Code Snippet

Just another Code Snippet site

Let’s Encrypt – Install & renew standalone certificate

Install Git

apt-get update
apt-get install git

Checkout Let’sEncrypt

git clone https://github.com/letsencrypt/letsencrypt /opt/letsencrypt 

Generate

./letsencrypt-auto certonly --standalone --email myemail@gmail.com -d mydomain.com -d sub.mydomain.com

Renew

apache2ctl stop
./letsencrypt-auto certonly --standalone --renew-by-default -d mydomain.com -d sub.mydomain.com
apache2ctl start

In Apache config :

SSLCertificateFile /etc/letsencrypt/live/mydomain.com/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/mydomain.com/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/mydomain.com/chain.pem

In Nginx config (use full chain certificate) :

ssl_certificate           /etc/letsencrypt/live/mydomain.com/fullchain.pem;
ssl_certificate_key       /etc/letsencrypt/live/mydomain.com/privkey.pem;

,


Leave a Reply

Your email address will not be published. Required fields are marked *