This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| tips:ssl [2020/04/28 07:31] – [nginx] scipio | tips:ssl [2025/11/21 09:11] (current) – sscipioni | ||
|---|---|---|---|
| Line 5: | Line 5: | ||
| [[https:// | [[https:// | ||
| + | ===== letsencrypt staging ===== | ||
| + | |||
| + | get ca certificate and use with curl | ||
| + | <code | download> | ||
| + | API_HOST=sso.csgalileo.org | ||
| + | echo quit | openssl s_client -showcerts -servername " | ||
| + | curl --cacert cacert.pem https:// | ||
| + | </ | ||
| + | |||
| + | in browser import this [[https:// | ||
| ===== certbot ====== | ===== certbot ====== | ||
| < | < | ||
| + | snap install --classic certbot | ||
| + | |||
| + | # or for focal pre | ||
| add-apt-repository ppa: | add-apt-repository ppa: | ||
| apt-get update | apt-get update | ||
| Line 17: | Line 30: | ||
| </ | </ | ||
| - | wildchart | + | wildcard |
| < | < | ||
| certbot certonly \ | certbot certonly \ | ||
| Line 257: | Line 270: | ||
| 3 - this solution sits very nicely if you are using ansible, since the certs will live on the controller machine and can be copied across to all slave machines with a single command | 3 - this solution sits very nicely if you are using ansible, since the certs will live on the controller machine and can be copied across to all slave machines with a single command | ||
| + | |||
| + | |||
| + | |||
| + | {{ : | ||