LetsEncrypt - Revision history

Jan: 7 revisions imported

2016-08-26T19:10:42Z

7 revisions imported

← Older revision

Revision as of 21:10, 26 August 2016

Jan: 1 revision imported

2016-08-26T19:09:41Z

1 revision imported

← Older revision

Revision as of 21:09, 26 August 2016

Jan at 21:37, 25 January 2016

2016-01-25T21:37:36Z

← Older revision		Revision as of 23:37, 25 January 2016
Line 61:		Line 61:
	done		done
	</pre>		</pre>

			= Alternative Client =
			https://github.com/lukas2511/letsencrypt.sh

Jan: /* Proxy vHosts and Rewrite */

2016-01-21T08:37:52Z

Proxy vHosts and Rewrite

← Older revision		Revision as of 10:37, 21 January 2016
Line 28:		Line 28:

	== Proxy vHosts and Rewrite ==		== Proxy vHosts and Rewrite ==
	You may have to keep the Alias URL from being proxied on some vHosts ~~(place before all other relevant ProxyPass lines)~~:		You may have to keep the Alias URL from being proxied on some vHosts: :
	<pre>		<pre>
			# put this line before all other relevant ProxyPass lines
	ProxyPass /.well-known/acme-challenge !		ProxyPass /.well-known/acme-challenge !
	</pre>		</pre>
	or if URLs are being ~~rewritted~~, exclude it ~~(place this line before the RewriteRule that will be used)~~:		or if URLs are being rewritten, exclude it:
	<pre>		<pre>
			# put this line before the RewriteRule that will be used
	RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/.*$		RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/.*$
	</pre>		</pre>

Jan at 08:27, 21 January 2016

2016-01-21T08:27:34Z

← Older revision		Revision as of 10:27, 21 January 2016
Line 1:		Line 1:
	=== Configuration ===		= Configuration =
	'''/etc/letsencrypt/cli.ini'''		'''/etc/letsencrypt/cli.ini'''
	<pre>		<pre>
Line 27:		Line 27:
	Make sure to run ''a2enconf letsencrypt && service apache2 reload'' after creating this config.		Make sure to run ''a2enconf letsencrypt && service apache2 reload'' after creating this config.

	==== Proxy vHosts and Rewrite ====		== Proxy vHosts and Rewrite ==
	You may have to keep the Alias URL from being proxied on some vHosts:		You may have to keep the Alias URL from being proxied on some vHosts (place before all other relevant ProxyPass lines):
	<pre>		<pre>
	ProxyPass /.well-known/acme-challenge !		ProxyPass /.well-known/acme-challenge !
	~~ProxyPass / http://127.0.0.1:81/~~
	~~ProxyPassReverse / http://127.0.0.1:81/~~
	</pre>		</pre>
	or if URLs are being rewritted, exclude it:		or if URLs are being rewritted, exclude it (place this line before the RewriteRule that will be used):
	<pre>		<pre>
	RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/.*$		RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/.*$
	</pre>		</pre>

	=== Renew Script ===		= Renew Script =
	Create the text file that the renew script uses to check if it's being able to access the Alias URL:		Create the text file that the renew script uses to check if it's being able to access the Alias URL:
	<pre>		<pre>

Jan: /* Configuration */

2016-01-21T08:17:01Z

Configuration

← Older revision		Revision as of 10:17, 21 January 2016
Line 14:		Line 14:
	<IfModule mod_alias.c>		<IfModule mod_alias.c>
	Alias /.well-known/acme-challenge /etc/letsencrypt/webroot		Alias /.well-known/acme-challenge /etc/letsencrypt/webroot
			</IfModule>
			<IfModule mod_proxy.c>
			ProxyPass /.well-known/acme-challenge !
	</IfModule>		</IfModule>
	<Directory /etc/letsencrypt/webroot>		<Directory /etc/letsencrypt/webroot>

Jan at 08:15, 21 January 2016

2016-01-21T08:15:59Z

← Older revision		Revision as of 10:15, 21 January 2016
Line 33:		Line 33:
	or if URLs are being rewritted, exclude it:		or if URLs are being rewritted, exclude it:
	<pre>		<pre>
	RewriteCond %{REQUEST_URI} !^/\.well\-known/acme\-challenge/.*$		RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/.*$
	</pre>		</pre>

Jan at 08:07, 21 January 2016

2016-01-21T08:07:16Z

← Older revision		Revision as of 10:07, 21 January 2016
Line 16:		Line 16:
	</IfModule>		</IfModule>
	<Directory /etc/letsencrypt/webroot>		<Directory /etc/letsencrypt/webroot>
	~~Options FollowSymLinks~~
	~~AllowOverride All~~
	Require all granted		Require all granted
	Order deny,allow		Order deny,allow

Jan at 07:40, 21 January 2016

2016-01-21T07:40:26Z

← Older revision		Revision as of 09:40, 21 January 2016
Line 1:		Line 1:
	== Configuration ==		=== Configuration ===
	'''/etc/letsencrypt/cli.ini'''		'''/etc/letsencrypt/cli.ini'''
	<pre>		<pre>
Line 26:		Line 26:
	Make sure to run ''a2enconf letsencrypt && service apache2 reload'' after creating this config.		Make sure to run ''a2enconf letsencrypt && service apache2 reload'' after creating this config.

	=== Proxy vHosts and Rewrite ===		==== Proxy vHosts and Rewrite ====
	You may have to keep the Alias URL from being proxied on some vHosts:		You may have to keep the Alias URL from being proxied on some vHosts:
	<pre>		<pre>
Line 38:		Line 38:
	</pre>		</pre>

	== Renew Script ==		=== Renew Script ===
	Create the text file that the renew script uses to check if it's being able to access the Alias URL:		Create the text file that the renew script uses to check if it's being able to access the Alias URL:
	<pre>		<pre>

Jan: Created page with "== Configuration == '''/etc/letsencrypt/cli.ini'''

 email = info@example.com agree-tos = true authenticator = webroot webroot-path = /etc/letsencrypt/webroot text = true ..."

2016-01-21T07:39:44Z

Created page with "== Configuration == '''/etc/letsencrypt/cli.ini''' <pre> email = info@example.com agree-tos = true authenticator = webroot webroot-path = /etc/letsencrypt/webroot text = true ..."

New page

== Configuration ==
'''/etc/letsencrypt/cli.ini'''
<pre>
email = info@example.com
agree-tos = true
authenticator = webroot
webroot-path = /etc/letsencrypt/webroot
text = true
renew-by-default = true
</pre>

'''/etc/apache2/conf-available/letsencrypt.conf'''
<pre>
<IfModule mod_alias.c>
Alias /.well-known/acme-challenge /etc/letsencrypt/webroot
</IfModule>
<Directory /etc/letsencrypt/webroot>
Options FollowSymLinks
AllowOverride All
Require all granted
Order deny,allow
Allow from all
Satisfy any
</Directory>
</pre>
Make sure to run ''a2enconf letsencrypt && service apache2 reload'' after creating this config.

=== Proxy vHosts and Rewrite ===
You may have to keep the Alias URL from being proxied on some vHosts:
<pre>
ProxyPass /.well-known/acme-challenge !
ProxyPass / http://127.0.0.1:81/
ProxyPassReverse / http://127.0.0.1:81/
</pre>
or if URLs are being rewritted, exclude it:
<pre>
RewriteCond %{REQUEST_URI} !^/\.well\-known/acme\-challenge/.*$
</pre>

== Renew Script ==
Create the text file that the renew script uses to check if it's being able to access the Alias URL:
<pre>
echo 'true' > /etc/letsencrypt/webroot/access.txt
</pre>
And the renew scripts itself:
<pre>
#!/bin/bash

cd /opt/letsencrypt

for DOMAIN in $(ls -1 /etc/letsencrypt/live); do
ACCESS=$(curl -s -k "https://${DOMAIN}/.well-known/acme-challenge/access.txt")
if [ ${ACCESS} == "true" ]; then
echo "Updating certificate for ${DOMAIN}"
SAN=$(openssl x509 -text -noout -in /etc/letsencrypt/live/${DOMAIN}/cert.pem | grep 'DNS:' | tr -d ' ,' | sed 's/DNS:/ -d /g')
/opt/letsencrypt/letsencrypt-auto certonly ${SAN}
else
echo "Can't access /.well-known on ${DOMAIN}"
fi
done
</pre>