LetsEncrypt: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
No edit summary |
||
| Line 3: | Line 3: | ||
=== Install certbot === | === Install certbot === | ||
< | <syntaxhighlight lang=bash> | ||
$ sudo apt-get install certbot | $ sudo apt-get install certbot | ||
</ | </syntaxhighlight> | ||
=== Obtain / Renew certs === | === Obtain / Renew certs === | ||
Dry-run: | Dry-run: | ||
< | <syntaxhighlight lang=bash> | ||
$ sudo certbot renew --dry-run | $ sudo certbot renew --dry-run | ||
</ | </syntaxhighlight> | ||
Update: | Update: | ||
< | <syntaxhighlight lang=bash> | ||
$ sudo certbot renew | $ sudo certbot renew | ||
</ | </syntaxhighlight> | ||
Add to root's cron and check twice daily: | Add to root's cron and check twice daily: | ||
< | <syntaxhighlight lang=bash> | ||
0 3,15 * * * certbot renew --quiet | 0 3,15 * * * certbot renew --quiet | ||
</ | </syntaxhighlight> | ||
== Old method == | == Old method == | ||
< | <syntaxhighlight lang=bash> | ||
./letsencrypt-auto run --apache -d drew-bg.invadelabs.com | ./letsencrypt-auto run --apache -d drew-bg.invadelabs.com | ||
| Line 35: | Line 35: | ||
SSLCertificateKeyFile /etc/letsencrypt/live/drew-bg.invadelabs.com/privkey.pem | SSLCertificateKeyFile /etc/letsencrypt/live/drew-bg.invadelabs.com/privkey.pem | ||
Include /etc/letsencrypt/options-ssl-apache.conf | Include /etc/letsencrypt/options-ssl-apache.conf | ||
</ | </syntaxhighlight> | ||
Revision as of 00:59, 25 January 2018
certbot
Install certbot
$ sudo apt-get install certbot
Obtain / Renew certs
Dry-run:
$ sudo certbot renew --dry-run
Update:
$ sudo certbot renew
Add to root's cron and check twice daily:
0 3,15 * * * certbot renew --quiet
Old method
./letsencrypt-auto run --apache -d drew-bg.invadelabs.com
- Congratulations! Your certificate and chain have been saved at
/etc/letsencrypt/live/drew-bg.invadelabs.com/fullchain.pem. Your
cert will expire on 2016-07-09. To obtain a new version of the
certificate in the future, simply run Let's Encrypt again.
SSLCertificateFile /etc/letsencrypt/live/drew-bg.invadelabs.com/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/drew-bg.invadelabs.com/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf