfigDB->open()   || die("Couldn't open config db");
-    my $adb = esmith::AccountsDB->open() || die("Couldn't open Accounts db");
-    my $ndb = esmith::NetworksDB->open() || die("Couldn't open Network db");
-    my $hdb = esmith::HostsDB->open()    || die("Couldn't open Hosts db");
-    my $ddb = esmith::DomainsDB->open()  || die("Couldn't open Domains db");
+    my $cdb = esmith::ConfigDB::UTF8->open()   || die("Couldn't open config db");
+    my $adb = esmith::AccountsDB::UTF8->open() || die("Couldn't open Accounts db");
+    my $ndb = esmith::NetworksDB::UTF8->open() || die("Couldn't open Network db");
+    my $hdb = esmith::HostsDB::UTF8->open()    || die("Couldn't open Hosts db");
+    my $ddb = esmith::DomainsDB::UTF8->open()  || die("Couldn't open Domains db");
     my %lets_data = ();
     my $title     = $c->l('lets_Letsencrypt_certificate');
 
@@ -295,11 +295,11 @@ sub do_display {
     $c->app->log->info($c->log_req);
 
     #The most common ones - you might want to comment out any not used.
-    my $cdb = esmith::ConfigDB->open()   || die("Couldn't open config db");
-    my $adb = esmith::AccountsDB->open() || die("Couldn't open Accounts db");
-    my $ndb = esmith::NetworksDB->open() || die("Couldn't open Network db");
-    my $hdb = esmith::HostsDB->open()    || die("Couldn't open Hosts db");
-    my $ddb = esmith::DomainsDB->open()  || die("Couldn't open Domains db");
+    my $cdb = esmith::ConfigDB::UTF8->open()   || die("Couldn't open config db");
+    my $adb = esmith::AccountsDB::UTF8->open() || die("Couldn't open Accounts db");
+    my $ndb = esmith::NetworksDB::UTF8->open() || die("Couldn't open Network db");
+    my $hdb = esmith::HostsDB::UTF8->open()    || die("Couldn't open Hosts db");
+    my $ddb = esmith::DomainsDB::UTF8->open()  || die("Couldn't open Domains db");
     my %lets_data = ();
     my $title     = $c->l('lets_Letsencrypt_certificate');
     my $modul     = "";
@@ -445,4 +445,4 @@ sub do_display {
     );
     $c->render(template => "letsencrypt");
 } ## end sub do_display
-1;
+1;

root/usr/share/smanager/themes/default/templates/partials/_lets_LIST.html.ep

@@ -89,6 +89,8 @@
 		<br></span></p>
 	
 		<h2 class='subh4'><%=l('lets_List_of_Domains_and_Hosts')%></h2>
+		
+		% my $linkbtn = l 'lets_CHECK';
 	
 		<br /><table class="sme-border TableSort sme-table tabl1 ">
 			<thead class='tabl1'>
@@ -106,6 +108,7 @@
 			<tbody class='tabl1'>
 				% my $control_data = $c->stash('DomainList');
 				% foreach my $row (@$control_data) {
+				% my $link = $c->render_to_string(inline=>$row->{'Table1-CHECK'});
 				<tr class='table-row'>
 					<td class='sme-border table-col table-col-Table1-Domain name / HOSTNAME'><%=$c->render_to_string(inline=>$row->{'Table1-Domain name / HOSTNAME'})%></td>
 					<td class='sme-border table-col table-col-Table1-Brief description'><%=$c->render_to_string(inline=>$row->{'Table1-Brief description'})%></td>
@@ -114,7 +117,11 @@
 					<td class='sme-border table-col table-col-Table1-LABEL_POINT'><%=$c->render_to_string(inline=>$row->{'Table1-LABEL_POINT'})%></td>
 					<td class='sme-border table-col table-col-Table1-LABEL_LECERT'><%=$c->render_to_string(inline=>$row->{'Table1-LABEL_LECERT'})%></td>
 					<td class='sme-border table-col table-col-Table1-IS_IN_CERT'><%=$c->render_to_string(inline=>$row->{'Table1-IS_IN_CERT'})%></td>
-					<td class='sme-border table-col table-col-Table1-CHECK'><%=$c->render_to_string(inline=>$row->{'Table1-CHECK'})%></td>		
+					% if ($link ne "") {
+						<td><a href= "<%= $link %>" class="btn btn-outline-primary btn-sm" role="button" > <%= $linkbtn %></a></td>
+					% } else {
+						<td>&nbsp</td>
+					% }
 				</tr>
 				%}
 			</tbody>

smeserver-certificates.spec

@@ -1,6 +1,6 @@
 %define name smeserver-certificates
 %define version 11.0
-%define release 3
+%define release 10
 Summary: This is what smeserver-certificates does.
 Name: %{name}
 Version: %{version}
@@ -18,13 +18,35 @@ Requires: smeserver-release >= 11.0
 Requires: q
 Requires: jq
 Requires: dehydrated >= 0.6.5
-Requires: smeserver-manager >= 11.0.0-52
+Requires: smeserver-manager >= 11.0.0-110
 AutoReqProv: no
 
 %description
 
 
 %changelog
+* Wed Sep 10 2025 Jean-Philippe Pialasse <jpp@koozali.org> 11.0-10.sme
+- fix unexpected behaviour when item set as disabled [SME: 13136]
+  rewrite of 10Domains fragment
+
+* Mon Aug 25 2025 John Crisp <jcrisp@safeandsoundit.co.uk> 11.0-8.sme
+- Set KEY_ALGO default to rsa - thanks Knuddi [SME: 13109]
+- bump server-manager version
+
+* Fri Jun 27 2025 Brian Read <brianr@koozali.org> 11.0-7.sme
+- Bring default theme into line with changes made for AdminLTE theme [SME: 13049]
+
+* Tue Jun 17 2025 John Crisp <jcrisp@safeandsoundit.co.uk> 11.0-6.sme
+- Remove formatting from controller file [SME: 13045]
+- Add Domain/Host as Types for template checking [SME: 13045]
+
+* Wed Jun 11 2025 Jean-Philippe Pialasse <jpp@koozali.org> 11.0-5.sme
+- open esmith using UTF8 [SME: 13036]
+  rewrite smartmatches to grep
+
+* Thu Feb 20 2025 Brian Read <brianr@koozali.org> 11.0-4.sme
+- Add local open DB in check on domain sub [SME: 12932]
+
 * Mon Feb 17 2025 Brian Read <brianr@koozali.org> 11.0-3.sme
 - Change status in template to use helper script to pre-set dropdown value  [SME: 12923]
 - Update Custom routines to openb DB when required, not relying on global open [SME: 12695]