mirror of
https://github.com/ivuorinen/cheatsheet-tldr.git
synced 2026-01-26 11:33:59 +00:00
35 lines
1.4 KiB
Plaintext
35 lines
1.4 KiB
Plaintext
---
|
|
syntax: markdown
|
|
tags: [tldr, linux]
|
|
source: https://github.com/tldr-pages/tldr.git
|
|
---
|
|
# certbot
|
|
|
|
> The Let's Encrypt Agent for automatically obtaining and renewing TLS certificates.
|
|
> Successor to `letsencrypt`.
|
|
> More information: <https://eff-certbot.readthedocs.io/en/latest/using.html>.
|
|
|
|
- Obtain a new certificate via webroot authorization, but do not install it automatically:
|
|
|
|
`sudo certbot certonly --webroot {{[-w|--webroot-path]}} {{path/to/webroot}} {{[-d|--domain]}} {{subdomain.example.com}}`
|
|
|
|
- Obtain a new certificate via `nginx` authorization, installing the new certificate automatically:
|
|
|
|
`sudo certbot --nginx {{[-d|--domain]}} {{subdomain.example.com}}`
|
|
|
|
- Obtain a new certificate via apache authorization, installing the new certificate automatically:
|
|
|
|
`sudo certbot --apache {{[-d|--domain]}} {{subdomain.example.com}}`
|
|
|
|
- Renew all Let's Encrypt certificates that expire in 30 days or less (don't forget to restart any servers that use them afterwards):
|
|
|
|
`sudo certbot renew`
|
|
|
|
- Simulate the obtaining of a new certificate, but don't actually save any new certificates to disk:
|
|
|
|
`sudo certbot --webroot {{[-w|--webroot-path]}} {{path/to/webroot}} {{[-d|--domain]}} {{subdomain.example.com}} --dry-run`
|
|
|
|
- Obtain an untrusted test certificate instead:
|
|
|
|
`sudo certbot --webroot {{[-w|--webroot-path]}} {{path/to/webroot}} {{[-d|--domain]}} {{subdomain.example.com}} --test-cert`
|