Let’s Encrypt is a Certificate Authority that lets you acquire an SSL certificate. For systems that have shell access it is recommended to install Certbot which is an application that uses the ACME protocol. Certbot is packaged for many common operating systems and web servers.
Installation
Fedora
|
1 |
sudo dnf install certbot python2-certbot-apache |
Debian
- If you run Debian Stretch or Debian Sid, you can install certbot packages.
|
1 2 |
sudo apt update && sudo apt upgrade sudo apt-get install certbot python-certbot-apache |
- How to obtain a certificate using the apache plugin.
|
1 |
certbot --apache -d example.com -d www.example.com -d other.example.net |
- If you are using Nginx you have to install the python-certbot-nginx plugin then use the –nginx flag
|
1 |
apt install python-certbot-nginx |
|
1 |
certbot --nginx -d example.com -d www.example.com -d other.example.net |
When you initially run the command to obtain the certificate certbot will create an account asking you for an email and agreement to the Let’s Encrypt subscriber policy. You can automate that task by adding the
--email & --agree-tos primers
|
1 |
./certbot-auto certonly --standalone --email admin@example.com -d example.com -d www.example.com -d other.example.net |
Alternate Forms Of Installation
- Install Certbot using the certbot-auto wrapper sctipt. This will grab dependencies from your web server OS.
|
1 2 |
wget https://dl.eff.org/certbot-auto chmod a+x ./certbot-auto |
- To run the recently downloaded certbot
|
1 |
./certbot-auto |
- Query for additional primers
|
1 |
./certbot-auto --help> |