Certbot is an automated SSL Certificate issuer for the Let's Encrypt Certificate Authority. It was developed as a client for Letâs Encrypt and will also work with any other CAs that support the ACME protocol.
In this tutorial, we will cover the process of installing Certbot on CentOS 7 running Apache and configure it to issue and and renew Let's Encrypt SSL Certificates.
A CentOS 7 Server
A functional Apache webserver
Certbot is available on the EPEL Yum Repository. If you do not have EPEL installed already, you can install it using the command below:
# yum -y install epel-release mod_ssl openssl
Next, we will need to install Certbot and its Apache plugin
# yum -y install certbot python-certbot-apache
# certbot --apache
To avoid errors, please ensure that your virtual host is already setup for the domain you wish to the the SSL Certificate for and that DNS is properly configured.
Once you run the Certbot Apache Plugin, an installation wizard will appear. The configurable options include:
Select domains you wish to issue a certificate for (Note: www.example.com and example.com will be issued separate SSL Certificates).
SSL Enforcement Options.
Let's Encrypt certificates expire after 90 days. Certbot can handle automated renewals with ease.
# certbot renew --dry-run
# certbot renew --quiet
This concludes our tutorial. Thank you for reading.