Certbot/Let's Encrypt

Stretch backports

First add this to /etc/apt/source.list

deb http://ftp.debian.org/debian stretch-backports main

Installing certbot

sudo apt update
sudo apt install python-certbot-apache -t stretch-backports

Getting the cert

certbot certonly --manual -d *.2li.ch -d 2li.ch --agree-tos \
    --manual-public-ip-logging-ok --preferred-challenges dns \
    --server https://acme-v02.api.letsencrypt.org/directory

Updating the cert

During the process you'll have to update the txt records on the dns server

certbot certonly --manual --cert-name 2li.ch -d *.2li.ch -d 2li.ch --agree-tos \
    --manual-public-ip-logging-ok --preferred-challenges dns \
    --server https://acme-v02.api.letsencrypt.org/directory

Revision #1
Created Tue, Feb 5, 2019 5:42 PM by Andreas Zweili
Updated Tue, Feb 12, 2019 10:33 AM by Andreas Zweili