LetsEncrypt - Revision history

MkWikiEnSysOp at 15:11, 7 May 2025

2025-05-07T15:11:43Z

← Older revision		Revision as of 15:11, 7 May 2025
Line 1:		Line 1:
	This article describes installation and configuration of letsencrypt and its certificates using Debian Jessie. YMMV.		This article describes installation and configuration of letsencrypt and its certificates using Debian Jessie/Stretch/Buster/Bullseye/Bookworm. YMMV.

	== Installation of certbot ==		== Installation of certbot ==

2025-05-07T15:07:57Z

Installation using Python infrastructure: +After upgrading OS

← Older revision		Revision as of 15:07, 7 May 2025
Line 31:		Line 31:

	'''Hint:''' Depending on the webserver you use, install module certbot-nginx or certbot-apache.		'''Hint:''' Depending on the webserver you use, install module certbot-nginx or certbot-apache.

			==== After upgrading OS ====

			Usually the previously created virtual environment does not work anymore, so a new environment must be created <ref>https://community.letsencrypt.org/t/no-module-named-certbot/199861/2</ref>.

			rm -rf certbotenv/
			python3 -m venv certbotenv
			source certbotenv/bin/activate
			pip3 install certbot ''certbot-nginx certbot-apache''

	== Getting a certificate ==		== Getting a certificate ==

2025-02-03T15:09:10Z

← Older revision		Revision as of 15:09, 3 February 2025
Line 136:		Line 136:
	</IfModule>		</IfModule>
	</pre>		</pre>

			== Scripts To Execute Upon Renewal ==

			/etc/letsencrypt/renewal-hooks/deploy

2023-11-03T19:40:37Z

Configuring web server: Delete TLSv1.0 and TLSv1.1, add TLSv1.3

← Older revision		Revision as of 19:40, 3 November 2023
Line 74:		Line 74:
	ssl_session_cache shared:SSL:5m;		ssl_session_cache shared:SSL:5m;

	ssl_protocols ~~TLSv1~~ TLSv1.1 TLSv1.2;		ssl_protocols TLSv1.2 TLSv1.3;

	ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK';		ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK';

2023-10-02T19:32:46Z

Installation using Python infrastructure

← Older revision		Revision as of 19:32, 2 October 2023
Line 28:		Line 28:
	python3 -m venv certbotenv		python3 -m venv certbotenv
	source certbotenv/bin/activate		source certbotenv/bin/activate
	pip3 install certbot certbot-nginx		pip3 install certbot ''certbot-nginx certbot-apache''

			'''Hint:''' Depending on the webserver you use, install module certbot-nginx or certbot-apache.

	== Getting a certificate ==		== Getting a certificate ==

2023-10-01T19:53:36Z

Installation using Python infrastructure: Add certbot-nginx

← Older revision		Revision as of 19:53, 1 October 2023
Line 28:		Line 28:
	python3 -m venv certbotenv		python3 -m venv certbotenv
	source certbotenv/bin/activate		source certbotenv/bin/activate
	pip3 install certbot		pip3 install certbot certbot-nginx

	== Getting a certificate ==		== Getting a certificate ==

2023-10-01T17:48:43Z

Installation of certbot: Added Installation using Python infrastructure

← Older revision		Revision as of 17:48, 1 October 2023
Line 20:		Line 20:
	snap install core		snap install core
	snap install certbot --classic		snap install certbot --classic

			=== Installation using Python infrastructure ===

			Especially when snap cannot be used (message <code>error: system does not fully support snapd: cannot mount squashfs image using "squashfs": mount:</code> appears when "snap install" is run), certbot can be installed using pip:

			apt install python3-pip python3-venv
			python3 -m venv certbotenv
			source certbotenv/bin/activate
			pip3 install certbot

	== Getting a certificate ==		== Getting a certificate ==

2022-06-03T19:09:56Z

Installation

← Older revision		Revision as of 19:09, 3 June 2022
Line 1:		Line 1:
	This article describes installation and configuration of letsencrypt and its certificates using Debian Jessie. YMMV.		This article describes installation and configuration of letsencrypt and its certificates using Debian Jessie. YMMV.

	== Installing packages ==		== Installation of certbot ==

			=== Manual installation using git ===

			==== Installing prerequisite packages ====

	Every package after "git" would be installed by the letsencrypt-auto script, but you might want to have the packages installed before.		Every package after "git" would be installed by the letsencrypt-auto script, but you might want to have the packages installed before.
Line 7:		Line 11:
	apt install -y git python python-dev python-virtualenv gcc dialog libssl-dev libffi-dev ca-certificates		apt install -y git python python-dev python-virtualenv gcc dialog libssl-dev libffi-dev ca-certificates

	== Fetching letsencrypt ==		==== Fetching letsencrypt ====

	git clone https://github.com/letsencrypt/letsencrypt		git clone https://github.com/letsencrypt/letsencrypt

			=== Installation using snap ===

			apt install snapd
			snap install core
			snap install certbot --classic

	== Getting a certificate ==		== Getting a certificate ==

2022-06-03T19:03:05Z

Installing packages

← Older revision		Revision as of 19:03, 3 June 2022
Line 5:		Line 5:
	Every package after "git" would be installed by the letsencrypt-auto script, but you might want to have the packages installed before.		Every package after "git" would be installed by the letsencrypt-auto script, but you might want to have the packages installed before.

	apt~~-get~~ install -y git python python-dev python-virtualenv gcc dialog libssl-dev libffi-dev ca-certificates		apt install -y git python python-dev python-virtualenv gcc dialog libssl-dev libffi-dev ca-certificates

	== Fetching letsencrypt ==		== Fetching letsencrypt ==

2021-12-30T20:16:20Z

Added new way (certbot)

← Older revision		Revision as of 20:16, 30 December 2021
Line 12:		Line 12:

	== Getting a certificate ==		== Getting a certificate ==

			=== The Old Way Using Letsencrypt ===

	cd letsencrypt		cd letsencrypt
Line 19:		Line 21:

	When the script runs, it setups everything that's needed. It asks you for your e-mail address and that you agree to the terms of use. Once the operation is finished, all the files created by the script are located in /etc/letsencrypt/live/fully.qualified.domain/.		When the script runs, it setups everything that's needed. It asks you for your e-mail address and that you agree to the terms of use. Once the operation is finished, all the files created by the script are located in /etc/letsencrypt/live/fully.qualified.domain/.

			=== The New Way Using Certbot ===

			certbot --nginx -d ''fully.qualified.domain''

	== Configuring web server ==		== Configuring web server ==