Certbot

From Woozle Writes Code
Revision as of 17:00, 30 January 2025 by Woozle (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

Notes

The easiest way to use certbot from CLI is to just type certbot. It will give you a list of domains it sees as configured, and ask which ones you'd like certificates for.

After configuring a new domain, be sure to run apachectl configtest before restarting Apache. (see apachectl)

Apache seems to have some weird rule for sorting of .conf files (going on the theory that http stuff needs to be loaded before https stuff -- which I haven't checked). I thought I had worked out a rule-of-thumb for making it work, but the one where 1 and 2 are reversed breaks the rule... anyway, here's what I found:

filenames works?
vbz-main-0-http.conf
vbz-main-1-ssl.conf
YES
vbz-main-http.conf
vbz-main-ssl.conf
NO
vbz-main-1-http.conf
vbz-main-2-ssl.conf
YES
vbz-main-2-http.conf
vbz-main-1-ssl.conf
YES (but shouldn't!)
vbz-main-a-http.conf
vbz-main-b-ssl.conf
YES
vbz-main-h-http.conf
vbz-main-s-ssl.conf
NO