Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

--- linux:let_s_encrypt [2015/12/11 07:22] – move
+++ linux:let_s_encrypt [2020/02/05 10:48] (aktuell) – move
@@ Zeile 1: / Zeile 1: @@
 ====== Let's encrypt ======
-{{wp>Letsencrypt}}
 ===== ACME-Client =====
 ==== Installieren ====
-> git clone https://github.com/letsencrypt/letsencrypt
+<code>
+git clone https://github.com/letsencrypt/letsencrypt
+</code>
 ==== Update ====
-> git pull origin
+<code>git pull origin</code>
 ==== Zertifikate abholen (nur speichern) ====
@@ Zeile 34: / Zeile 33: @@
 Dabei im Webroot anlegen (Beispiel);
-> mkdir -p .well-known/acme-challenge
+<code>
-> cd .well-known/acme-challenge/
+mkdir -p .well-known/acme-challenge
-> echo -n "Inhalt" > Datei
+cd .well-known/acme-challenge/
+echo -n "Inhalt" > Datei
+</code>
+==== Konfigurationsdatei benutzen ====
+<code>./letsencrypt-auto --config /etc/letsencrypt/cli.ini</code>
+cli.ini
+<code bash>
+# This is an example of the kind of things you can do in a configuration file.
+# All flags used by the client can be configured here. Run Let's Encrypt with
+# "--help" to learn more about the available options.
+# Use a 4096 bit RSA key instead of 2048
+rsa-key-size = 4096
+# Uncomment and update to register with the specified e-mail address
+email = me@localhost
+# Uncomment and update to generate certificates for the specified
+# domains.
+domains = local.localdomain
+# Uncomment to use a text interface instead of ncurses
+# text = True
+# Uncomment to use the standalone authenticator on port 443
+authenticator = standalone
+standalone-supported-challenges = tls-sni-01
+# Uncomment to use the webroot authenticator. Replace webroot-path with the
+# path to the public_html / webroot folder being served by your web server.
+# authenticator = webroot
+# webroot-path = /usr/share/nginx/html
+</code>
+==== Automatisch erneuern (kein Prompt) ====
+<code>--renew-by-default</code>
+<code>./letsencrypt-auto  certonly --renew-by-default --config /etc/letsencrypt/cli.ini</code>
 ===== Zertifikate einbinden (manuell) =====
@@ Zeile 56: / Zeile 95: @@
 > SSLCertificateFile /etc/letsencrypt/live/ho2e.de/fullchain.pem
 > SSLCertificateKeyFile /etc/letsencrypt/live/ho2e.de/privkey.pem
+===== Siehe auch =====
+  * [[SSL]]
+  * [[OpenSSL]]
 ===== Weblinks =====