Visualizza wikitesto di Apache:Creazione di un certificato SSL per Apache con Certbot

[[GENERALE#Apache|&larr; Torna ad Apache]] [[Category:Apache]]

== Apache on Debian 8 (jessie) ==
Estratto da : https://certbot.eff.org/lets-encrypt/debianjessie-apache

=== Remove packaged Certbot installation ===
We previously recommended that Debian 8 (jessie) users install Certbot from the packaged version. Because of important updates in the Certbot code, we are now recommending that Debian 8 users switch to the certbot-auto method, described below.

Run this command on the command line on the machine to remove previous installations of Certbot. If Certbot has never been installed, the command will not do anything.
 sudo apt-get remove certbot

=== Install Certbot ===
Run these commands on the command line on the machine to install Certbot.
 wget https://dl.eff.org/certbot-auto
 sudo mv certbot-auto /usr/local/bin/certbot-auto
 sudo chown root /usr/local/bin/certbot-auto
 sudo chmod 0755 /usr/local/bin/certbot-auto

=== Choose how you'd like to run Certbot ===
'''Either get and install your certificates...'''

Run this command to get a certificate and have Certbot edit your Apache configuration automatically to serve it, turning on HTTPS access in a single step.
 sudo /usr/local/bin/certbot-auto --apache
chiede:
* l'indirizzo email di supporto
* se abilitare il redirect automatico di ogni pagina da HTTP a HTTPS

'''Or, just get a certificate'''

If you're feeling more conservative and would like to make the changes to your Apache configuration by hand, run this command: {{code|sudo /usr/local/bin/certbot-auto certonly --apache}}

=== Set up automatic renewal ===
We recommend running the following line, which will add a cron job to the default crontab.
 echo "0 0,12 * * * root python -c 'import random; import time; time.sleep(random.random() * 3600)' && /usr/local/bin/certbot-auto renew -q" | sudo tee -a /etc/crontab > /dev/null

=== Confirm that Certbot worked ===
To confirm that your site is set up properly, visit https://yourwebsite.com/ in your browser and look for the lock icon in the URL bar. If you want to check that you have the top-of-the-line installation, you can head to https://www.ssllabs.com/ssltest/.