{"id":4576,"date":"2018-11-07T19:03:52","date_gmt":"2018-11-07T21:03:52","guid":{"rendered":"https:\/\/blog.clusterweb.com.br\/?p=4576"},"modified":"2018-11-07T19:04:23","modified_gmt":"2018-11-07T21:04:23","slug":"certbot","status":"publish","type":"post","link":"https:\/\/blog.clusterweb.com.br\/?p=4576","title":{"rendered":"Certbot"},"content":{"rendered":"
\n

Install<\/h3>\n

Since it doesn’t seem like your operating system has a packaged version of Certbot, you should use our certbot-auto script to get a copy:<\/p>\n

wget https:\/\/dl.eff.org\/certbot-auto\r\nchmod a+x certbot-auto<\/pre>\n
certbot-auto<\/tt>\u00a0accepts the same flags as\u00a0certbot<\/tt>; it installs all of its own dependencies and updates the client code automatically.<\/p>\n
Certbot’s DNS plugins which can be used to automate obtaining a wildcard certificate from Let’s Encrypt’s ACMEv2 server are not available for your OS yet.<\/strong>\u00a0This should change soon but if you don’t want to wait, you can use these plugins now by\u00a0running Certbot in Docker<\/a>\u00a0instead of using the instructions on this page.<\/p>\n
 <\/p>\n<\/div>\n
<\/p>\n
\n
Get Started<\/h3>\n
Certbot has a fairly solid beta-quality Apache plugin, which is supported on many platforms, and automates certificate installation.<\/p>\n
$ sudo .\/path\/to\/certbot-auto --apache<\/pre>\n
Running this command will get a certificate for you and have Certbot edit your Apache configuration automatically to serve it. If you’re feeling more conservative and would like to make the changes to your Apache configuration by hand, you can use the\u00a0certonly<\/tt>subcommand:<\/p>\n
$ sudo .\/path\/to\/certbot-auto --apache certonly<\/pre>\n
To learn more about how to use Certbot\u00a0read our documentation<\/a>.<\/p>\n
Automating renewal<\/h3>\n
Certbot can be configured to renew your certificates automatically before they expire. Since Let’s Encrypt certificates last for 90 days, it’s highly advisable to take advantage of this feature. You can test automatic renewal for your certificates by running this command:<\/p>\n
$ sudo .\/path\/to\/certbot-auto renew --dry-run\r\n<\/pre>\n
If that appears to be working correctly, you can arrange for automatic renewal by adding a\u00a0cron job<\/a><\/tt>\u00a0or\u00a0systemd timer<\/a><\/tt>\u00a0which runs the following:<\/p>\n
.\/path\/to\/certbot-auto renew<\/pre>\n