Generate SSL Let's Encrypt di CentOS 7

Let's Encrypt | https://seeklogo.com

Install terlebih dahulu repository epel-release

# yum install epel-release -y

Cloning source Let’s Encrypt dari github:

# yum install git
# git clone https://github.com/letsencrypt/letsencrypt
# cd letsencrypt

Berikut command untuk generate SSL Let’s Encrypt:

./letsencrypt-auto certonly --standalone --email -d -d www.

Sebagai contoh:

./letsencrypt-auto certonly --standalone --email kontak@iqbalbirrul.com -d ssl.iqbal.es

Sebagai catatan : domain harus terpointing ke IP Address server tempat SSL Let’s Encrypt di generate

Berikut outputnya:

[root@cloudsrv1 letsencrypt]# ./letsencrypt-auto certonly --standalone --email kontak@iqbalbirrul.com -d ssl.iqbal.es
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator standalone, Installer None
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for ssl.iqbal.es
Waiting for verification...
Cleaning up challenges

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/ssl.iqbal.es/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/ssl.iqbal.es/privkey.pem
   Your cert will expire on 2019-05-15. To obtain a new or tweaked
   version of this certificate in the future, simply run
   letsencrypt-auto again. To non-interactively renew *all* of your
   certificates, run "letsencrypt-auto renew"
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le

Perhatikan juga target folder hasil generate ssl (/etc/letsencrypt/live/ssl.iqbal.es/fullchain.pem)