diff --git a/index.html b/index.html index c3b08bb..e59a87b 100644 --- a/index.html +++ b/index.html @@ -1,10 +1,10 @@ - + - +
-NOTE: This website is for people who know how to generate certificate signing - requests (CSRs)! If you're not familiar with how to do this, please use the - official Let's Encrypt client + requests (CSRs)! If you’re not familiar with how to do this, please use the + official Let’s Encrypt client that can automatically issue and install https certificates for you. This website is designed for people who know what they are doing and just want to get their free https certificate. -
+ Let’s Encrypt requires that you register an account email and public key before issuing a certificate. The email is so that they can contact you if needed, and the public key is so you can securely sign your requests to issue/revoke/renew your certificates. Keep your account private key secret! Anyone who has it - can impersonate you when making requests to Let's Encrypt! -
+ If you’re renewing a certificate, use the same account email and public key as you did for the initial certificate request. +
openssl genrsa 4096 > account.key
+ This is the certificate signing request (CSR) that you send to Let’s Encrypt in order to issue you a signed certificate. It contains the website domains you want to issue certs for and the public key of your TLS private key. Keep your TLS private key secret! Anyone who has it can man-in-the-middle your website! -
+ If you’re renewing a certificate, you can use the same CSR as you did for the original request, or create a new one. +
openssl genrsa 4096 > domain.key
-#change "/etc/ssl/openssl.cnf" as needed: +#change “/etc/ssl/openssl.cnf” as needed: # Debian: /etc/ssl/openssl.cnf # RHEL and CentOS: /etc/pki/tls/openssl.cnf # Mac OSX: /System/Library/OpenSSL/openssl.cnf @@ -180,7 +195,7 @@Step 2: Certificate Signing Request
ssh ubuntu@foobar.com
mkdir -p /path/to/www/.well-known/acme-challenge/
server {...
+ Add the static folder to your webserver’s config
+ (if you haven’t already):server {…
echo ...+
echo …