User Tools
letsencrypt
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
letsencrypt [2016/06/29 20:24] ian |
letsencrypt [2018/03/02 17:03] ian |
||
|---|---|---|---|
| Line 5: | Line 5: | ||
| Because the certificate is valid only for 90 days, it is important to use the scripted automation to authorize and renew the certificate. | Because the certificate is valid only for 90 days, it is important to use the scripted automation to authorize and renew the certificate. | ||
| - | 1. If the letsencrypt | + | 1. If the certbot |
| <note tip> | <note tip> | ||
| Line 15: | Line 15: | ||
| < | < | ||
| - | # cd / | + | # cd /usr/local/sbin |
| - | # git clone https://github.com/ | + | # wget https://dl.eff.org/certbot-auto |
| - | # cd letsencrypt | + | # chmod +x certbot-auto |
| - | # ./letsencrypt-auto --help | + | # ./certbot-auto --help |
| </ | </ | ||
| - | 2. Add a monthly | + | 2. Add a weekly |
| < | < | ||
| Line 30: | Line 30: | ||
| logger " | logger " | ||
| - | ' >> /etc/cron.monthly/99letsencrypt-renew | + | ' >> /etc/cron.weekly/letsencrypt-renew |
| - | # chmod u+x /etc/cron.monthly/99letsencrypt-renew | + | # chmod u+x /etc/cron.weekly/letsencrypt-renew |
| </ | </ | ||
| - | 3. Run a manual certificate authorization/ | + | 3. Run a manual certificate authorization/ |
| < | < | ||
| - | /usr/local/letsencrypt/letsencrypt-auto certonly | + | /usr/local/sbin/certbot-auto certonly --webroot --webroot-path /var/www -d braindump.ca -d www.braindump.ca -d braindump.mrzesty.net |
| </ | </ | ||
| Line 50: | Line 50: | ||
| </ | </ | ||
| - | 4. Add your last letsencrypt certonly command to the cron.monthly shell script | + | 4. < |
| - | + | echo '/ | |
| - | < | + | |
| - | echo "!?certonly?" >> /etc/cron.monthly/99letsencrypt-renew | + | |
| </ | </ | ||
| Line 71: | Line 69: | ||
| ServerAlias www.braindump.ca braindump.mrzesty.net | ServerAlias www.braindump.ca braindump.mrzesty.net | ||
| + | DocumentRoot /var/www/ | ||
| RewriteEngine On | RewriteEngine On | ||
| - | | + | |
| + | RewriteRule | ||
| </ | </ | ||
| Line 84: | Line 84: | ||
| </ | </ | ||
| - | 6. You can repeat steps 4-6 for any additional SSL certificates for other public sites on the server. | + | 6. You can repeat steps 5-6 for any additional SSL certificates for other public sites on the server. |
| - | **/ | + | **/ |
| < | < | ||
| #!/bin/bash | #!/bin/bash | ||
| Line 94: | Line 94: | ||
| logger " | logger " | ||
| - | /usr/local/letsencrypt/letsencrypt-auto certonly --renew-by-default | + | /usr/local/sbin/certbot-auto renew --deploy-hook " |
| - | / | + | |
| - | + | ||
| - | service | + | |
| logger "End: $0" | logger "End: $0" | ||
| </ | </ | ||
letsencrypt.txt · Last modified: 2020/02/13 22:55 (external edit)
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Noncommercial-Share Alike 4.0 International
