Difference between revisions of "Letsencrypt"

From wiki
Jump to navigation Jump to search
(Created page with "[https://letsencrypt.org/ Letsencrypt] is an initiative to have the web encrypted all over the place: It is using [https://certbot.eff.org/ certbot] to create and maintain SS...")
 
Line 2: Line 2:
  
 
It is using [https://certbot.eff.org/ certbot] to create and maintain SSL-certificates for websites.
 
It is using [https://certbot.eff.org/ certbot] to create and maintain SSL-certificates for websites.
 
Move to a new server. Inspiration came from [https://ivanderevianko.com/2019/03/migrate-letsencrypt-certificates-certbot-to-new-server  Ivan Derevianko]. It can be even simpler.
 
  
 
* Get the software
 
* Get the software
 
:<code>apt-get install certbot python-certbot-nginx</code>
 
:<code>apt-get install certbot python-certbot-nginx</code>
 +
 +
;certbot renew
 +
:Manual renewal of the certificates that are due for it. Certbot installs a cronjob in /etc/cron.d to check for renewal every 12 hours.
 +
 +
==Move to a new server==
 +
Inspiration came from [https://ivanderevianko.com/2019/03/migrate-letsencrypt-certificates-certbot-to-new-server  Ivan Derevianko]. It can be even simpler.
  
 
Provided you have all configuration the same on the new server as on the old one you only need to do:
 
Provided you have all configuration the same on the new server as on the old one you only need to do:

Revision as of 22:21, 4 March 2020

Letsencrypt is an initiative to have the web encrypted all over the place:

It is using certbot to create and maintain SSL-certificates for websites.

  • Get the software
apt-get install certbot python-certbot-nginx
certbot renew
Manual renewal of the certificates that are due for it. Certbot installs a cronjob in /etc/cron.d to check for renewal every 12 hours.

Move to a new server

Inspiration came from Ivan Derevianko. It can be even simpler.

Provided you have all configuration the same on the new server as on the old one you only need to do:

  • Archive certificates on the old servers
tar cvf letsencrypt.tar ./letsencrypt
  • Move them to a new server
  • Extract to the same location