Free SSL Certificate with Let's Encrypt & Installation with CertBot on Apache Webserver

everybody this is already from circuit and I'm going to show you in this video how to get a free SSL certificate with let's encrypt install it with cert bot on your Apache web server and they move forward okay so basically let's encrypt is a free SSL certificate company that they want to help the move the web or the entire web to be secure what you do is you get a free certificate it's valid for 90 days and you have to make sure you Auto renew it um great great a product and we use it for a lot of our projects okay great so what we want to do is first of all go to cert bot a BFF org go to the home page and for instructions just select our specific web server so in this case Apache and boon to 1404 okay and we're gonna follow the instructions by first of all downloading their file running it configuring Apache and then setting up auto renewals so every 90 days or less will actually be able to renew them automatically so we don't have to do anything okay perfect so I set up basically a temporary webserver to go let's login via SSH okay and go here okay again this is a temporary webserver okay perfect so now let's go into a folder I created called certs there's a basically nothing there or there should be nothing there but I downloaded the file before so let's run it again okay so first thing you need to do is grab their file and grab it perfect next thing is we need to change the permission the permissions okay perfect okay now let's run the actual file right now go here okay and so now it's going to actually run for probably about a minute or two to get all everything ready to go and let's download these extra files okay so I just hit yes and in the meantime while it does that I just want to explain so after we configure a patchy configuration file we need to set up the auto renewal and so the Auto renewal basically would be to run and set up a cron a cron job which is basically a some kind of automated feature in the operating system that will run some kind of script or some kind of thing automatically based on the time frame that we actually ask it to do so we're basically going to go and once we finish the configuration we set it up make sure it runs all the time make sure it runs of even if the web server it has rebooted itself and then we're good to go and in the future we'll actually have another video to actually show you how to monitor if your SSL certificate is correct and of course your renewal is doing doing good and get alerts if there's any kind of issue that's what of course Circuit does okay so let's go let's wait a few more seconds till it finishes and let's see what we have here okay and let's actually go to configure it so right now we didn't find any kind of configuration files I should actually do this excuse me okay so let's hit enter okay so we didn't find anything so now we need to specify the domain name so I set up a domain name called or a sub domain name called Apache sir okay comm hit enter okay what is the email address where entering for lost key recovery so info let's try that okay hit enter okay I agree to the terms hit enter hey let's see what the next step is and do I want to allow both HTTP and HTTPS at the same time or do I want to force only HTTPS let's keep it by default and we should be good so now if I go to my Apache server this is HTTP the site of course works if I actually do HTTPS then that's it my SSL certificate is installed very very easy and I can view the certificate it's valid for three months right here issued by let's encrypt Authority perfect okay so now we basically have one more step to do okay which is we need to set up the actual Auto renewing so before we actually set cron we need to test that it works so let's run the auto renew command and see if everything runs okay okay you okay and congratulations all renewals succeeded etc okay perfect so now what we need to do is go to cron crontab - e okay set it up and add one more line of code to actually run the command or the file that we actually I'm gonna copy and paste that we actually setup so if you remember so first of all we set up a folder called certs and what we want to run at 1:00 a.m. every Sunday this file in the folder certs are bought Auto renew and that's it so let's go and let's save a1 to save yes and that's it okay so we should be good that's it so hopefully this a makes sense to you let me know if you have any questions and we'll be making more let's encrypt videos in the future Thanks

Channel: Astral Web Inc.

Views: 46,743

Keywords: ssl, free, lets encrypt, ssl certificate, certificate, how to, tutorial, education, learn, apache, ubuntu, certbot, cert bot, cron, https, secure

Id: d-FQ0JTfUxI

Length: 6min 3sec (363 seconds)

Published: Wed Jul 31 2019