Difference between revisions of "Install LetsEncrypt SSL certificate"

From dbawiki
Jump to: navigation, search
(Created page with "* Fedora 26 * Apache 2.4 <br /> Problem on Fedora 26 - python2-certbot-apache is broken so cannot be used but python3-certbot-apache works so install that.<br /> <br /> <pre>...")
 
(Method)
 
(2 intermediate revisions by the same user not shown)
Line 1: Line 1:
 +
* [https://www.tecmint.com/install-lets-encrypt-ssl-certificate-to-secure-apache-on-rhel-centos/ Installing lets-encrypt ssl on CentOS]
 +
* [https://certbot.eff.org/#fedora24-apache cerbot's page with manual installation help]
 +
===Configuration===
 
* Fedora 26
 
* Fedora 26
 
* Apache 2.4
 
* Apache 2.4
 +
===Method===
 +
Failed many times eventually to find it was python2-certbot-apache that didn't work!
 
<br />
 
<br />
Problem on Fedora 26 - python2-certbot-apache is broken so cannot be used but python3-certbot-apache works so install that.<br />
+
./letsencrypt-auto --apache -d stuartbarkley.com
 +
 
 +
Problem on Fedora 26... python2-certbot-apache is broken so cannot be used but python3-certbot-apache works so install that.<br />
 
<br />
 
<br />
 
<pre>
 
<pre>
certbot certonly --manual -d stuartbarkley.com
+
wget http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-10.noarch.rpm
 +
 
 +
rpm -ivh epel-release-7-10.noarch.rpm
 +
 
 +
cd /usr/local/letsencrypt
 +
 
 +
dnf install certbot-apache
 +
</pre>
 +
<pre>
 +
certbot certonly --manual --dry-run -d stuartbarkley.com
 
</pre>
 
</pre>
 
<pre>
 
<pre>
Line 12: Line 28:
  
 
<pre>
 
<pre>
[root@fedora letsencrypt]# certbot certonly --apache   -d stuartbarkley.com
+
[root@fedora letsencrypt]# certbot certonly --apache -d stuartbarkley.com
 
Saving debug log to /var/log/letsencrypt/letsencrypt.log
 
Saving debug log to /var/log/letsencrypt/letsencrypt.log
 
Obtaining a new certificate
 
Obtaining a new certificate

Latest revision as of 07:51, 24 October 2017

Configuration[edit]

  • Fedora 26
  • Apache 2.4

Method[edit]

Failed many times eventually to find it was python2-certbot-apache that didn't work!
./letsencrypt-auto --apache -d stuartbarkley.com

Problem on Fedora 26... python2-certbot-apache is broken so cannot be used but python3-certbot-apache works so install that.

wget http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-10.noarch.rpm

rpm -ivh epel-release-7-10.noarch.rpm

cd /usr/local/letsencrypt

dnf install certbot-apache
certbot certonly --manual  --dry-run -d stuartbarkley.com
certbot certonly --apache -d stuartbarkley.com
[root@fedora letsencrypt]# certbot certonly --apache -d stuartbarkley.com
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Obtaining a new certificate
Performing the following challenges:
tls-sni-01 challenge for stuartbarkley.com

We were unable to find a vhost with a ServerName or Address of stuartbarkley.com.
Which virtual host would you like to choose?
(note: conf files with multiple vhosts are not yet supported)
-------------------------------------------------------------------------------
1: ssl.conf                       |                       | HTTPS | Enabled
-------------------------------------------------------------------------------
Press 1 [enter] to confirm the selection (press 'c' to cancel): 

** Invalid input **
Press 1 [enter] to confirm the selection (press 'c' to cancel): 1
Waiting for verification...
Cleaning up challenges

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at
   /etc/letsencrypt/live/stuartbarkley.com/fullchain.pem. Your cert
   will expire on 2017-11-01. To obtain a new or tweaked version of
   this certificate in the future, simply run certbot again. To
   non-interactively renew *all* of your certificates, run "certbot
   renew"
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le