github-repos/acme.sh
1
0
Fork 0
mirror of https://github.com/acmesh-official/acme.sh.git synced 2025-03-26 19:00:11 +08:00
Code Issues Packages Projects Releases Wiki Activity

Updated Deploy ssl certs to apache server (markdown)

jadrevenge 2017-09-20 10:25:32 +01:00
parent 033cf896bb
commit 5e8aca81d3
1 changed files with 34 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
Deploy-ssl-certs-to-apache-server.md

@ -1 +1,34 @@
TODO
## 1. run acme.sh to copy the certificates to the correct location on the disk
### 1.1) create a sensible directory to store your apache certificates
I chose /etc/apache2/2.2/ssl
```
mkdir -p /etc/apache2/2.2/ssl
```
### 1.2) run acme.sh
A few notes:
* the parameters are stored in the .acme.sh configuration file, so get it right for your system as this file is read when the cron job runs
* "reloadcmd" is dependent on your operating system, system V Linux systems use the command "service apache2 force-reload", Solaris based systems use "svcadm restart apache22" or similar
```
acme.sh --install-cert -d online.domain.com \
--cert-file /etc/apache2/2.2/ssl/online.domain.com-cert.pem \
--key-file /etc/apache2/2.2/ssl/online.domain.com-key.pem \
--fullchain-file /etc/apache2/2.2/ssl/letsencrypt.pem \
--reloadcmd "service apache2 force-reload"
```
## 2. Set up your httpd.conf
There are so many ways to do this, it would take a long list to write every variant, however the specific codes you will need to set in your httpd.conf (or ssl.conf, or httpd-ssl.conf) are:
```
SSLCertificateFile /etc/apache2/2.2/ssl/online.domain.com-cert.pem
SSLCertificateKeyFile /etc/apache2/2.2/ssl/online.domain.com-key.pem
SSLCertificateChainFile "/etc/apache2/2.2/ssl/letsencrypt.pem"
SSLCACertificatePath "/etc/apache2/2.2/ssl/"
SSLCACertificateFile "/etc/apache2/2.2/ssl/letsencrypt.pem"
```