Letsencrypt: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
 
(8 dazwischenliegende Versionen von 2 Benutzern werden nicht angezeigt)
Zeile 1: Zeile 1:
−
*[[Letsencrpyt Manual Way]]
+
*[[Was ist Letsencrypt]]
−
*[[Letsencrpyt Ubuntu 16.04]]
 
  
  
 +
=Prinzip=
 +
*https://letsencrypt.org/de/docs/challenge-types
 +
=Visit=
 +
*https://certbot.eff.org/
 
=Install=
 
=Install=
−
*apt-get install python-pip
+
*[[Certbot Service Update Script]]
−
*pip install --upgrade setuptools 
+
*[[Letsencrpyt Manual Way]]
−
*cd /usr/local/sbin
+
*[[Letsencrpyt Ubuntu 16.04]]
−
*wget https://dl.eff.org/certbot-auto
+
*[[Letsencrypt DNS Verification]]
−
*chmod a+x certbot-auto
+
*[[Let's Encrypt mit Cloudflare DNS-Challenge]]
−
*test -d /etc/apache2/ssl || mkdir /etc/apache2/ssl
 
−
*cd /etc/apache2/ssl
 
−
*wget https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem
 
−
 
 
−
=Real Install=
 
−
check Locales when you have problems.
 
−
*certbot-auto --apache certonly -d www.example.com
 
−
 
 
−
=Dry Run=
 
−
*certbot-auto renew --dry-run
 
−
 
 
−
 
 
−
*/usr/local/sbin/certbot-auto renew  --no-self-upgrade --dry-run --force-renewal --pre-hook "systemctl stop apache2.service" --post-hook "systemctl start apache2.service
 
−
 
 
−
=Apache2 Example=
 
−
<pre>
 
−
<IfModule mod_ssl.c>
 
−
<VirtualHost _default_:443>
 
−
Servername www.example.com
 
−
SSLCertificateFile /etc/letsencrypt/live/www.example.com/fullchain.pem
 
−
SSLCertificateKeyFile /etc/letsencrypt/live/www.example.com/privkey.pem
 
−
SSLCertificateChainFile /etc/apache2/ssl/lets-encrypt-x3-cross-signed.pem
 
−
Include /etc/letsencrypt/options-ssl-apache.conf
 
−
...
 
−
...
 
−
...
 
−
</VirtualHost>
 
−
</IfModule>
 
−
 
 
−
</pre>
 
−
 
 
−
=Cron Examples=
 
−
==restart service==
 
−
*/usr/local/sbin/certbot-auto renew --quiet --no-self-upgrade --post-hook "service apache2 restart" >> /var/log/letsencrypt.log 2>&1
 
−
==stop and start service==
 
−
*/usr/local/sbin/certbot-auto renew --quiet --no-self-upgrade  --pre-hook "service apache2 stop" --post-hook "service apache2 start" >> /var/log/letsencrypt.log 2>&1
 
−
==specified domain==
 
−
*/usr/local/sbin/certbot-auto certonly -n --apache -d www.xxxx-xx.de --post-hook  --post-hook "service apache2 start"
 
−
 
 
−
=systemctl=
 
−
*/usr/local/sbin/certbot-auto renew  --no-self-upgrade --pre-hook "systemctl stop apache2.service" --post-hook "systemctl start apache2.service"
 
−
 
 
−
=Don't forget to Backup this Directory because there are you Accountdata=
 
−
*/etc/letsencrypt
 
−
 
 
−
=nginx=
 
−
*https://www.bjornjohansen.no/letsencrypt-nginx
 
  
−
=Links=
+
=Prozess=
−
*https://certbot.eff.org/docs/using.html
+
*https://letsencrypt.org/de/how-it-works/

Aktuelle Version vom 23. Juni 2026, 09:53 Uhr