SBN - Copying Certs - Revision history

Tinker at 16:38, 16 August 2021

2021-08-16T16:38:50Z

Tinker at 05:51, 23 February 2021

2021-02-23T05:51:19Z

Tinker at 06:43, 17 July 2020

2020-07-17T06:43:03Z

Tinker at 06:15, 17 July 2020

2020-07-17T06:15:21Z

Tinker at 17:34, 12 July 2020

2020-07-12T17:34:51Z

Tinker at 17:12, 12 July 2020

2020-07-12T17:12:41Z

Tinker at 16:26, 12 July 2020

2020-07-12T16:26:03Z

Tinker at 16:22, 12 July 2020

2020-07-12T16:22:55Z

Tinker at 16:03, 12 July 2020

2020-07-12T16:03:52Z

Tinker at 07:24, 11 July 2020

2020-07-11T07:24:25Z

@@ Line 10: / Line 10: @@
 #<s>Install certbot on the machine you're putting the certs onto & create the <code>live</code> directory where the certs will live. (Unverified Note: You might not actually need to install certbot on the proxied machine.</s>  You '''CAN''' just create the /etc/letsencrypt directory, then the live directory... (You can ALSO make that directory writeable by a normal user which allows for using SCP to insert the certs directly.)
 #*<code>ssh  Machine</code>
-#*<code>sudo apt install certbot</code>
+#*<code>sudo mkdir /etc/letsencrypt</code>
 #*<code>sudo mkdir /etc/letsencrypt/live</code>
 #Sign into your proxy server & make sure you can SSH into the target machine from there.
 #*<code>ssh webserver</code>

@@ Line 8: / Line 8: @@
 <br />
-#Install certbot on the machine you're putting the certs onto & create the <code>live</code> directory where the certs will live. (Unverified Note: You might not actually need to install certbot on the proxied machine.  You may be able to just create the /etc/letsencrypt directory, then the live directory...)
+#<s>Install certbot on the machine you're putting the certs onto & create the <code>live</code> directory where the certs will live. (Unverified Note: You might not actually need to install certbot on the proxied machine.</s>  You '''CAN''' just create the /etc/letsencrypt directory, then the live directory... (You can ALSO make that directory writeable by a normal user which allows for using SCP to insert the certs directly.)
 #*<code>ssh  Machine</code>
 #*<code>sudo apt install certbot</code>
@@ Line 17: / Line 17: @@
 #**then exit when you've succeeded (this tells '''webserver''' how to get there...)
 #Then you can use '''scp''' to copy the certs.
-#*<code>sudo scp -r /etc/letsencrypt/live/Machine.Domain.TLD user@Machine:~</code>
+#*<code><s>sudo scp -r /etc/letsencrypt/live/Machine.Domain.TLD user@Machine:~</s></code>
-#Then ssh back into the target machine & move the certs into their proper location
+#*<code>sudo scp -r /etc/letsencrypt/live/Machine.Domain.TLD user@Machine:/etc/letsencrypt/live</code>
-#*<code>sudo mv Machine.Domain.TLD /etc/letsencrypt/live/</code>
+#Then ssh back into the target machine <s>& move the certs into their proper location</s>
 #And tell Apache about the certs
 #*<code>sudo vi /etc/apache2/sites-available/default-ssl.conf</code>

@@ Line 25: / Line 25: @@
   SSLCertificateFile /etc/letsencrypt/live/<code>Machine.Domain.TLD</code>/fullchain.pem
   SSLCertificateKeyFile /etc/letsencrypt/live/<code>Machine.Domain.TLD</code>/privkey.pem
 Restart Apache:
 *<code>sudo systemctl restart apache2</code>

@@ Line 18: / Line 18: @@
 #Then you can use '''scp''' to copy the certs.
 #*<code>sudo scp -r /etc/letsencrypt/live/Machine.Domain.TLD user@Machine:~</code>
-#Then ssh back into the proxy server & move the certs into their proper location
+#Then ssh back into the target machine & move the certs into their proper location
 #*<code>sudo mv Machine.Domain.TLD /etc/letsencrypt/live/</code>
 #And tell Apache about the certs

@@ Line 8: / Line 8: @@
 <br />
-#Install certbot on the machine you're putting the certs onto & create the <code>live</code> directory where the certs will live.
+#Install certbot on the machine you're putting the certs onto & create the <code>live</code> directory where the certs will live. (Unverified Note: You might not actually need to install certbot on the proxied machine.  You may be able to just create the /etc/letsencrypt directory, then the live directory...)
 #*<code>ssh  Machine</code>
 #*<code>sudo apt install certbot</code>

← Older revision		Revision as of 16:26, 12 July 2020
Line 25:		Line 25:
	SSLCertificateFile /etc/letsencrypt/live/www.tinkernet.ca/fullchain.pem		SSLCertificateFile /etc/letsencrypt/live/www.tinkernet.ca/fullchain.pem
	SSLCertificateKeyFile /etc/letsencrypt/live/www.tinkernet.ca/privkey.pem		SSLCertificateKeyFile /etc/letsencrypt/live/www.tinkernet.ca/privkey.pem
		+	Restart Apache:
		+
		+	* <code>sudo systemctl restart apache2</code>

← Older revision		Revision as of 16:22, 12 July 2020
Line 20:		Line 20:
	#Then ssh back into the proxy server & move the certs into their proper location		#Then ssh back into the proxy server & move the certs into their proper location
	#*<code>sudo mv Machine.Domain.TLD /etc/letsencrypt/live/</code>		#*<code>sudo mv Machine.Domain.TLD /etc/letsencrypt/live/</code>
		+	#And tell Apache about the certs
		+	#*<code>sudo vi /etc/apache2/sites-available/default-ssl.conf</code>
		+
		+	SSLCertificateFile /etc/letsencrypt/live/www.tinkernet.ca/fullchain.pem
		+	SSLCertificateKeyFile /etc/letsencrypt/live/www.tinkernet.ca/privkey.pem

@@ Line 3: / Line 3: @@
 In this example,
-* '''Machine.Domain.TLD''' is the full name of the machine you're copying the certs to.
+*'''Machine.Domain.TLD''' is the full name of the machine you're copying the certs to.
-* '''WebServer''' is the name of your web/proxy server
+*'''WebServer''' is the name of your web/proxy server
 <br />
@@ Line 10: / Line 10: @@
 #Install certbot on the machine you're putting the certs onto & create the <code>live</code> directory where the certs will live.
 #*<code>ssh  Machine</code>
-#*<code>sudo apt in  all certbot</code>
+#*<code>sudo apt install certbot</code>
 #*<code>sudo mkdir /etc/letsencrypt/live</code>
 #Sign into your proxy server & make sure you can SSH into the target machine from there.