LetsEncrypt - Revision history

Drew at 00:46, 28 February 2018

2018-02-28T00:46:42Z

← Older revision		Revision as of 18:46, 27 February 2018
Line 12:		Line 12:
	Manually run due to existing configuration already redirecting port http -> https. Will require a small of downtime `systemctl stop apache2`.		Manually run due to existing configuration already redirecting port http -> https. Will require a small of downtime `systemctl stop apache2`.
	<syntaxhighlight lang=bash>		<syntaxhighlight lang=bash>
	certbot certonly --manual --cert-name invadelabs.com -d invadelabs.com -d drew.invadelabs.com -m drew@invadelabs.com --agree-tos		certbot certonly --manual \
			--cert-name invadelabs.com \
			-d invadelabs.com \
			-d www.invadelabs.com \
			-d drew.invadelabs.com \
			-d wiki.invadelabs.com \
			-d blog.invadelabs.com \
			-m drew@invadelabs.com \
			--agree-tos
	</syntaxhighlight>		</syntaxhighlight>

Drew: update email address

2018-02-26T19:23:45Z

update email address

← Older revision		Revision as of 13:23, 26 February 2018
Line 12:		Line 12:
	Manually run due to existing configuration already redirecting port http -> https. Will require a small of downtime `systemctl stop apache2`.		Manually run due to existing configuration already redirecting port http -> https. Will require a small of downtime `systemctl stop apache2`.
	<syntaxhighlight lang=bash>		<syntaxhighlight lang=bash>
	certbot certonly --manual --cert-name invadelabs.com -d invadelabs.com -d drew.invadelabs.com -m ~~drewderivative~~@~~gmail~~.com --agree-tos		certbot certonly --manual --cert-name invadelabs.com -d invadelabs.com -d drew.invadelabs.com -m drew@invadelabs.com --agree-tos
	</syntaxhighlight>		</syntaxhighlight>

Drew at 10:35, 18 February 2018

2018-02-18T10:35:20Z

← Older revision		Revision as of 04:35, 18 February 2018
Line 1:		Line 1:
			Instructions for Debian 9
	== certbot ==		== certbot ==
	* https://certbot.eff.org/#~~debianjessie~~-apache		* https://certbot.eff.org/#debiantesting-apache
			* https://certbot.eff.org/docs/using.html

	=== Install certbot ===		=== Install certbot ===
	<syntaxhighlight lang=bash>		<syntaxhighlight lang=bash>
	$ sudo apt-get install certbot		sudo apt-get install python-certbot-apache certbot
	</syntaxhighlight>		</syntaxhighlight>

	=== Obtain / ~~Renew~~ certs ===		=== Obtain SNI Cert ===
			Manually run due to existing configuration already redirecting port http -> https. Will require a small of downtime `systemctl stop apache2`.
			<syntaxhighlight lang=bash>
			certbot certonly --manual --cert-name invadelabs.com -d invadelabs.com -d drew.invadelabs.com -m drewderivative@gmail.com --agree-tos
			</syntaxhighlight>

			=== Check newly Issue Cert ===
			<syntaxhighlight lang=bash>
			root@invadelabs:~# certbot certificates
			Saving debug log to /var/log/letsencrypt/letsencrypt.log

			-------------------------------------------------------------------------------
			Found the following certs:
			Certificate Name: invadelabs.com
			Domains: invadelabs.com drew.invadelabs.com
			Expiry Date: 2018-05-19 08:58:27+00:00 (VALID: 89 days)
			Certificate Path: /etc/letsencrypt/live/invadelabs.com/fullchain.pem
			Private Key Path: /etc/letsencrypt/live/invadelabs.com/privkey.pem
			-------------------------------------------------------------------------------
			</syntaxhighlight>

			=== Test Renewal ===
	Dry-run:		Dry-run:
	<syntaxhighlight lang=bash>		<syntaxhighlight lang=bash>
Line 13:		Line 36:
	</syntaxhighlight>		</syntaxhighlight>

	~~Update:~~		=== Renew Cert Manually ===
			Will need to manually reload apache.
	<syntaxhighlight lang=bash>		<syntaxhighlight lang=bash>
	$ sudo certbot renew		$ sudo certbot renew
	</syntaxhighlight>		</syntaxhighlight>

			=== Aapache Auto Renew On Cron ===
	Add to root's cron and check twice daily:		Add to root's cron and check twice daily:
	<syntaxhighlight lang=bash>		<syntaxhighlight lang=bash>
	0 3,15 * * * certbot renew --quiet		0 3,15 * * * certbot renew --apache --quiet
			</syntaxhighlight>

			=== Expand Additional Domains SNI Cert ===
			<syntaxhighlight lang=bash>
			certbot --expand -d invadelabs.com -d drew.invadelabs.com -d new.invadelabs.com
	</syntaxhighlight>		</syntaxhighlight>

Line 32:		Line 62:
	certificate in the future, simply run Let's Encrypt again.		certificate in the future, simply run Let's Encrypt again.

	SSLCertificateFile /etc/letsencrypt/live/~~drew-bg.~~invadelabs.com/fullchain.pem		SSLCertificateFile /etc/letsencrypt/live/invadelabs.com/fullchain.pem
	SSLCertificateKeyFile /etc/letsencrypt/live/~~drew-bg.~~invadelabs.com/privkey.pem		SSLCertificateKeyFile /etc/letsencrypt/live/invadelabs.com/privkey.pem
	Include /etc/letsencrypt/options-ssl-apache.conf		Include /etc/letsencrypt/options-ssl-apache.conf
	</syntaxhighlight>		</syntaxhighlight>

Drew at 07:59, 25 January 2018

2018-01-25T07:59:51Z

← Older revision		Revision as of 01:59, 25 January 2018
Line 3:		Line 3:

	=== Install certbot ===		=== Install certbot ===
	<~~pre~~>		<syntaxhighlight lang=bash>
	$ sudo apt-get install certbot		$ sudo apt-get install certbot
	</~~pre~~>		</syntaxhighlight>

	=== Obtain / Renew certs ===		=== Obtain / Renew certs ===
	Dry-run:		Dry-run:
	<~~pre~~>		<syntaxhighlight lang=bash>
	$ sudo certbot renew --dry-run		$ sudo certbot renew --dry-run
	</~~pre~~>		</syntaxhighlight>

	Update:		Update:
	<~~pre~~>		<syntaxhighlight lang=bash>
	$ sudo certbot renew		$ sudo certbot renew
	</~~pre~~>		</syntaxhighlight>

	Add to root's cron and check twice daily:		Add to root's cron and check twice daily:
	<~~pre~~>		<syntaxhighlight lang=bash>
	0 3,15 * * * certbot renew --quiet		0 3,15 * * * certbot renew --quiet
	</~~pre~~>		</syntaxhighlight>

	== Old method ==		== Old method ==
	<~~pre~~>		<syntaxhighlight lang=bash>
	./letsencrypt-auto run --apache -d drew-bg.invadelabs.com		./letsencrypt-auto run --apache -d drew-bg.invadelabs.com

Line 35:		Line 35:
	SSLCertificateKeyFile /etc/letsencrypt/live/drew-bg.invadelabs.com/privkey.pem		SSLCertificateKeyFile /etc/letsencrypt/live/drew-bg.invadelabs.com/privkey.pem
	Include /etc/letsencrypt/options-ssl-apache.conf		Include /etc/letsencrypt/options-ssl-apache.conf
	</~~pre~~>		</syntaxhighlight>

Drew at 06:14, 4 January 2018

2018-01-04T06:14:43Z

← Older revision		Revision as of 00:14, 4 January 2018
Line 4:		Line 4:
	=== Install certbot ===		=== Install certbot ===
	<pre>		<pre>
	$ sudo apt-get install ~~python-~~certbot~~-apache -t jessie-backports~~		$ sudo apt-get install certbot
	</pre>		</pre>

Drew at 06:51, 17 December 2017

2017-12-17T06:51:57Z

@@ Line 1: / Line 1: @@
 == certbot ==
 * https://certbot.eff.org/#debianjessie-apache
 === Install certbot ===
@@ Line 30: / Line 23: @@
 </pre>
-== Old method < 2016-06 ==
+== Old method ==
 <pre>
 ./letsencrypt-auto run --apache -d drew-bg.invadelabs.com

Drew at 03:37, 17 July 2016

2016-07-17T03:37:10Z

← Older revision		Revision as of 21:37, 16 July 2016
Line 15:		Line 15:

	=== Obtain / Renew certs ===		=== Obtain / Renew certs ===
			Dry-run:
	<pre>		<pre>
	$ sudo certbot renew --dry-run		$ sudo certbot renew --dry-run
	</pre>		</pre>

			Update:
			<pre>
			$ sudo certbot renew
			</pre>

			Add to root's cron and check twice daily:
			<pre>
			0 3,15 * * * certbot renew --quiet
			</pre>

	== Old method < 2016-06 ==		== Old method < 2016-06 ==

Drew at 03:33, 17 July 2016

2016-07-17T03:33:01Z

@@ Line 1: / Line 1: @@
 == certbot ==
 * https://certbot.eff.org/#debianjessie-apache
 $ echo "deb http://ftp.debian.org/debian jessie-backports main" >> /etc/apt/sources.list
 == Old method < 2016-06 ==

Drew at 02:56, 17 July 2016

2016-07-17T02:56:48Z

← Older revision		Revision as of 20:56, 16 July 2016
Line 1:		Line 1:
			== certbot ==
			* https://certbot.eff.org/#debianjessie-apache
			$ echo "deb http://ftp.debian.org/debian jessie-backports main" >> /etc/apt/sources.list

			== Old method < 2016-06 ==
	https://letsencrypt.org/howitworks/		https://letsencrypt.org/howitworks/
	<pre>		<pre>

Drew at 02:26, 11 April 2016

2016-04-11T02:26:09Z

@@ Line 14: / Line 14: @@
     Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
     Donating to EFF:                    https://eff.org/donate-le
 </pre>