User Tools

Site Tools


letsencrypt

This is an old revision of the document!


Letsencrypt

Great thing happen securing internet servers, And it's Free.
But there is catch, You have to renew your certificated Often.
Since they provided tool to do so, i don't think there is problem at all.

First install command line API tool. letsencrypt source

There is many way you can get new certificate or renew certificate.
But i like following way, which can be scripted easily.

Get New Certificate
./letsencrypt-auto --email <email> --agree-tos certonly -d <fqdn> -c <Location_for_config>

It is good idea to create config file for each certificate because we can use it for renewal

sample_config
# Domain which you are trying to get certificate for;
domains = wiki.k2patel.in
 
# Define rsa keysize
rsa-key-size = 4096
 
# Define the api server
server = https://acme-v01.api.letsencrypt.org/directory
 
# email address for your certificate
email = k2patel@rediffmail.com
 
# we can disable the UI and turn on the text mode
text = True
 
# authenticate by placing file in webroot located under .well-known/acme-challenge/
authenticator = webroot
webroot-path = /var/www/letsencrypt/
letsencrypt.1461754165.txt.gz · Last modified: 2020/08/10 02:30 (external edit)