User Tools

Site Tools


web_services:letsencrypt

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revision Both sides next revision
web_services:letsencrypt [2015/12/07 13:38]
tschulz [Getting Your first Certificate]
web_services:letsencrypt [2015/12/07 13:46]
tschulz [Getting Your first Certificate]
Line 21: Line 21:
   - You will be asked for a email address and a domain name in the curses interface enter them and if all goes well you should get a certificate file.    - You will be asked for a email address and a domain name in the curses interface enter them and if all goes well you should get a certificate file. 
   - If successful you will see four files (**cert.pem,​chain.pem,​fullchain.pem,​privkey.pem**) in **/​etc/​letsencrypt/​live/<​FQDN>/​**   - If successful you will see four files (**cert.pem,​chain.pem,​fullchain.pem,​privkey.pem**) in **/​etc/​letsencrypt/​live/<​FQDN>/​**
 +  - Consult the certificate file matrix below on how to use the certificate files.
 +
 +==== Certificate File Matrix ====
 +^Apache HTTPS Directive^LetsEncrypt File^Description^
 +|SSLCertificateKeyFile|privkey.pem|Private key for the certificate.|
 +|SSLCertificateFile|cert.pem|Server certificate only.|
 +|SSLCertificateChainFile|chain.pem|All certificates that need to be served by the browser excluding server certificate,​ i.e. root and intermediate certificates only.|
 +|--|fullchain.pem|This is what nginx needs for ssl_certificate.|
web_services/letsencrypt.txt · Last modified: 2015/12/07 13:54 by tschulz