2018-03-19 06:15:16 +00:00
|
|
|
# certbot
|
|
|
|
|
|
|
|
|
|
> The Let's Encrypt Agent for automatically obtaining and renewing TLS certificates.
|
|
|
|
|
> Successor to `letsencrypt`.
|
2020-10-19 17:31:50 +01:00
|
|
|
> More information: <https://certbot.eff.org/docs/using.html>.
|
2018-03-19 06:15:16 +00:00
|
|
|
|
|
|
|
|
- Obtain a new certificate via webroot authorization, but do not install it automatically:
|
|
|
|
|
|
|
|
|
|
`sudo certbot certonly --webroot --webroot-path {{path/to/webroot}} --domain {{subdomain.example.com}}`
|
|
|
|
|
|
|
|
|
|
- Obtain a new certificate via nginx authorization, installing the new certificate automatically:
|
|
|
|
|
|
|
|
|
|
`sudo certbot --nginx --domain {{subdomain.example.com}}`
|
|
|
|
|
|
|
|
|
|
- Obtain a new certificate via apache authorization, installing the new certificate automatically:
|
|
|
|
|
|
|
|
|
|
`sudo certbot --apache --domain {{subdomain.example.com}}`
|
|
|
|
|
|
2018-06-26 16:20:04 +01:00
|
|
|
- Renew all Let's Encrypt certificates that expire in 30 days or less (don't forget to restart any servers that use them afterwards):
|
2018-03-19 06:15:16 +00:00
|
|
|
|
|
|
|
|
`sudo certbot renew`
|
|
|
|
|
|
|
|
|
|
- Simulate the obtaining of a new certificate, but don't actually save any new certificates to disk:
|
|
|
|
|
|
|
|
|
|
`sudo certbot --webroot --webroot-path {{path/to/webroot}} --domain {{subdomain.example.com}} --dry-run`
|
|
|
|
|
|
|
|
|
|
- Obtain an untrusted test certificate instead:
|
|
|
|
|
|
|
|
|
|
`sudo certbot --webroot --webroot-path {{path/to/webroot}} --domain {{subdomain.example.com}} --test-cert`
|
