git clone https://github.com/letsencrypt/letsencrypt

git pull origin

Webserver vorher ggf. wg. Verifikation auf Port 80 stoppen und danach wieder starten.

cd letsencrypt
./letsencrypt-auto certonly --rsa-key-size 4096 -d ho2e.de -d www.ho2e.de

cd letsencrypt
./letsencrypt-auto --rsa-key-size 4096 -d fahrrad-wiki.org -d www.fahrrad-wiki.org

./letsencrypt-auto certonly -a manual --rsa-key-size 4096 -d www.ho2e.de -d ho2e.de

Dabei im Webroot anlegen (Beispiel);

mkdir -p .well-known/acme-challenge
cd .well-known/acme-challenge/
echo -n "Inhalt" > Datei

./letsencrypt-auto --config /etc/letsencrypt/cli.ini

cli.ini

# This is an example of the kind of things you can do in a configuration file.
# All flags used by the client can be configured here. Run Let's Encrypt with
# "--help" to learn more about the available options.
 
# Use a 4096 bit RSA key instead of 2048
rsa-key-size = 4096
 
# Uncomment and update to register with the specified e-mail address
email = me@localhost
 
# Uncomment and update to generate certificates for the specified
# domains.
domains = local.localdomain
 
# Uncomment to use a text interface instead of ncurses
# text = True
 
# Uncomment to use the standalone authenticator on port 443
authenticator = standalone
standalone-supported-challenges = tls-sni-01
 
# Uncomment to use the webroot authenticator. Replace webroot-path with the
# path to the public_html / webroot folder being served by your web server.
# authenticator = webroot
# webroot-path = /usr/share/nginx/html

--renew-by-default

./letsencrypt-auto  certonly --renew-by-default --config /etc/letsencrypt/cli.ini

ssl_certificate /etc/letsencrypt/live/ho2e.de/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/ho2e.de/privkey.pem;

SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/ho2e.de/cert.pem
SSLCertificateChainFile /etc/letsencrypt/live/ho2e.de/chain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/ho2e.de/privkey.pem

Ab Apache 2.4.8:

SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/ho2e.de/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/ho2e.de/privkey.pem

• SSL
• OpenSSL

• https://letsencrypt.org/
• https://community.letsencrypt.org/
• Let’s Encrypt client documentation!
• Anleitung für Let's Encrypt: Kostenlose TLS Zertifikate für alle
• Let’s Encrypt Zertifikate im Manual Mode abholen