Certbot: Difference between revisions

From David's Wiki
No edit summary
Line 1: Line 1:
Certbot is the program by Let's Encrypt to manage your SSL certificates.
Certbot is the program by Let's Encrypt to manage your SSL certificates.
==Install==
See [https://certbot.eff.org/instructions https://certbot.eff.org/instructions]
<pre>
sudo apt-get update
sudo apt-get install software-properties-common
sudo add-apt-repository universe
sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update
sudo apt install certbot python3-certbot-apache python3-certbot-dns-cloudflare
</pre>


==Usage==
==Usage==
Line 7: Line 20:
# List certificates
# List certificates
sudo certbot certificates
sudo certbot certificates
# Install a certificate
sudo certbot --apache -d wiki.davidl.me
# Generate a certificate without install
sudo certbot certonly --apache -d wiki.davidl.me
# Generate a wildcard certificate
sudo certbot -i apache --dns-cloudflare --dns-cloudflare-credentials ~/.secrets/certbot/cloudflare.ini -d local.davidl.me -d *.local.davidl.me


# Renew all certificates
# Renew all certificates

Revision as of 08:24, 31 May 2020

Certbot is the program by Let's Encrypt to manage your SSL certificates.

Install

See https://certbot.eff.org/instructions

sudo apt-get update
sudo apt-get install software-properties-common
sudo add-apt-repository universe
sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update

sudo apt install certbot python3-certbot-apache python3-certbot-dns-cloudflare

Usage

See Managing Certificates

# List certificates
sudo certbot certificates

# Install a certificate
sudo certbot --apache -d wiki.davidl.me
# Generate a certificate without install
sudo certbot certonly --apache -d wiki.davidl.me
# Generate a wildcard certificate
sudo certbot -i apache --dns-cloudflare --dns-cloudflare-credentials ~/.secrets/certbot/cloudflare.ini -d local.davidl.me -d *.local.davidl.me

# Renew all certificates
sudo certbot renew

# Revoke a certificate
sudo certbot revoke --cert-name example.com

# Delete a certificate
sudo certbot delete --cert-name example.com