Med Java

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Automatic generate / renew Let's Encrypt certificates ======

Install certbot.
<code>
yum install python2-certbot-apache
</code>

Setup the VirtualHost *:80 entry in your apache configuration for domain.com.
This will generate the certificates and the file domain.com-le-ssl.conf with the VirtualHost *:443 configuration for domain.com. 
<code>
certbot --apache -d domain.com
</code>

Check which certificates were generated.
<code>
certbot certificates
</code>

To manual renew ALL ceritificates:
<code>
certbot renew
systemctl restart httpd (to apply changes if Apache server is used)
</code>

To auto renew the certificate, check if the cron timer was installed (on some OS it may not):
<code>
systemctl status certbot.timer
</code>

If the previous timer was not found, we can add a cron job.
This will renew (if necessary - it will check first) all apache certificates deployed with let's encrypt.
<code>
sudo crontab -e
0 0,12 * * * root certbot -q renew --apache
</code>

===== Renew wildcard certificate =====
Wildcard certificates renewal require DNS-01 challenge, so we should manually edit the corresponding dns file.
<code>
sudo certbot certonly --manual --preferred-challenges dns --cert-name code.domain.com-0001
</code>

===== Delete a certificate =====

<code>
sudo certbot delete --cert-name example.com
</code>