This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
deb11:certbot [2021/12/24 14:25] – Bernard Condrau | deb11:certbot [2023/03/06 12:39] (current) – [Links] Bernard Condrau | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== Certbot ====== | + | ====== |
The following walk through works on Debian 9, 10, and 11. | The following walk through works on Debian 9, 10, and 11. | ||
+ | |||
+ | ===== Installation ===== | ||
- Install snapd< | - Install snapd< | ||
sudo apt install snapd | sudo apt install snapd | ||
Line 12: | Line 14: | ||
- Test automatic renewal< | - Test automatic renewal< | ||
- Check that the certbot renewal service has been set up< | - Check that the certbot renewal service has been set up< | ||
+ | |||
+ | ===== Maintenance ===== | ||
+ | * If you have existing SSL VirtualHost definitions you need to copy a certificate from another site or webserver to / | ||
+ | * Run certbot and register sites:< | ||
+ | * Check certificates:< | ||
+ | * Add domains to certificate:< | ||
+ | certbot certonly --webroot --agree-tos -w / | ||
+ | * Revoke and optionally delete certificate:< | ||
+ | * Delete certificate:< | ||
+ | * Delete listed domains:< | ||
+ | * Remove and/or add domains from existing certificate:< | ||
+ | * Remove domain from certificate: | ||
+ | - Delete certificate where domain is listed in | ||
+ | - Change all apache conf files for the remaining domains in the deleted certificate to another certificate which is active | ||
+ | - Recreate the certificate for the remaining domains< | ||
+ | * All sites must be accessible through port 80 when renewing certificates. | ||
+ | |||
+ | ===== Disable ===== | ||
+ | * Comment the 2 // | ||
+ | [Timer] | ||
+ | Unit=snap.certbot.renew.service | ||
+ | # OnCalendar=*-*-* 08:46 | ||
+ | # OnCalendar=*-*-* 15: | ||
+ | |||
+ | ===== OUTDATED: Crontab ===== | ||
+ | * Root< | ||
+ | 35 3 * * 6 certbot renew && / | ||
==== Links ==== | ==== Links ==== | ||
* [[https:// | * [[https:// | ||
* [[https:// | * [[https:// | ||
+ | * [[https:// | ||
+ | * [[https:// |