[kwlug-disc] Automatic renewal of wildcard certs

Mikalai Birukou mb at 3nsoft.com
Wed Feb 27 16:31:26 EST 2019


Use certbot ( https://certbot.eff.org/ ). Go onto official site, docs 
are amazing.

You'll have two questions for you setup:

1) how to serve acme responses.

2) what post-renew hook scripts do you add to deploy new certs.

Again, docs are wonderful. I just want to direct your inquiry with these 
most important steps.

If you have a single server, you may be able to find a certbot 
attachment. If seen it for nginx, for haproxy, apache. These essentially 
do setup questions 1 and 2 for you.

If you have multiple TLS entry points with the same certificate, you'll 
need setup certbot yourself.

On 2019-02-27 2:34 p.m., Yas Adem wrote:

> Thanks for response Paul.  Using letsencrypt.
>
> Regards
> Yasin
>
> On Wed, Feb 27, 2019, 2:18 PM Paul Nijjar via kwlug-disc, 
> <kwlug-disc at kwlug.org <mailto:kwlug-disc at kwlug.org>> wrote:
>
>
>     I do not have such experience, but just to clarify: is this with Let's
>     Encrypt, or are you using another certificate authority?
>
>     - Paul
>
>     On Wed, Feb 27, 2019 at 10:11:56AM -0500, Yas Adem wrote:
>     > Hi Everyone,
>     >
>     > First time posting question in kwlug group. Wondering if anyone
>     have any
>     > experience enabling automatic renewal of wildcard certificate?
>     Your help
>     > much appreciated.
>     >
>
>     _______________________________________________
>     kwlug-disc mailing list
>     kwlug-disc at kwlug.org <mailto:kwlug-disc at kwlug.org>
>     http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>
>
> _______________________________________________
> kwlug-disc mailing list
> kwlug-disc at kwlug.org
> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
-- 
Mikalai Birukou
CEO | 3NSoft Inc.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20190227/9c69158c/attachment.html>


More information about the kwlug-disc mailing list