diff --git a/index.html b/index.html index c3b08bb..e59a87b 100644 --- a/index.html +++ b/index.html @@ -1,10 +1,10 @@ - + - +

-
+

NOTE: This website is for people who know how to generate certificate signing - requests (CSRs)! If you're not familiar with how to do this, please use the - official Let's Encrypt client + requests (CSRs)! If you’re not familiar with how to do this, please use the + official Let’s Encrypt client that can automatically issue and install https certificates for you. This website is designed for people who know what they are doing and just want to get their free https certificate. -

+


@@ -93,13 +100,17 @@

Step 1: Account Info

-
- Let's Encrypt requires that you register an account email and public key before +

+ Let’s Encrypt requires that you register an account email and public key before issuing a certificate. The email is so that they can contact you if needed, and the public key is so you can securely sign your requests to issue/revoke/renew your certificates. Keep your account private key secret! Anyone who has it - can impersonate you when making requests to Let's Encrypt! -

+ can impersonate you when making requests to Let’s Encrypt! +

+

Renewal Note

+

+ If you’re renewing a certificate, use the same account email and public key as you did for the initial certificate request. +


@@ -113,7 +124,7 @@

Step 1: Account Info

How to generate a new account keypair using openssl:
  1. - Generate an account private key if you don't have one:
    + Generate an account private key if you don’t have one:
    (KEEP ACCOUNT.KEY SECRET!)
    openssl genrsa 4096 > account.key
  2. @@ -127,7 +138,7 @@

    Step 1: Account Info


- +
@@ -141,12 +152,16 @@

Step 1: Account Info

Step 2: Certificate Signing Request

-
- This is the certificate signing request (CSR) that you send to Let's Encrypt +

+ This is the certificate signing request (CSR) that you send to Let’s Encrypt in order to issue you a signed certificate. It contains the website domains you want to issue certs for and the public key of your TLS private key. Keep your TLS private key secret! Anyone who has it can man-in-the-middle your website! -

+

+

Renewal Note

+

+ If you’re renewing a certificate, you can use the same CSR as you did for the original request, or create a new one. +

@@ -155,16 +170,16 @@

Step 2: Certificate Signing Request

How to generate a new Certificate Signing Request (CSR):
  1. - Generate a TLS private key if you don't have one:
    + Generate a TLS private key if you don’t have one:
    (KEEP DOMAIN.KEY SECRET!)
    openssl genrsa 4096 > domain.key
  2. - Generate a CSR for your the domains you want certs for:
    - (replace "foo.com" with your domain)
    + Generate a CSR for your the domains you want certs for:
    + (replace “foo.com” with your domain)
    Linux:
    -#change "/etc/ssl/openssl.cnf" as needed:
    +#change “/etc/ssl/openssl.cnf” as needed:
     #  Debian: /etc/ssl/openssl.cnf
     #  RHEL and CentOS: /etc/pki/tls/openssl.cnf
     #  Mac OSX: /System/Library/OpenSSL/openssl.cnf
    @@ -180,7 +195,7 @@ 

    Step 2: Certificate Signing Request


- +
@@ -193,15 +208,15 @@

Step 2: Certificate Signing Request

-

Step 3: Sign API Requests (waiting...)

+

Step 3: Sign API Requests (waiting…)

@@ -348,25 +367,25 @@

Domain: foobar.com

ssh ubuntu@foobar.com
  • - Create the ".well-known/acme-challenge/" directory - in your webserver's static file path:
    + Create the “.well-known/acme-challenge/” directory + in your webserver’s static file path:
    mkdir -p /path/to/www/.well-known/acme-challenge/
  • - Add the static folder to your webserver's config - (if you haven't already):
    -
    server {...
    + Add the static folder to your webserver’s config + (if you haven’t already):
    +
    server {…
  • Create the file with the necessary contents:
    -
    echo ...
    +
    echo …
  • - Open the link in a new window to make sure it's working:
    + Open the link in a new window to make sure it’s working:
  • - Click "I'm now serving this file..." button when the file is being + Click “I’m now serving this file…” button when the file is being served on your domain.
  • @@ -378,7 +397,7 @@

    Domain: foobar.com

    - +
    @@ -391,36 +410,36 @@

    Domain: foobar.com

    -

    Step 5: Install Certificate (waiting...)

    +

    Step 5: Install Certificate (waiting…)