Facebook Twitter Instagram
    TecAdmin
    • Home
    • FeedBack
    • Submit Article
    • About Us
    Facebook Twitter Instagram
    TecAdmin
    You are at:Home»General Articles»How to Generate Let’s Encrypt SSL using Certbot

    How to Generate Let’s Encrypt SSL using Certbot

    By RahulSeptember 18, 20224 Mins Read

    Let’s Encrypt is a free, automated, and open certificate authority: it lets you create and install free TLS certificates in your web server with a few command-line arguments. With Let’s Encrypt, you can provide HTTPS on your website for every user without spending money or worrying about renewal dates.

    Advertisement

    The Certbot provides an easy way to generate Let’s Encrypt free certificates for all websites that support HTTP and serve their content over HTTPS. In this article, we will see how to use Certbot to automate the process of generating Let’s Encrypt certificates.

    Step 1 – Installing Certbot

    Most Linux systems have the certbot package under default package repositories. is a tool to obtain certificates from Let’s Encrypt and configure them on your web server. The Snap package is the easiest way for installing the certbot on the Ubuntu system.

    Open a terminal and execute the below command to install certbot:

    sudo snap install --classic certbot 
    

    Once a new certbot version is available, Snap will auto-update the package.

    Step 2 – Generate SSL Certificate with Certbot

    Now, You can request SSL certificates from Let’s encrypt based on the web server. We have discussed 4 methods to get a new SSL certificate, that depend on which web server running on your system. Might be there is no web server running on the system.

    So choose the correct method as per the environment:

    1. No Web Server Running
    2. In case, you don’t have any web server running on your system. You can --standalone option to complete the domain validation by stating a dummy web server. This option needs to bind to port 80 in order to perform domain validation.

      sudo certbot certonly --standalone 
      
      Generate a Let's Encrypt Certificate using Certbot
      Get a new SSL using standalone

      If you are running the certbot for the first time, it will prompt you to accept terms and provide an email address for sending notifications.

      You can also provide the inputs at the command line, For example:

      sudo certbot certonly --standalone -d example.com --staple-ocsp -m [email protected] --agree-tos  
      

    3. Certbot with Apache
    4. The systems running the Apache web server, execute the following command. This will list all the domains/sub-domains configured on your web server. Select appropriate numbers to request a certificate.

      sudo certbot --apache 
      

      This will read the Apache configuration files and list all the configured domain names. Enter the number of the domain you want to issue a certificate. You can input multiple comma-separated numbers.

      Once the domain ownership is verified, the certificate will be issued and the Apache configuration file will be created with SSL settings.

    5. Certbot with Nginx
    6. For the systems running the Nginx web server, use the below command to request the SSL certificates.

      sudo certbot --nginx -d example.com -d www.example.com 
      

    7. Some Other Web Server Running
    8. For the system having any other web servers running except Apache or Nginx. Then you can get the certificate only and configure them manually.

      This command will ask you for the domain name and document root for the domain.

      sudo certbot certonly --webroot 
      

      You can also pass the domain name and/or document root on the command line.

      sudo certbot certonly --webroot -w /var/www/html -d example.com -d www.example.com 
      

    While using the above commands, the domain must be pointed to the server in DNS. Also, ensure that /.well-known/acme-challenge is served by the web server.

    Step 3 – View Certificate Files

    Once a certificate is issued by the Lets Encrypt authority. All the certificate files are created under the /etc/letsencrypt directory. If your domain name is example.com, then the files will be created at the below location.

    ls -l /etc/letsencrypt/live/example.com/ 
    
    Output:
    -rw-r--r-- 1 root root 692 Mar 9 06:59 README lrwxrwxrwx 1 root root 37 Sep 6 09:56 cert.pem -> ../../archive/example.com/cert1.pem lrwxrwxrwx 1 root root 38 Sep 6 09:56 chain.pem -> ../../archive/example.com/chain1.pem lrwxrwxrwx 1 root root 42 Sep 6 09:56 fullchain.pem -> ../../archive/example.com/fullchain1.pem lrwxrwxrwx 1 root root 40 Sep 6 09:56 privkey.pem -> ../../archive/example.com/privkey1.pem

    Change example.com with your domain name to get correct files.

    Conclusion

    Let’s Encrypt is a certificate authority that provides free SSL certificates for public websites. We can issue certificates for any number of domains. The SSL certificates are issued for 3 months only, then you need to renew it. Certbot is a command line utility that helps to manage Let’s Encrypt SSL certificates. With the help of certbot we can issue a new certificate, and renew and delete it.

    Hope this tutorial helps you to work with Certbot for managing the SSL certificate on your system.

    certbot Let's Encrypt SSL
    Share. Facebook Twitter Pinterest LinkedIn Tumblr Email WhatsApp

    Related Posts

    How to Install PHP 8.2-7.4 on RHEL & CentOS Stream 9

    How to Install MySQL 8.0 on RHEL & CentOS Stream 9

    How to Split Large Archives in Linux using the Command Line

    Add A Comment

    Leave A Reply Cancel Reply

    Advertisement
    Recent Posts
    • How to Install PHP 8.2-7.4 on RHEL & CentOS Stream 9
    • How to Install MySQL 8.0 on RHEL & CentOS Stream 9
    • How to Split Large Archives in Linux using the Command Line
    • System.out.println() Method in Java: A Beginner’s Guide
    • Split Command in Linux With Examples (Split Large Files)
    Facebook Twitter Instagram Pinterest
    © 2023 Tecadmin.net. All Rights Reserved | Terms  | Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.