Apache:Creazione di un certificato SSL per Apache con Certbot

← Torna ad Apache

Apache on Debian 8 (jessie)

Estratto da : https://certbot.eff.org/lets-encrypt/debianjessie-apache

Remove packaged Certbot installation

We previously recommended that Debian 8 (jessie) users install Certbot from the packaged version. Because of important updates in the Certbot code, we are now recommending that Debian 8 users switch to the certbot-auto method, described below.

Run this command on the command line on the machine to remove previous installations of Certbot. If Certbot has never been installed, the command will not do anything.

sudo apt-get remove certbot

Install Certbot

Run these commands on the command line on the machine to install Certbot.

wget https://dl.eff.org/certbot-auto
sudo mv certbot-auto /usr/local/bin/certbot-auto
sudo chown root /usr/local/bin/certbot-auto
sudo chmod 0755 /usr/local/bin/certbot-auto

Choose how you'd like to run Certbot

Either get and install your certificates...

Run this command to get a certificate and have Certbot edit your Apache configuration automatically to serve it, turning on HTTPS access in a single step.

sudo /usr/local/bin/certbot-auto --apache

chiede:

• l'indirizzo email di supporto
• se abilitare il redirect automatico di ogni pagina da HTTP a HTTPS

Or, just get a certificate

If you're feeling more conservative and would like to make the changes to your Apache configuration by hand, run this command: sudo /usr/local/bin/certbot-auto certonly --apache

Set up automatic renewal

We recommend running the following line, which will add a cron job to the default crontab.

echo "0 0,12 * * * root python -c 'import random; import time; time.sleep(random.random() * 3600)' && /usr/local/bin/certbot-auto renew -q" | sudo tee -a /etc/crontab > /dev/null

Confirm that Certbot worked

To confirm that your site is set up properly, visit https://yourwebsite.com/ in your browser and look for the lock icon in the URL bar. If you want to check that you have the top-of-the-line installation, you can head to https://www.ssllabs.com/ssltest/.