certbot

Install

   1 wget https://dl.eff.org/certbot-auto
   2 sudo mv certbot-auto /usr/local/bin/certbot-auto
   3 sudo chown root /usr/local/bin/certbot-auto
   4 sudo chmod 0755 /usr/local/bin/certbot-auto
   5 certbot-auto

Get cert to domain www.example.org (nginx)

/usr/local/bin/certbot-auto certonly --webroot
#Please enter in your domain name(s) (comma and/or space separated)  (Enter 'c'to cancel): www.example.org
# - Congratulations! Your certificate and chain have been saved at:
#   /etc/letsencrypt/live/www.example.org/fullchain.pem
#   Your key file has been saved at:
#   /etc/letsencrypt/live/www.example.org/privkey.pem
cd /etc/letsencrypt/live/www.example.org/
cat cert.pem  > www_ca_bundle.crt
echo "" >> www_ca_bundle.crt 
cat  chain.pem >> www_ca_bundle.crt
cp privkey.pem /etc/ssl/private/www_private.key 
cp www_ca_bundle.crt /etc/ssl/certs/www_ca_bundle.crt
nano /etc/nginx/sites-enabled/www.example.org
# ssl_certificate /etc/ssl/certs/www_ca_bundle.crt;
# ssl_certificate_key /etc/ssl/private/www_private.key;
# change paths ...
service nginx restart

certbot (last edited 2020-06-11 17:42:10 by localhost)