Install certbot Certbot commands Certbot SSL for Applications Install certbot OR Install SSL certificate on Apache On Nginx This will stop web server. Generate SSL, then start web server. Getting SSL with out installing Getting SSL with out web server Domain should be pointed to the server IP and IP should be public to generate … Read more
On a server, I have an SSL certificate with 2 domains (doaminA.com and domainB.com) root@Tombe:~# certbot certificates Saving debug log to /var/log/letsencrypt/letsencrypt.log – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – … Read more
To view the SSL certificate fingerprint, open the website in the google chrome browser. On the browser address bar, you will see the lock icon, click on it. Click on “Connection is secure” Click on “Certificate is Valid”. You will see SSL Certificate details as shown below. You will see SHA-256 and SHA-1 Fingerprint. To … Read more
To provision SSL certificate using acme.sh with manual DNS verification method, run acme.sh –issue -d DOMAIN_NAME –dns -d www.DOMAIN_NAME –yes-I-know-dns-manual-mode-enough-go-ahead-please When you run this command, you will get DNS TXT entry that needed to be added to your DNS server. Login to your DNS provider, add the DNS entry, then run the following command to … Read more
To extract SSL certificate and private key from Keystore (JKS) file, run keytool -importkeystore \ -srckeystore keystore.jks \ -destkeystore keystore.p12 \ -deststoretype PKCS12 It will ask for the new Keystore password and current Keystore password. Once you enter the password, JKS file gets converted to P12 format. This will include all certificates in the keystone. … Read more
For node.js applications, you can enable SSL on the application side or using Nginx or Apache running as a reverse proxy. To enable SSL for a node.js express application, use the following code. const fs = require(‘fs’) const https = require(‘https’) const express = require(‘express’) var port = 3000; var options = { key: fs.readFileSync(‘./ssl/ssl.key’), … Read more
To find the expiry date of an SSL certificate using openssl command, run openssl x509 -noout -dates -in /path/to/domain.crt Example root@ok:~# openssl x509 -noout -dates -in /etc/ssl/serverok.in.crt notBefore=Aug 16 22:37:11 2021 GMT notAfter=Sep 17 22:37:11 2022 GMT root@ok:~# notBefore is the start date for the SSL. notAfter is the expiry date for the SSL. See … Read more
acme.sh is an open source bash script that makes it easy to issue free SSL certificates using LetsEcrypt and ZeroSSL. To list all SSL certificates, use the command acme.sh –list Example If you need to delete an SSL certficate, run command acme.sh –remove -d DOMAIN_NAME_HERE Example root@ok:~# acme.sh –remove -d booctep.com [Tue 17 Aug 2021 … Read more
ACME (acme.sh) is a shell script for generating LetsEncrypt SSL certificate. acme.sh is written in bash, so it works on any Linux server without special requirements. For getting SSL, another popular option is to use certbot. To install, run When you install, it will set a daily cronjob for auto SSL renewal. You can see … Read more
To generate dhparam.pem, run cd /etc/ssl/ openssl dhparam -out dhparam.pem 4096 To add dhparam in Nginx, add ssl_dhparam /etc/ssl/dhparam.pem; See SSL
To enable LetsEncrypt SSL for a web site hosted in EasyEngine server, run ee site update SITE_NAME_HERE –ssl=le Example See EasyEngine
certbot deprecated support for CentOS 7, so new version of certbot-auto script won’t work on CentOS 7. To install certbot (letsencrypt command line tool), run yum install -y epel-release yum install -y python2-certbot.noarch To run it, use command /usr/bin/certbot-2 See LetsEncrypt