Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Generating certificates can be achieved in two ways

  • Manual
  • Automated

Manual 

Please follow the steps mentioned below to generate the certificates manually

Install acme.sh

Code Block
languagebash
curl https://get.acme.sh | sh		

DNS manual mode


Code Block
languagebash
acme.sh --issue --dns -d aa.com -d www.aa.com
Note

Please make sure that you get an output like the one below:

Code Block
languagebash
Add the following txt record:
Domain:_acme-challenge.aa.com
Txt value:9ihDbjYfTExAYeDs4DBUeuTo18KBzwvTEjUnSwd32-c

Add the following txt record:
Domain:_acme-challenge.www.aa.com
Txt value:9ihDbjxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Please add those txt records to the domains. Waiting for the dns to take effect.

Rerun acme.sh with renew argument:

Code Block
languagebash
acme.sh --renew -d aa.com


Automated

Lego can be used to automate the process of generating certificates. Currently it comes with multiple optional DNS providers.

1.Download the latest version from releases 

Info
titleDownload link

Download from https://github.com/xenolf/lego/releases


2.Install golang -> https://golang.org/doc/install

Info

Install golang from https://golang.org/doc/install


3.Obtain a certificate using the DNS challenge and AWS Route 53

Code Block
languagebash
AWS_REGION=us-east-1 AWS_ACCESS_KEY_ID=my_id AWS_SECRET_ACCESS_KEY=my_key lego --email="foo@bar.com" --domains="example.com" --dns="route53" run
Note

For other ways to obtain certificate as mentioned in above step, refer DNS providers





Panel
titleColorwhite
titleBGColor#59C4C5
titleOn this page

Table of Contents

Panel
titleColorWhite
titleBGColorGreen
titleRelated Reading

Free SSL/TLS Certificates using LetsEncrypt