sertifikāti

[LvSnor]

Tehniski ir tā ka mūsdienās vajag https protokolu. Un visiem kas mēģina likt ar rokām sertifikātus, tas var izlikties kā nebeidzams murgs. Bet pateicoties Let's Encrypt - Free SSL/TLS Certificates letsencrypt.org tas ir kluvis pavisam īpaši viegli pateicoties https://certbot.eff.org/ un viņa python pieslēgumam. Un Voila kubele.lv ir https://kubele.lv

Kods:

apt install certbot python-certbot-apache;
certbot --apache

vai pa vienam domainam

Kods:

certbot --apache -d your-domain.com -d www.your-domain.com

un tad laiku pa laikam nedrīkst aizmirst ievadīt cron darbu, kas atjauno sertifikātu, ja tā lietošanas laiks ir zem 30 dienām.

Kods:

--renew-hook "systemctl reload apache2"

iekš cron

Kods:

/etc/cron.d/certbot

kurā ir sekojošais ieraksts:
/etc/cron.d/certbot

Kods:

0 */12 * * * root test -x /usr/bin/certbot -a \! -d /run/systemd/system && perl -e 'sleep int(rand(43200))' && certbot -q renew --renew-hook "systemctl reload apache2"

Lai pārbaudītu vari izmantot

Kods:

--dry-run

ar slēdzīti:

Kods:

certbot renew --dry-run

Un ja nav kļūdas, tas nozīme, ka viss strādā lieliski.

Iedvesmojos no: https://linuxhint.com/setup_free_ssl_cer...he_debian/

[LvSnor]

Deploying Let's Encrypt's New Issuance Chains

Apr 12, 2024 • Kruti Sutaria

On Thursday, June 6th, 2024, we will be switching issuance to use our new intermediate certificates. Simultaneously, we are removing the DST Root CA X3 cross-sign from our API, aligning with our strategy to shorten the Let’s Encrypt chain of trust. We will begin issuing ECDSA end-entity certificates from a default chain that just contains a single ECDSA intermediate, removing a second intermediate and the option to issue an ECDSA end-entity certificate from an RSA intermediate. The Let’s Encrypt staging environment will make an equivalent change on April 24th, 2024.
https://letsencrypt.org/2024/04/12/chang...nce-chains