LetsEncrypt is a Free SSL provider.
- LetsEncrypt.org
- Enable SSL in Nginx
- Install LetsEncrypt SSL on Proxmox Node
- Enable LetsEncrypt On Cpanel Server
Install LetsEncrypt
To install LetsEncrypt, run
1 2 3 | cd /usr/binwget https://dl.eff.org/certbot-autochmod a+x /usr/bin/certbot-auto |
Generate SSL certificate
To generate SSL for a web site, run
1 | certbot-auto --apache -d YOUR-DOMAIN.EXT -d www.YOUR-DOMAIN.EXT |
Auto Renew SSL with Cronjob
LetsEncrypt SSL certificate expire after 90 days of issuing. To renew it, run following cronjob.
1 | crontab -e |
Add
1 | 30 2 * * 1 /usr/bin/certbot-auto renew >> /var/log/le-renew.log |
List All SSL certificates on a server
To list all SSLs, run
1 | certbot-auto certificates |
Example
root@server:~# certbot-auto certificates
Saving debug log to /var/log/letsencrypt/letsencrypt.log
-------------------------------------------------------------------------------
Found the following certs:
Certificate Name: vesta.webhostingneeds.com
Domains: vesta.webhostingneeds.com
Expiry Date: 2018-02-19 02:57:36+00:00 (VALID: 89 days)
Certificate Path: /etc/letsencrypt/live/vesta.webhostingneeds.com/fullchain.pem
Private Key Path: /etc/letsencrypt/live/vesta.webhostingneeds.com/privkey.pem
-------------------------------------------------------------------------------
root@server:~#
