Difference between revisions of "SBN - Copying Certs"
Jump to navigation
Jump to search
| Line 3: | Line 3: | ||
In this example, | In this example, | ||
| − | * '''Machine.Domain.TLD''' is the full name of the machine you're copying the certs to. | + | *'''Machine.Domain.TLD''' is the full name of the machine you're copying the certs to. |
| − | * '''WebServer''' is the name of your web/proxy server | + | *'''WebServer''' is the name of your web/proxy server |
<br /> | <br /> | ||
| Line 10: | Line 10: | ||
#Install certbot on the machine you're putting the certs onto & create the <code>live</code> directory where the certs will live. | #Install certbot on the machine you're putting the certs onto & create the <code>live</code> directory where the certs will live. | ||
#*<code>ssh Machine</code> | #*<code>ssh Machine</code> | ||
| − | #*<code>sudo apt | + | #*<code>sudo apt install certbot</code> |
#*<code>sudo mkdir /etc/letsencrypt/live</code> | #*<code>sudo mkdir /etc/letsencrypt/live</code> | ||
#Sign into your proxy server & make sure you can SSH into the target machine from there. | #Sign into your proxy server & make sure you can SSH into the target machine from there. | ||
Revision as of 12:03, 12 July 2020
To copy certs for a machine from your proxy server (Replace Machine.Domain.TLD with the proper name for your machine...) (&, of course, user & WebServer may need adjusting...)
In this example,
- Machine.Domain.TLD is the full name of the machine you're copying the certs to.
- WebServer is the name of your web/proxy server
- Install certbot on the machine you're putting the certs onto & create the
livedirectory where the certs will live.ssh Machinesudo apt install certbotsudo mkdir /etc/letsencrypt/live
- Sign into your proxy server & make sure you can SSH into the target machine from there.
ssh webserverssh Machine- then exit when you've succeeded (this tells webserver how to get there...)
- Then you can use scp to copy the certs.
sudo scp -r /etc/letsencrypt/live/Machine.Domain.TLD user@Machine:~
- Then ssh back into the proxy server & move the certs into their proper location
sudo mv Machine.Domain.TLD /etc/letsencrypt/live/
