Difference between revisions of "Https certbot"
From Anarchaserver
(Created page with "= Set up a https certificate = Following the advices from https://certbot.eff.org == Install certbot and the certificates == add jessie-backports to the sourcelist : sudo nan...") |
|||
| Line 8: | Line 8: | ||
save and : | save and : | ||
apt-get update | apt-get update | ||
now we can install the certificates using : | now we can install the certificates for the main domain and a subdomain using : | ||
certbot certonly --webroot -w /var/www/ | certbot certonly --webroot -w /var/www/ -d anarchaserver.org | ||
certbot certonly --webroot -w /var/www/zoiahorn/ -d zoiahorn.anarchaserver.org/ | |||
== Renew automatically == | |||
the command to renew all the certificates is : | |||
certbot renew | |||
this command can be added to crontab or run by systemd, the certificates are valid for 3 months so the check can be done once a week or once a day, see | |||
crontab | |||
for systemd integration, see https://forum.yunohost.org/t/how-to-install-let-s-encrypt-certificates/1075/83 | |||
* see https://certbot.eff.org/docs/using.html#renewing-certificates | |||
== Check the certificates == | |||
test on https://www.ssllabs.com/ssltest/ | |||
== references == | == references == | ||
* full documentation https://certbot.eff.org/docs/using.html | * full documentation https://certbot.eff.org/docs/using.html | ||
* https://letsencrypt.org/ | * https://letsencrypt.org/ | ||
Revision as of 13:21, 8 October 2016
Set up a https certificate
Following the advices from https://certbot.eff.org
Install certbot and the certificates
add jessie-backports to the sourcelist :
sudo nano /etc/apt/sources.list
add the line :
deb http://ftp.debian.org/debian jessie-backports main
save and :
apt-get update
now we can install the certificates for the main domain and a subdomain using :
certbot certonly --webroot -w /var/www/ -d anarchaserver.org certbot certonly --webroot -w /var/www/zoiahorn/ -d zoiahorn.anarchaserver.org/
Renew automatically
the command to renew all the certificates is :
certbot renew
this command can be added to crontab or run by systemd, the certificates are valid for 3 months so the check can be done once a week or once a day, see
crontab
for systemd integration, see https://forum.yunohost.org/t/how-to-install-let-s-encrypt-certificates/1075/83
Check the certificates
test on https://www.ssllabs.com/ssltest/
references
- full documentation https://certbot.eff.org/docs/using.html
- https://letsencrypt.org/
