novaflash wrote
Sorry, can't do that with Access Server. The Access Server doesn't have a webroot you can access, it's hardcoded.
In the future, we will build support for Let's Encrypt into the Access Server.
In the meantime, you can set up some HTTP server on another port, do the challenge/response there, and then use those certificates in the web-ssl folder of Access Server or load them into the configuration database, and reload the Access Server to let the certificates take effect. Or load them manually.
If i setup another server on another port, can i make this reachable from vpn.domain.com/.well-known/acme-challenge/ while still being able to access OpenVPN? Because it will be needed when renewed?