Added documentation for acme.sh

This commit is contained in:
ckykenken 2019-01-16 13:38:16 +08:00 committed by Michael (Parker) Parker
parent 6f7d862510
commit 19955f55b7

View File

@ -1,6 +1,8 @@
# Creating SSL Certificates
This tutorial briefly covers creating new SSL certificates for your panel and daemon using LetsEncrypt™. To
begin, we will be installing certbot, a simple script that will automatically renew our certificates and allow much
This tutorial briefly covers creating new SSL certificates for your panel and daemon using LetsEncrypt™.
## Method 1: Using Certbot
To begin, we will be installing certbot, a simple script that will automatically renew our certificates and allow much
cleaner creation of them. The command below is for Ubuntu distributions, but you can always check [Certbot's official
site](https://certbot.eff.org/) for installation instructions.
@ -10,7 +12,7 @@ sudo apt update
sudo apt install certbot
```
## Creating a Certificate
### Creating a Certificate
After installing certbot, we need to then generate a certificate. There are a couple ways to do that, but the
easiest is to have letsencrypt spin-up a temporary web-server to do this. In order for this to work, you will
first need to stop NGINX or Apache.
@ -26,10 +28,10 @@ that you've already configured the webservers to use SSL).
certbot certonly -d example.com
```
## Auto Renewal
### Auto Renewal
You'll also probably want to configure automatic renewal by adding the command below to a cronjob that runs daily.
You can add the command below to that crontab. For advanced users, we suggest installing and using [acme.sh](https://acme.sh)
which provides more options, and is much more powerful than certbot.
which provides more options (see below), and is much more powerful than certbot.
``` text
certbot renew