|
|
| (16 dazwischenliegende Versionen von 2 Benutzern werden nicht angezeigt) |
| Zeile 1: |
Zeile 1: |
| =Install=
| | *[[Was ist Letsencrypt]] |
| *pip install --upgrade setuptools | |
| *cd /usr/local/sbin
| |
| *wget https://dl.eff.org/certbot-auto
| |
| *chmod a+x certbot-auto
| |
| *test -d /etc/apache2/ssl || mkdir /etc/apache2/ssl
| |
| *cd /etc/apache2/ssl
| |
| *wget https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem
| |
|
| |
|
| =Real Install=
| |
| *certbot-auto certonly
| |
|
| |
|
| =Dry Run= | | =Prinzip= |
| *certbot-auto renew --dry-run | | *https://letsencrypt.org/de/docs/challenge-types |
| | | =Visit= |
| | | *https://certbot.eff.org/ |
| */usr/local/sbin/certbot-auto renew --no-self-upgrade --dry-run --force-renewal --pre-hook "systemctl stop apache2.service" --post-hook "systemctl start apache2.service
| | =Install= |
| | | *[[Certbot Service Update Script]] |
| =Apache2 Example=
| | *[[Letsencrpyt Manual Way]] |
| <pre>
| | *[[Letsencrpyt Ubuntu 16.04]] |
| <IfModule mod_ssl.c>
| | *[[Letsencrypt DNS Verification]] |
| <VirtualHost _default_:443>
| | *[[Letsencrypt DNS Verification RFC2136]] |
| Servername www.example.com
| | *[[Let's Encrypt mit Cloudflare DNS-Challenge]] |
| SSLCertificateFile /etc/letsencrypt/live/www.example.com/fullchain.pem
| |
| SSLCertificateKeyFile /etc/letsencrypt/live/www.example.com/privkey.pem
| |
| SSLCertificateChainFile /etc/apache2/ssl/lets-encrypt-x3-cross-signed.pem
| |
| Include /etc/letsencrypt/options-ssl-apache.conf
| |
| ...
| |
| ...
| |
| ...
| |
| </VirtualHost>
| |
| </IfModule>
| |
| | |
| </pre>
| |
| | |
| =Cron Examples=
| |
| ==restart service==
| |
| */usr/local/sbin/certbot-auto renew --quiet --no-self-upgrade --post-hook "service apache2 restart" >> /var/log/letsencrypt.log 2>&1 | |
| ==stop and start service== | |
| */usr/local/sbin/certbot-auto renew --quiet --no-self-upgrade --pre-hook "service apache2 stop" --post-hook "service apache2 start" >> /var/log/letsencrypt.log 2>&1 | |
| ==specified domain==
| |
| */usr/local/sbin/certbot-auto certonly -n --apache -d www.xxxx-xx.de --post-hook --post-hook "service apache2 start" | |
| | |
| =systemctl=
| |
| */usr/local/sbin/certbot-auto renew --no-self-upgrade --pre-hook "systemctl stop apache2.service" --post-hook "systemctl start apache2.service | |
| | |
| =Don't forget to Backup this Directory because there are you Accountdata=
| |
| */etc/letsencrypt
| |
|
| |
|
| =Links= | | =Prozess= |
| *https://certbot.eff.org/docs/using.html | | *https://letsencrypt.org/de/how-it-works/ |