Letsencrypt: Unterschied zwischen den Versionen

Aus xinux.net
Zur Navigation springen Zur Suche springen
 
(15 dazwischenliegende Versionen von 2 Benutzern werden nicht angezeigt)
Zeile 1: Zeile 1:
=Install=
+
*[[Was ist Letsencrypt]]
*pip install --upgrade setuptools 
 
*cd /usr/local/sbin
 
*wget https://dl.eff.org/certbot-auto
 
*chmod a+x certbot-auto
 
*test -d /etc/apache2/ssl || mkdir /etc/apache2/ssl
 
*cd /etc/apache2/ssl
 
*wget https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem
 
  
=Real Install=
 
*certbot-auto certonly
 
  
=Dry Run=
+
=Prinzip=
*certbot-auto renew --dry-run
+
*https://letsencrypt.org/de/docs/challenge-types
 
+
=Visit=
 
+
*https://certbot.eff.org/
*/usr/local/sbin/certbot-auto renew  --no-self-upgrade --dry-run --force-renewal --pre-hook "systemctl stop apache2.service" --post-hook "systemctl start apache2.service
+
=Install=
 
+
*[[Certbot Service Update Script]]
=Apache2 Example=
+
*[[Letsencrpyt Manual Way]]
<pre>
+
*[[Letsencrpyt Ubuntu 16.04]]
<IfModule mod_ssl.c>
+
*[[Letsencrypt DNS Verification]]
<VirtualHost _default_:443>
+
=Prozess=
Servername www.example.com
+
*https://letsencrypt.org/de/how-it-works/
SSLCertificateFile /etc/letsencrypt/live/www.example.com/fullchain.pem
 
SSLCertificateKeyFile /etc/letsencrypt/live/www.example.com/privkey.pem
 
SSLCertificateChainFile /etc/apache2/ssl/lets-encrypt-x3-cross-signed.pem
 
Include /etc/letsencrypt/options-ssl-apache.conf
 
...
 
...
 
...
 
 
 
</VirtualHost>
 
</IfModule>
 
 
 
</pre>
 
 
 
=Cron Examples=
 
==restart service==
 
*/usr/local/sbin/certbot-auto renew --quiet --no-self-upgrade --post-hook "service apache2 restart" >> /var/log/letsencrypt.log 2>&1
 
==stop and start service==
 
*/usr/local/sbin/certbot-auto renew --quiet --no-self-upgrade  --pre-hook "service apache2 stop" --post-hook "service apache2 start" >> /var/log/letsencrypt.log 2>&1
 
==specified domain==
 
*/usr/local/sbin/certbot-auto certonly -n --apache -d www.xxxx-xx.de --post-hook  --post-hook "service apache2 start"
 
 
 
=systemctl=
 
*/usr/local/sbin/certbot-auto renew  --no-self-upgrade --pre-hook "systemctl stop apache2.service" --post-hook "systemctl start apache2.service
 
 
 
=Don't forget to Backup this Directory because there are you Accountdata=
 
*/etc/letsencrypt
 
 
 
=Links=
 
*https://certbot.eff.org/docs/using.html
 

Aktuelle Version vom 7. September 2022, 10:39 Uhr