Certbot - Revision history

Kenneth: /* Usage */

2024-06-10T07:04:30Z

Usage

← Older revision		Revision as of 07:04, 10 June 2024
Line 40:		Line 40:

	-q, --quiet # Silence all output except errors. Useful for automation via cron. Implies --non-interactive. (default: False)		-q, --quiet # Silence all output except errors. Useful for automation via cron. Implies --non-interactive. (default: False)

			=== apache ===

			SSLCertificateFile /etc/ssl/DOMAIN/DOMAIN-fullchain.pem
			SSLCertificateKeyFile /etc/ssl/DOMAIN/DOMAIN-privatekey.key

	== Install ==		== Install ==

Kenneth: /* Renew */

2024-06-10T06:50:27Z

Renew

← Older revision		Revision as of 06:50, 10 June 2024
Line 21:		Line 21:
	Cert saved to:		Cert saved to:
	/etc/letsencrypt/live/[DOMAIN]/fullchain.pem		/etc/letsencrypt/live/[DOMAIN]/fullchain.pem

			key: /etc/letsencrypt/live/[DOMAIN]/privkey.pem
			cert: /etc/letsencrypt/live/[DOMAIN]/cert.pem
			fullchain: /etc/letsencrypt/live/[DOMAIN]/fullchain.pem
			chain: /etc/letsencrypt/live/[DOMAIN]/chain.pem

	Generated config saved to:		Generated config saved to:

Kenneth: /* Letsencrypt.org */

2024-06-10T06:48:16Z

Letsencrypt.org

← Older revision		Revision as of 06:48, 10 June 2024
Line 4:		Line 4:

	See [[Letsencrypt.org]]		See [[Letsencrypt.org]]

			== Usage ==

			=== List Certificates ===

			certbot certificates

			=== Renew ===

			certbot renew

			Quiet:
			certbot -q renew


			Cert saved to:
			/etc/letsencrypt/live/[DOMAIN]/fullchain.pem

			Generated config saved to:
			/etc/letsencrypt/renewal/[DOMAIN].conf

			Logs saved to:
			/var/log/letsencrypt/letsencrypt.log

			---

			/etc/cron.d/certbot

			0 /12 * * root test -x /usr/bin/certbot -a \! -d /run/systemd/system && perl -e 'sleep int(rand(43200))' && certbot -q renew

			-q, --quiet # Silence all output except errors. Useful for automation via cron. Implies --non-interactive. (default: False)

			== Install ==

	=== Ubuntu ===		=== Ubuntu ===

Kenneth: Created page with "== certbot == == Letsencrypt.org == See Letsencrypt.org === Ubuntu === Install: sudo apt-get update sudo apt-get install software-properties-common sudo add-apt-repository universe sudo add-apt-repository ppa:certbot/certbot sudo apt-get update sudo apt-get install certbot python-certbot-apache Auto install certificates: sudo certbot --apache Or just get a certificate: sudo certbot certonly --apache Test automatic renewal: sudo certbot renew --dry-ru..."

2024-06-10T06:38:49Z

Created page with "== certbot == == Letsencrypt.org == See Letsencrypt.org === Ubuntu === Install: sudo apt-get update sudo apt-get install software-properties-common sudo add-apt-repository universe sudo add-apt-repository ppa:certbot/certbot sudo apt-get update sudo apt-get install certbot python-certbot-apache Auto install certificates: sudo certbot --apache Or just get a certificate: sudo certbot certonly --apache Test automatic renewal: sudo certbot renew --dry-ru..."

New page

== certbot ==

== Letsencrypt.org ==

See [[Letsencrypt.org]]

=== Ubuntu ===

Install:
sudo apt-get update
sudo apt-get install software-properties-common
sudo add-apt-repository universe
sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update

sudo apt-get install certbot python-certbot-apache

Auto install certificates:
sudo certbot --apache

Or just get a certificate:
sudo certbot certonly --apache

Test automatic renewal:
sudo certbot renew --dry-run

ref: https://certbot.eff.org/lets-encrypt/ubuntubionic-apache

=== CentOS ===

Install:
wget https://dl.eff.org/certbot-auto
sudo mv certbot-auto /usr/local/bin/certbot-auto
sudo chown root /usr/local/bin/certbot-auto
sudo chmod 0755 /usr/local/bin/certbot-auto

Auto install certificates:
sudo /usr/local/bin/certbot-auto --apache

Or just get a certificate:
sudo /usr/local/bin/certbot-auto certonly --apache

Automatic renewal: (crontab)
echo "0 0,12 * * * root python -c 'import random; import time; time.sleep(random.random() * 3600)' && /usr/local/bin/certbot-auto renew" | sudo tee -a /etc/crontab > /dev/null

ref: https://certbot.eff.org/lets-encrypt/centos6-apache

== keywords ==