Let’s Encrypt is a Certificate Authority that lets you acquire an SSL certificate. For systems that have shell access it is recommended to install Certbot which is an application that uses the ACME protocol. Certbot is packaged for many common operating systems and web servers.
Installation
Fedora
sudo dnf install certbot python2-certbot-apache
Debian
- If you run Debian Stretch or Debian Sid, you can install certbot packages.
sudo apt update && sudo apt upgrade sudo apt-get install certbot python-certbot-apache
- How to obtain a certificate using the apache plugin.
certbot --apache -d example.com -d www.example.com -d other.example.net
- If you are using Nginx you have to install the python-certbot-nginx plugin then use the –nginx flag
apt install python-certbot-nginx
certbot --nginx -d example.com -d www.example.com -d other.example.net
When you initially run the command to obtain the certificate certbot will create an account asking you for an email and agreement to the Let’s Encrypt subscriber policy. You can automate that task by adding the --email & --agree-tos primers
./certbot-auto certonly --standalone --email admin@example.com -d example.com -d www.example.com -d other.example.net
Alternate Forms Of Installation
- Install Certbot using the certbot-auto wrapper sctipt. This will grab dependencies from your web server OS.
wget https://dl.eff.org/certbot-auto chmod a+x ./certbot-auto
- To run the recently downloaded certbot
./certbot-auto
- Query for additional primers
./certbot-auto --help>