How To Secure Apache with Let's Encrypt on CentOS 7
How To Secure Apache with Let's Encrypt on CentOS 7
Secure your Apache web server with Let's Encrypt SSL certificate on CentOS 7 in just a few simple steps. This tutorial will guide you through the process.
Prerequisites
- A CentOS 7 server with Apache installed
- Root access to the server
- A domain name pointed to your server's IP address
Step 1: Install Certbot
Certbot is an open source tool that allows you to easily obtain and install SSL/TLS certificates from Let's Encrypt. To install Certbot on CentOS 7, run the following command:
sudo yum install certbot python2-certbot-apache
Step 2: Obtain SSL Certificate
Once Certbot is installed, you can obtain your SSL certificate by running the following command:
sudo certbot --apache -d yourdomain.com
Replace yourdomain.com with your actual domain name.
Follow the on-screen instructions to complete the certificate request process.
Step 3: Test SSL Certificate
After obtaining the SSL certificate, test it by visiting your website with HTTPS protocol in your web browser.
Step 4: Set Up Auto-Renewal
Let's Encrypt SSL certificates expire every 90 days, so it's important to set up auto-renewal to avoid any downtime. To do so, run the following command:
sudo certbot renew --dry-run
This command will simulate the renewal process and ensure that everything is working correctly. If there are no errors, you can add a cron job to automatically renew the certificate before it expires.
Open the crontab configuration file:
sudo crontab -e
Add the following line at the end of the file:
30 2 * * 1 /usr/bin/certbot renew >> /var/log/letsencrypt/renew.log
This will run the renewal command every Monday at 2:30 AM and log the output to /var/log/letsencrypt/renew.log.
Conclusion
By following these simple steps, you can secure your Apache web server with Let's Encrypt SSL certificate on CentOS 7. This will ensure that your website is encrypted and protected from potential threats.
Комментарии
Отправить комментарий