Editing Certbot

<code>certbot</code><ref>https://certbot.eff.org/docs/intro.html</ref> is a fully-featured, extensible client for the Let’s Encrypt CA (or any other CA that speaks the [[ACME]] protocol defined in 2015-2016) that can automate the tasks of obtaining certificates and configuring webservers to use them. This client runs on Unix-based operating systems.


== Installation ==
* Ubuntu: <code>[[apt install]] certbot</code>
* [[macOS]]: <code>[[brew install]] certbot</code>

You can additionally install [[Plugins (certbot)|certbot plugins]]:
* <code>python3-certbot-apache</code>
* <code>python3-certbot-dns-cloudflare</code>
* <code>[[python3-certbot-dns-digitalocean]]</code>
* <code>[[python3-certbot-dns-dnsimple]]</code>
* <code>python3-certbot-dns-google</code>
* <code>python3-certbot-dns-rfc2136</code>
* <code>python3-certbot-dns-route53</code>
* <code>[[python3-certbot-nginx]]</code>

== [[Ubuntu]] files ==
* Binaries: <code>certbot</code> and <code>[[letscrypt]]</code>
* Configuration files:
::<code>[[/etc/letsencrypt/]]</code>
::<code>[[/etc/letsencrypt/renewal/]]</code>
* Renewals configuration: <code>/etc/cron.d/certbot]]</code>
* Logs: <code>[[/var/log/letsencrypt/letsencrypt.log]]</code>

== Examples ==

* <code>[[certbot (command)|certbot]] -d YOUR_DOMAIN_NAME.com --manual --[[preferred-challenges]] [[dns]] [[certonly]]</code>


Create a wildcard certificate:
 [[certbot (command)|certbot]] -d *.YOUR_DOMAIN_NAME.com --manual --preferred-challenges dns certonly



=== Request a certificate ===
* List certificates: <code>[[certbot certificates]]</code>
* <code>[[certbot renew]]</code>
* <code>[[certbot renew --force-renewal]]</code>
* <code>[[certbot delete]] --cert-name YOUR_CERT_NAME</code>
* Changing a Certificdate's Domain<ref>https://certbot.eff.org/docs/using.html#changing-a-certificate-s-domains</ref>: <code>certbot certonly --cert-name example.com -d example.org,www.example.org</code>
* Automated renewals: <code>[[systemctl list-timers]]</code>


* Stop your webserver: 
: <code>[[systemctl]] stop nginx</code>
* <code>[[certbot certonly]] --standalone --preferred-challenges http -d YOUR_DOMAIN_NAME.com</code>
 
 Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA. You may need to use an [[authenticator plugin]] that can do challenges over DNS.


* <code>certbot certonly --standalone --agree-tos --preferred-challenges [[dns]] -d *.YOUR_DOMAIN_NAME.com</code> (You will be asked for information)
 None of the preferred challenges are supported by the selected plugin



<code>[[nginx.conf]]</code>
:<code>[[ssl_certificate]]     /etc/letsencrypt/live/www.example.com/fullchain.pem;</code>
:<code>ssl_certificate_key /etc/letsencrypt/live/www.example.com/privkey.pem;</code>

:<code>openssl x509 -text -noout -in cert.pem</code>



<code>certbot certonly --standalone</code>

 
 [[certbot --nginx]]
 Saving debug log to /var/log/letsencrypt/letsencrypt.log
 The requested nginx plugin does not appear to be installed


== Activities ==
* Read <code>certbot</code> [[certbot changelog]]: https://github.com/certbot/certbot/blob/master/certbot/CHANGELOG.md
* <code>[[certbot renew]]</code>
* [[Certbot renew configuration examples]]
* [[acme.sh]]

== See also ==
* {{certbot cmd}}
* {{certbot}}
* {{CA}}

[[Category:IT Security]]
Latest revision		Your text
Line 1:		Line 1:
−	<code>certbot</code><ref>https://certbot.eff.org/docs/intro.html</ref> is a fully-featured, extensible client for the [[Let’s Encrypt~~]] [[~~CA]] (or any other CA that speaks the [[ACME]] protocol defined in 2015-2016) that can automate the tasks of obtaining certificates and configuring webservers to use them. This client runs on Unix-based operating systems.	+	<code>certbot</code><ref>https://certbot.eff.org/docs/intro.html</ref> is a fully-featured, extensible client for the Let’s Encrypt CA (or any other CA that speaks the [[ACME]] protocol defined in 2015-2016) that can automate the tasks of obtaining certificates and configuring webservers to use them. This client runs on Unix-based operating systems.