https://halfface.se/wiki/index.php?action=history&feed=atom&title=LetsEncrypt 2026-04-19T08:56:08Z Revision history for this page on the wiki MediaWiki 1.43.1 https://halfface.se/wiki/index.php?title=LetsEncrypt&diff=12795&oldid=prev 2017-01-06T23:10:39Z

<p></p> <p><b>New page</b></p><div>Lets encrypt for Fedora. https://fedoramagazine.org/letsencrypt-now-available-fedora/<br /> <br /> =Had to remove manually installed python modules=<br /> \rm -r /usr/lib/python2.7/site-packages/requests/packages/*<br /> <br /> =Install letsencrypt= <br /> sudo dnf -y install letsencrypt<br /> <br /> =manually create certs. Verify that all goes well=<br /> letsencrypt --text --email anden@halfface.se \<br /> --domains www.halfface.se,halfface.se,ldap.halfface.se \<br /> --agree-tos --renew-by-default --manual certonly<br /> <br /> =Automated updates. Web root verification=<br /> letsencrypt --text --renew-by-default --email anden@halfface.se \<br /> --domains www.halfface.se,halfface.se,ldap.halfface.se \<br /> --agree-tos --webroot --webroot-path /var/www/html/www-halfface certonly<br /> <br /> =Fix selinux.=<br /> semanage fcontext -a -t cert_t &#039;/etc/letsencrypt/(archive|live)(/.*)?&#039;<br /> restorecon -Rv /etc/letsencrypt<br /> <br /> =Link to certs in proper location.=<br /> ln -s /etc/letsencrypt/live/www.halfface.se/cert.pem /etc/pki/tls/certs/www.halfface.se.crt<br /> ln -s /etc/letsencrypt/live/www.halfface.se/chain.pem /etc/pki/tls/certs/www.halfface.se.chain.crt<br /> ln -s /etc/letsencrypt/live/www.halfface.se/privkey.pem /etc/pki/tls/private/www.halfface.se.key<br /> <br /> =Add correct paths to certs in http config.=<br /> SSLCertificateFile /etc/pki/tls/certs/www.halfface.se.crt<br /> SSLCertificateKeyFile /etc/pki/tls/private/www.halfface.se.key<br /> SSLCertificateChainFile /etc/pki/tls/certs/www.halfface.se.chain.crt<br /> <br /> =Remove old certs.=<br /> rm -r /etc/httpd/ssl/<br /> <br /> =restart to take effect.=<br /> systemctl restart httpd</div>

Ekaanbj