User Tools

Site Tools


web_services:letsencrypt

This is an old revision of the document!


LetsEncyrpt on Ubuntu

  • There are some important factors to consider when using LetsEncyrpt certificates
  1. LetsEncyrpt tires to setup a HTTP or HTTPS server to validate your domain and accordingly port 80 and 443 need to be open for LetsEncyrpt to connect to these ports before they will give you a certificate.
  2. LetsEncyrpt certificates have a life of 3-4 months so they need to be renewed every three months.
  3. The entire process is done through the command line/curses client on the server running the web server
  4. On Ubuntu I had to install the certificates manually

Install LetsEncrypt client

  1. Install Git
    apt-get install git
  2. Download client source
    git clone https://github.com/letsencrypt/letsencrypt
  3. Run Client
    cd letsencrypt
    ./letsencrypt-auto

Getting Your first Certificate

  • Let's assume that you have a standard webroot server running on port 80 (Apache, Lighthttpd, Ngnix)
  • In this case it makes sense to run letsencrypt-auto using http and webroot domain verification.
web_services/letsencrypt.1449516486.txt.gz · Last modified: 2015/12/07 13:28 by tschulz