DokuWiki

h1. Letsencrypt

another way of obtaining the Let's Enrcrypt - Certificates is via 'dehydrated' see also https://keihsler.com/redmine/projects/dw_os_cos8/wiki/Setup_dehydrated

link-list:

https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-centos-7

https://www.centosblog.com/use-letsencrypt-free-ssl-certificate-centos-linux/

https://www.my-it-brain.de/wordpress/der-eigene-mailserver-tls-migration-zu-lets-encrypt/

https://www.kuketz-blog.de/certbot-lets-encrypt-tls-zertifikate-fuer-mailserver/

https://blog.tausys.de/2016/07/13/letsencrypt-zertifikate-fuer-dovecot-und-postfix/

https://community.letsencrypt.org/t/certs-for-mailserver-different-from-webserver/32216/7

https://community.letsencrypt.org/t/1-certificate-for-6-domains/49471

https://community.letsencrypt.org/t/multiple-domains-webroot-paths-using-webroot-plugin/7982/5

https://community.letsencrypt.org/t/installed-correctly-but-still-says-certificate-error-using-edge/49453/2

taken from https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-centos-7

* epel

yum install epel-release

*install

yum install httpd mod_ssl python-certbot-apache

yum install certbot

* apache service

systemctl start httpd

systemctl enable httpd

* firewall

firewall-cmd --permanent --zone=public --add-service=http

firewall-cmd --permanent --zone=public --add-service=https

firewall-cmd --reload

* test apache service

curl example.com

curl -k https://example.com

/opt/eff.org/certbot/venv/bin/certbot --apache -d example.com -d www.example.com

h2. renew cert for nginx

<pre><code class="shell">

certbot renew --post-hook '/usr/sbin/service postfix restart; /usr/sbin/service nginx restart; /usr/sbin/service dovecot restart'

</code></pre>

h2. troubleshooting

when there are multiple domains double check *.conf in @/etc/letsencrypt/renewal@ especially the section @[[webroot_map]]@