Difference between revisions of "Let's Encrypt"
Jump to navigation
Jump to search
(→Notes) |
|||
| Line 7: | Line 7: | ||
** [https://letsencrypt.org/documents/LE-SA-v1.0.1-July-27-2015.pdf subscriber agreement] (PDF) | ** [https://letsencrypt.org/documents/LE-SA-v1.0.1-July-27-2015.pdf subscriber agreement] (PDF) | ||
** [https://certbot.eff.org/ CertBot instructions] | ** [https://certbot.eff.org/ CertBot instructions] | ||
| + | *** [https://certbot.eff.org/docs/using.html CertBot User Guide] | ||
===Files=== | ===Files=== | ||
* <code>/etc/letsencrypt/</code> | * <code>/etc/letsencrypt/</code> | ||
| Line 16: | Line 17: | ||
I'm guessing that LE adds a new fileset to <code>archive/{{arg|domain folder}}/</code> for each renewal, and updates the links in <code>live/{{arg|domain name}}</code>. | I'm guessing that LE adds a new fileset to <code>archive/{{arg|domain folder}}/</code> for each renewal, and updates the links in <code>live/{{arg|domain name}}</code>. | ||
| + | |||
==Errors== | ==Errors== | ||
* <code>Error requesting challenges: Error creating new authz :: Validations for new domains are disabled in the V1 API</code> | * <code>Error requesting challenges: Error creating new authz :: Validations for new domains are disabled in the V1 API</code> | ||
Revision as of 19:00, 12 September 2021
|
This page is a seed article. You can help HTYP water it: make a request to expand a given page and/or donate to help give us more writing-hours!
|
Related
Notes
Files
/etc/letsencrypt/- +
archive/- contains one folder per domain- +
<domain folder>/-- folder names are arbitrary, specified inrenewal/files
- +
- +
live/- +
<domain name>- contains links to the current files
- +
- +
renewal/- contains configurations to load (equivalent tosites-enabled/in Apache/Nginx)
- +
I'm guessing that LE adds a new fileset to archive/<domain folder>/ for each renewal, and updates the links in live/<domain name>.
Errors
Error requesting challenges: Error creating new authz :: Validations for new domains are disabled in the V1 API- This is because of the End of Life Plan for ACMEv1
- If you've been using Let's Encrypt via VirtualMin, you may have to actually install CertBot (apparently VirtualMin has its own method of handling renewals but will use CertBot if it is installed) - instructions here, but basically:
apt install socat certbotcertbot register
Links
- certificate lookup: replace
htyp.orgwith any domain. Use %domain for wildcard matches.