Skip to main content

Let's Encrypt SSL Certificate

Generating a New Certificate

Use certbot and follow the guide!

  1. Install snapd: guide
  2. Remove certbot-auto and any Certbot OS packages
    • sudo apt-get remove certbot
    • sudo dnf remove certbot
    • sudo yum remove certbot
  3. Install Certbot
    • sudo snap install --classic certbot
  4. Prepare the Certbot command
    • sudo ln -s /snap/bin/certbot /usr/bin/certbot
  5. Choose how you'd like to run Certbot
    1. Get and install your certificates automatically
      • sudo certbot --apache
    2. Get a certificate manually
      • sudo certbot certonly --apache
  6. Test automatic renewal
    • sudo certbot renew --dry-run
    • Certbot packages on your system come with a cron job or systemd timer that will renew your certificates automatically before they expire. You will not need to run Certbot again, unless you change your configuration.
      • Command to renew certbot is installed in following locations
        • /etc/crontab/
        • /etc/cron.*/*
        • systemctl list-timers
  7. ???
  8. Profit!
Back to top