Shulou(Shulou.com)06/02 Report--

How does Let's Encrypt protect Apache on Ubuntu18.04 and 16.04 LTS? Many novices are not very clear about this. In order to help you solve this problem, the following editor will explain it in detail. People with this need can come and learn. I hope you can gain something.

Let's Encrypt is a certification authority (CA) that provides SSL/TLS certificates for security enhancement free of charge. CA-signed SSL certificates can be generated for any domain or subdomain at no cost and can be used on the server. It also provides an option to automatically update SSL certificates for long-term use.

Step 1: first condition

Before you begin this task, assume that you have:

Use sudo privilege shell to access and run the Ubuntu system. The domain name is registered and points to the public IP address of the server. In this article, we use example.com and www.example.com, which points to our server. Run the Apache2 server, configure VirtualHost for example.com and www.example.com for port 80.

Step 2: install the let's encrypt client

You can download the certbot auto-let's encrypt client and save it in the / usr/sbin directory. Use the following command to do this.

$sudo wget https://dl.eff.org/certbot-auto-O / usr/sbin/certbot-auto$ sudo chmod axix / usr/sbin/certbot-auto

Step 3: issue SSL from Let's Encrypt

Let's encrypt automates domain validation (DV) in multiple challenges. Once the certification authority (CA) has verified the authenticity of your domain, a SSL certificate will be issued.

You don't need to create a virtualhost for ssl/https, use let's encrypt to create it. = only need to create a virtual host for port 80.

$sudo certbot-auto-apache-d example.com-d www.example.com

The above command prompts for an email address that is used to send email alerts related to SSL renewal and expiration. In addition, there are a few more questions to ask. When finished, it will issue a SSL certificate and create a new virtual host profile on your system.

Step 4: configure SSL automatic renewal

Finally, configure the following jobs on the server crontab to automatically renew the SSL certificate as needed.

Is it helpful for you to read the above content after reading 02 * sudo certbot-auto-Q renew? If you want to know more about the relevant knowledge or read more related articles, please follow the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.