The document provides steps to install Let's Encrypt (Certbot) on RHEL/CentOS 8 using 10 easy steps. It explains how to get an SSL certificate from Let's Encrypt to enable HTTPS on a website. The steps include installing Certbot using DNF, checking the Certbot version, and requesting a new SSL certificate using the Certbot and Apache plugins. The summary provides a high-level overview of the key aspects and goal of the document which is to guide the installation and setup of Certbot on RHEL/CentOS 8 servers to obtain SSL certificates from Let's Encrypt.
The document provides steps to install Let's Encrypt (Certbot) on RHEL/CentOS 8 using 10 easy steps. It explains how to get an SSL certificate from Let's Encrypt to enable HTTPS on a website. The steps include installing Certbot using DNF, checking the Certbot version, and requesting a new SSL certificate using the Certbot and Apache plugins. The summary provides a high-level overview of the key aspects and goal of the document which is to guide the installation and setup of Certbot on RHEL/CentOS 8 servers to obtain SSL certificates from Let's Encrypt.
The document provides steps to install Let's Encrypt (Certbot) on RHEL/CentOS 8 using 10 easy steps. It explains how to get an SSL certificate from Let's Encrypt to enable HTTPS on a website. The steps include installing Certbot using DNF, checking the Certbot version, and requesting a new SSL certificate using the Certbot and Apache plugins. The summary provides a high-level overview of the key aspects and goal of the document which is to guide the installation and setup of Certbot on RHEL/CentOS 8 servers to obtain SSL certificates from Let's Encrypt.
The document provides steps to install Let's Encrypt (Certbot) on RHEL/CentOS 8 using 10 easy steps. It explains how to get an SSL certificate from Let's Encrypt to enable HTTPS on a website. The steps include installing Certbot using DNF, checking the Certbot version, and requesting a new SSL certificate using the Certbot and Apache plugins. The summary provides a high-level overview of the key aspects and goal of the document which is to guide the installation and setup of Certbot on RHEL/CentOS 8 servers to obtain SSL certificates from Let's Encrypt.
Download as DOCX, PDF, TXT or read online from Scribd
Download as docx, pdf, or txt
You are on page 1/ 9
How to Install Let's Encrypt(Certbot) on RHEL/CentOS 8
Using 10 Easy Steps
In this article, I will explain in detail how to install let's encrypt(Certbot) on
RHEL/CentOS Using 10 Easy Steps. To enable HTTPS on your website, you need to get a certificate (a type of file) from a Certificate Authority (CA). Let’s Encrypt is a CA. In order to get a certificate for your website’s domain from Let’s Encrypt, you have to demonstrate control over the domain. With Let’s Encrypt, you do this using software that uses the ACME protocol which typically runs on your web host. More info can be checked on Let's Encrypt Official website.
Certificate can be issued by two different ways: one way is by using shell access and another way is without using shell access. Those who want to use shell like Bash shell in Linux to generate and install SSL Certificate, it is recommended for them to use the Certbot client tool.
Install Let's Encrypt(Certbot) on RHEL/CentOS 8
Also Read: 6 Easy Steps to Install dig and nslookup Command on RHEL/CentOS 8
Step 1: Prerequisites
a) You need to have a running RHEL/CentOS 8 Server.
b) You should have dnf tool installed in your Server. You can check 31 Useful DNF Command Examples for RPM Package Management in Fedora/RHEL/CentOS to know more about dnf command.
c) You should have sudo access to run privileged commands. You can Check How to Add User to Sudoers to know more about providing sudo access to the User.
d) You need have a running Apache web server or Nginx web server. Here we are going to use example99.com domain to install our SSL Certificate.
Advertisements Step 2: Update Your System
Before going through the steps to install Let's encrypt tool you need to first update your Server using dnf update -y command as shown below. This will download and install all the latest available updates from enabled Repo. Sometimes installing a new package requires dependencies to be updated with the latest version hence it is always recommended to run an update first. This is particularly required if you have not updated your Server from long time. [root@localhost ~]# dnf update -y
Last metadata expiration check: 0:17:57 ago on Sat 12 Sep 2020
libvncserver x86_64 0.9.11-15.el8_2.1 AppStream 275 k
libwayland-client x86_64 1.17.0-1.el8 AppStream 39 k
libwayland-cursor x86_64 1.17.0-1.el8 AppStream 26 k
Step 3: Install and Enable EPEL Repository
If you do not have EPEL repo installed and enabled then you need to use dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm command to install as shown below. In our case since it is already installed so it won't install again.
After successful installation of certbot you can check its installed version using certbot --version command as shown below. As shown in the output current certbot version is 1.7.0
[root@localhost ~]# certbot --version
certbot 1.7.0
Step 6: Request a New SSL Certificate
If you are using apache server then you need to use certbot --apache command to request a new SSL Certificate as shown below. [root@localhost ~]# certbot --apache
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Enter email address (used for urgent renewal and security
notices)
(Enter 'c' to cancel):
If you just want to get a certificate for Apace web server then you need to use certbot certonly --apache command as shown below.
[root@localhost ~]# certbot certonly --apache
If you just want to get a certificate for Nginx web server then you need to use certbot certonly --nginx command as shown below.
[root@localhost ~]# certbot certonly --nginx
Step 7: Setup Automatic Renewal(Optional)
If you want you can setup automatic certificate renewal using crontab then you need to use below command. This command will add a cron job to the default Crontab.
random; import time; time.sleep(random.random() * 3600)' && certbot renew -q" | sudo tee -a /etc/crontab > /dev/null
Step 8: Test SSL Setup
Now you can go to your browser and open https://example99.com. You will see a lock sign in the URL which means that SSL Certificate signed by Certificate Authority is installed now.
https://example99.com
Step 9: Renew Certificate
If you want to renew your certificate then you need to use certbot renew command as shown below.
[root@localhost ~]# certbot renew
Step 10: List All Certificates
If you want to see all the certificates certbot currently managing then you need to use certbot certificates command as shown below.
