4 ms·
How hard is it to provide HTTPS these days? Say you have a plain Debian 8 install, running a typical LAMP stack serving a single domain. If you want to make i
by TekMol 9y ago
How hard is it to provide HTTPS these days?
Say you have a plain Debian 8 install, running a typical LAMP stack serving a single domain.
If you want to make it use a LetsEncrypt cert and serve the domain over HTTPS - what would be the minimum number of steps on the command line to make it do that?
- ezequiel-garzon 9y agoSomething like (assuming you've reviewed the terms of service): apt install letsencrypt letsencrypt certonly -d example.com -d www.example.com -m you@example.com --agree-tos And then add a weekly cron job with: letsencrypt renew You need to stop your server for these actions, though I'm sure there are ways to avoid this.
- TekMol 9y agoThere is no package "letsencrypt" in the repos of a standard Debian 8 installation.
- ezequiel-garzon 9y agoMy apologies, then. I mistakenly keep assuming Debian/Ubuntu similarities...
- jws 9y agoIt is "certbot" in Debian 9. Maybe 8 too.
- jefozabuss 9y agohttps://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-ubuntu-14-04 https://www.digitalocean.com/community/tutorials/how-to-secu...
- tajen 9y agoA dozen in non-interactive mode; less than half in interactive: Non-interactive: install Certbot, copy the config file, run certbot, add a crontab for renewals, configure your nginx to see the certificate.
- roebk 9y agoThe company I work for have 3000+ websites served from a single application. Whilst we offer everyone HTTPS when they log in (everything's on a subdomain at this point, so a wildcard cert does the trick), we don't have HTTPS enabled for general access to their websites. I've pushed for the 3000+ websites to be served over HTTPS but there's serious reluctance from the sys admins about creating and managing such volumes of certificates. So I'm guessing it's easy if you only have a handful of services, but at volume it becomes a little tricker. If there's a easy way to solve this problem, I'd love to hear it.
- corford 9y agoI'm a fan of https://github.com/Neilpang/acme.sh https://github.com/Neilpang/acme.sh You should be up and running in minutes with it.
- pbhjpbhj 9y agoLooks like 5 lines using "Certbot", https://certbot.eff.org/#debianjessie-apache https://certbot.eff.org/#debianjessie-apache.