Difference between revisions of "Certbot"

From Dogtag
Jump to: navigation, search
m (See Also)
m
(One intermediate revision by the same user not shown)
Line 41: Line 41:
 
* certificate: /etc/letsencrypt/live/example.com/fullchain.pem
 
* certificate: /etc/letsencrypt/live/example.com/fullchain.pem
 
* private key: /etc/letsencrypt/live/example.com/privkey.pem
 
* private key: /etc/letsencrypt/live/example.com/privkey.pem
 +
 +
= Removing a Certificate =
 +
 +
$ certbot delete --cert-name $HOSTNAME
  
 
= See Also =
 
= See Also =
Line 47: Line 51:
 
* [https://certbot.eff.org/docs/ Certbot Docs]
 
* [https://certbot.eff.org/docs/ Certbot Docs]
 
* [[ACME Client]]
 
* [[ACME Client]]
 +
* [https://github.com/ppKrauss/certbot-faq/blob/master/README.md certbot Fast-Guide]

Revision as of 02:05, 14 August 2019

Installation

$ dnf install certbot

Requesting a Certificate

To request a certificate with http-01 challenge:

$ certbot certonly --standalone -d example.com -d www.example.com --register-unsafely-without-email

To request a certificate with http-01 challenge from a different machine:

$ certbot certonly --manual -d example.com -d www.example.com --register-unsafely-without-email

To request a certificate with dns-01 challenge:

$ certbot certonly --manual -d example.com -d www.example.com --register-unsafely-without-email --preferred-challenges dns

To request a multi-domain certificate:

$ certbot certonly -d example.com -d www.example.com

To request a certificate from a different server:

$ certbot certonly -d example.com --server http://localhost:8080/acme/rest/directory

The results will be stored in:

  • certificate: /etc/letsencrypt/live/example.com/fullchain.pem
  • private key: /etc/letsencrypt/live/example.com/privkey.pem

Removing a Certificate

$ certbot delete --cert-name $HOSTNAME

See Also