Another day, another TLS certificate from the friendly folks at Let's Encrypt! I'm running Debian 8.2 (Jessie) so I took the following steps:
Add the following lines to /etc/apt/sources.list
# Backports repository deb http://httpredir.debian.org/debian jessie-backports main contrib non-free
Update the lot, then install the client:
$ sudo apt-get update $ sudo apt-get install -t jessie-backports letsencrypt
I'm running Apache and had SSL configured already. So I ran the client:
$ sudo letsencrypt certonly --webroot -w /var/www/vankuik/www/ -d www.vankuik.nl
Then updated the domain configuration to the following lines:
SSLCertificateFile /etc/letsencrypt/live/www.vankuik.nl/cert.pem SSLCertificateKeyFile /etc/letsencrypt/live/www.vankuik.nl/privkey.pem SSLCertificateChainFile /etc/letsencrypt/live/www.vankuik.nl/chain.pem
Restart Apache:
$ sudo service apache2 restart
And then reload in your browser. Et voilà, the results are in:
See also 2016-05-16 Renewing letsencrypt certificates via crontab.