Differences

This shows you the differences between two versions of the page.

--- internet:security:ssl_cert_letsencrypt [2019/03/13 14:36]
gcooper
+++ internet:security:ssl_cert_letsencrypt [2020/08/09 12:21] (current)
gcooper
@@ Line 1: / Line 1: @@
 ====== Let's Encrypt Free SSL Certificates ======
+See also **[[internet:security:ssl_cert_letsencrypt_zimbra|Using LetsEncrypt SSL Certificates with Zimbra]]**
 **Home Page**: https://letsencrypt.org/certificates/
@@ Line 6: / Line 8: @@
 **Webmin**: https://doxfer.webmin.com/Webmin/Let's_Encrypt
+===== DNS =====
+CAA records authorize SSL certificate issuance by certain certificate authorities.
+For Virtualmin managed domains, manually enter something like:
+<file>
+hostname.domain.tld.	IN	CAA	0 issue "letsencrypt.org"
+</file>
 ===== SSL Certificate Testing =====
@@ Line 112: / Line 124: @@
 https://serverfault.com/questions/750902/how-to-use-lets-encrypt-dns-challenge-validation
-:!: for testing, add ''--staging''.
+https://certbot.eff.org/docs/using.html#manual
+:!: Add this for testing: <file>--staging</file>
 <file>
@@ Line 118: / Line 132: @@
 certbot -d hostname.yourdomain.tld --manual --preferred-challenges dns certonly
+certbot renew --dry-run
 certbot certificates
@@ Line 137: / Line 153: @@
 {{ :internet:security:letsencrypt_webmin_ssl_settings.png?750 |Resultant Webmin SSL Settings}}
+===== Log Rotation =====
+:!: Certbot has its own log rotation.
+**/etc/logrotate.d/letsencrypt**
+<file>
+/var/log/letsencrypt/letsencrypt.log {
+  daily
+  rotate 0
+  firstaction
+    /usr/bin/find /var/log/letsencrypt/ -name "letsencrypt.log.*" -mtime +100 -delete
+  endscript
+  nocreate
+  missingok
+  notifempty
+}
+</file>
+Test:
+<file>
+ll /var/log/letsencrypt/   #before
+logrotate -f /etc/logrotate.d/letsencrypt
+ll /var/log/letsencrypt/   #after
+</file>
 ===== Troubleshooting =====

Virtual Architects Support Wiki

User Tools

Site Tools

Differences

Page Tools