« Letsencrypt » : différence entre les versions

Aucun résumé des modifications
Aucun résumé des modifications
 
(9 versions intermédiaires par le même utilisateur non affichées)
Ligne 1 : Ligne 1 :
Sur Debian
== Dans /opt/letsencrypt/ ==
== Dans /opt/letsencrypt/ ==
  ./certbot-auto certonly --webroot --webroot-path /home/letsencrypt/ --domain nomdomaine.fr --domain www.nomdomaine.fr --email qqn@qqch.fr
  ./certbot-auto certonly --webroot --webroot-path /home/letsencrypt/ --domain nomdomaine.fr --domain www.nomdomaine.fr --email qqn@qqch.fr
Ligne 37 : Ligne 38 :




== /etc/letsencrypt/options-ssl-apache.conf ==
== options-ssl-apache.conf ==
/etc/letsencrypt/options-ssl-apache.conf
<pre>
<pre>
# This file contains important security parameters. If you modify this file
# This file contains important security parameters. If you modify this file
Ligne 54 : Ligne 56 :


SSLOptions +StrictRequire
SSLOptions +StrictRequire
</pre>


# Add vhost name to log entries:
== Renew ==
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"" vhost_combined
=== cron.daily ===
LogFormat "%v %h %l %u %t \"%r\" %>s %b" vhost_common
dans /etc/cron.daily/letsencrypt
<pre>
#!/bin/bash
/bin/sh /opt/renew_letsenscrypt.sh
</pre>


#CustomLog /var/log/apache2/access.log vhost_combined
=== renew_letsenscrypt.sh ===
#LogLevel warn
dans /opt/renew_letsenscrypt.sh
#ErrorLog /var/log/apache2/error.log
<pre>
#!/bin/bash
cd /opt/letsencrypt
sudo echo "" > /var/log/certbot-renew.log
sudo ./certbot-auto renew >> /var/log/certbot-renew.log
sudo service apache2 reload
mail -a "From: cron letsencrypt <contact@nomdomaine.fr>" -s "CERTBOT Renewals nomdomaine nomdomaine2" qqn@qqch.fr < /var/log/certbot-renew.log
exit 0
</pre>


# Always ensure Cookies have "Secure" set (JAH 2012/1)
== Test check SSL ==
#Header edit Set-Cookie (?i)^(.*)(;\s*secure)??((\s*;)?(.*)) "$1; Secure$3$4"
[https://www.ssllabs.com/ssltest/index.html SSL Server Test (Powered by Qualys SSL Labs)]
</pre>


== OVH wildcard ==
*[[ Ovh_letsencrypt|Ovh_letsencrypt]]


[[category:linux]]
[[category:linux]] [[category:Dev]]