Instalati clientul Acme.sh generati un certificat Let’s Encrypt pe Nginx – Ubuntu 18.04

Downloadati si instalati Acme.sh.

sudo mkdir /etc/letsencrypt
git clone https://github.com/Neilpang/acme.sh.git
cd acme.sh
sudo ./acme.sh --install --home /etc/letsencrypt --accountemail [email protected]
cd ~

Verificati versiunea

/etc/letsencrypt/acme.sh --version

Obtineti certificatele  RSA si ECDSA pentru ex domeniu.tld.

# RSA 2048
sudo /etc/letsencrypt/acme.sh --issue --home /etc/letsencrypt -d domeniu.tld --webroot /usr/share/nginx/html --reloadcmd "sudo systemctl reload nginx.service" --accountemail [email protected] --ocsp-must-staple --keylength 2048
# ECDSA/ECC P-256
sudo /etc/letsencrypt/acme.sh --issue --home /etc/letsencrypt -d domeniu.tld --webroot /usr/share/nginx/html --reloadcmd "sudo systemctl reload nginx.service" --accountemail [email protected] --ocsp-must-staple --keylength ec-256 

Dupa ce ati executat comenzile de mai sus, certificatele le puteti gasi in directoarele:

• For RSA: the /etc/letsencrypt/domeniu.tld directory.
• For ECC/ECDSA: the /etc/letsencrypt/domeniu.tld_ecc directory.

Dupa ce obtineti certificate Let’s Encrypt este necesar sa le configurati pe server. .