Let's Encrypt Setup

Download and set up certbot (Only do this once)
- wget https://dl.eff.org/certbot-auto
- Suggested placement in /opt/letsencrypt/
Run certbot-auto
1. To renew:
  - ./certbot-auto certonly --force-renew --manual -d domain.name.com
2. To create a new request:
  - ./certbot-auto certonly --manual
3. If you are running from a webserver on the public internet, you can drop the --manual and it will handle much of the process automatically. If you are uncomfortable with the script modifying your webserver conf files, you might wish to retain the --manual flag
4. Answer prompts accordingly
It will need to verify ownership of domain (this is only if you are running --manual and the internet does't have direct access to the machine)
1. On another webserver accessible via the internet, navigate to the root folder that is accessible via the domain you are testing (you may need to configure dns to point to this server)
2. Run the printf statement certbot requests
3. Finish the cert update

this document last modified: October 06 2017 21:42