Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
tips:ssl [2019/09/16 13:58] – [certbot] scipio | tips:ssl [2022/06/22 07:15] (current) – [letsencrypt staging] sscipioni | ||
---|---|---|---|
Line 5: | Line 5: | ||
[[https:// | [[https:// | ||
+ | ===== letsencrypt staging ===== | ||
+ | |||
+ | get ca certificate and use with curl | ||
+ | <code | download> | ||
+ | API_HOST=sso.csgalileo.org | ||
+ | echo quit | openssl s_client -showcerts -servername " | ||
+ | curl --cacert cacert.pem https:// | ||
+ | </ | ||
+ | |||
+ | in browser import this [[https:// | ||
===== certbot ====== | ===== certbot ====== | ||
< | < | ||
+ | snap install --classic certbot | ||
+ | |||
+ | # or for focal pre | ||
add-apt-repository ppa: | add-apt-repository ppa: | ||
apt-get update | apt-get update | ||
Line 17: | Line 30: | ||
</ | </ | ||
- | wildchart | + | wildcard |
< | < | ||
certbot certonly \ | certbot certonly \ | ||
Line 55: | Line 68: | ||
} | } | ||
</ | </ | ||
+ | |||
+ | renew | ||
+ | < | ||
+ | certbot renew [--dry-run] | ||
+ | </ | ||
+ | |||
+ | automatic renew | ||
+ | < | ||
+ | systemctl status certbot.service | ||
+ | </ | ||
+ | |||
+ | / | ||
+ | < | ||
+ | max-log-backups = 0 | ||
+ | deploy-hook = systemctl reload nginx | ||
+ | </ | ||
===== acme.sh integration for letsencrypt ===== | ===== acme.sh integration for letsencrypt ===== | ||