Letsencrpyt Ubuntu 16.04

Install

• sudo apt-get update
• sudo apt-get install software-properties-common
• sudo add-apt-repository ppa:certbot/certbot
• sudo apt-get update
• sudo apt-get install python-certbot-apache

Get the cert

• sudo certbot --apache certonly

Certs Directory

• tree /etc/letsencrypt/

/etc/letsencrypt/
├── accounts
│   └── acme-v01.api.letsencrypt.org
│       └── directory
│           └── 7dadf2df086c13b39ec5fd10d0ba33e2
│               ├── meta.json
│               ├── private_key.json
│               └── regr.json
├── archive
│   └── sun.xmn.de
│       ├── cert1.pem
│       ├── chain1.pem
│       ├── fullchain1.pem
│       └── privkey1.pem
├── csr
│   └── 0000_csr-certbot.pem
├── keys
│   └── 0000_key-certbot.pem
├── live
│   └── sun.xmn.de
│       ├── cert.pem -> ../../archive/sun.xmn.de/cert1.pem
│       ├── chain.pem -> ../../archive/sun.xmn.de/chain1.pem
│       ├── fullchain.pem -> ../../archive/sun.xmn.de/fullchain1.pem
│       ├── privkey.pem -> ../../archive/sun.xmn.de/privkey1.pem
│       └── README
├── options-ssl-apache.conf
├── renewal
│   └── sun.xmn.de.conf
└── renewal-hooks
    ├── deploy
    ├── post
    └── pre

Apache

To do

• cd /etc/apache2/mods-enabled
• ln -s ../mods-available/socache_* .
• ln -s ../mods-available/ssl* .
• mkdir -p /var/log/apache2/sun.xmn.de/
• chown www-data.www-data /var/log/apache2/sun.xmn.de/

Config

<IfModule mod_ssl.c>
        <VirtualHost _default_:443>
                ServerName sun.xmn.de
                ServerAdmin technik@xinux.de
                DocumentRoot /mnt/md0/media/sun.xmn.de
                ErrorLog ${APACHE_LOG_DIR}/sun.xmn.de/error.log
                CustomLog ${APACHE_LOG_DIR}/sun.xmn.de/access.log combined
                SSLCertificateFile /etc/letsencrypt/live/sun.xmn.de/fullchain.pem
                SSLCertificateKeyFile /etc/letsencrypt/live/sun.xmn.de/privkey.pem
                SSLCertificateChainFile /etc/letsencrypt/live/sun.xmn.de/chain.pem
                Include /etc/letsencrypt/options-ssl-apache.conf
                <FilesMatch "\.(cgi|shtml|phtml|php)$">
                                SSLOptions +StdEnvVars
                </FilesMatch>
                <Directory /usr/lib/cgi-bin>
                                SSLOptions +StdEnvVars
                </Directory>
                BrowserMatch "MSIE [2-6]" \
                                nokeepalive ssl-unclean-shutdown \
                                downgrade-1.0 force-response-1.0
                BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown

        </VirtualHost>
</IfModule>