LetsEncrypt: Difference between revisions

From DrewWiki
Jump to navigation Jump to search
No edit summary
No edit summary
Line 4: Line 4:
=== Install certbot ===
=== Install certbot ===
<pre>
<pre>
$ sudo apt-get install python-certbot-apache -t jessie-backports
$ sudo apt-get install certbot
</pre>
</pre>



Revision as of 23:14, 3 January 2018

certbot

Install certbot

$ sudo apt-get install certbot

Obtain / Renew certs

Dry-run:

$ sudo certbot renew --dry-run

Update:

$ sudo certbot renew

Add to root's cron and check twice daily:

0 3,15 * * * certbot renew --quiet 

Old method

./letsencrypt-auto run --apache -d drew-bg.invadelabs.com

 - Congratulations! Your certificate and chain have been saved at
   /etc/letsencrypt/live/drew-bg.invadelabs.com/fullchain.pem. Your
   cert will expire on 2016-07-09. To obtain a new version of the
   certificate in the future, simply run Let's Encrypt again.

SSLCertificateFile /etc/letsencrypt/live/drew-bg.invadelabs.com/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/drew-bg.invadelabs.com/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf