2016-03-18 Lets Encrypt

Another day, another TLS certificate from the friendly folks at Let's Encrypt! I'm running Debian 8.2 (Jessie) so I took the following steps:

Add the following lines to /etc/apt/sources.list

 # Backports repository
 deb http://httpredir.debian.org/debian jessie-backports main contrib non-free

Update the lot, then install the client:

 $ sudo apt-get update
 $ sudo apt-get install -t jessie-backports letsencrypt

I'm running Apache and had SSL configured already. So I ran the client:

 $ sudo letsencrypt certonly --webroot -w /var/www/vankuik/www/ -d www.vankuik.nl

Then updated the domain configuration to the following lines:

 SSLCertificateFile    /etc/letsencrypt/live/www.vankuik.nl/cert.pem
 SSLCertificateKeyFile /etc/letsencrypt/live/www.vankuik.nl/privkey.pem
 SSLCertificateChainFile /etc/letsencrypt/live/www.vankuik.nl/chain.pem

Restart Apache:

 $ sudo service apache2 restart

And then reload in your browser. Et voilĂ , the results are in:

letsencrypt.png

See also 2016-05-16 Renewing letsencrypt certificates via crontab.