{"id":3086,"date":"2020-05-01T01:36:00","date_gmt":"2020-04-30T20:06:00","guid":{"rendered":"https:\/\/www.24x7serversupport.com\/blog\/?p=3086"},"modified":"2020-05-03T04:31:14","modified_gmt":"2020-05-02T23:01:14","slug":"lets-encrypt-ssl-on-debian-9-with-apache-web-server","status":"publish","type":"post","link":"https:\/\/www.24x7serversupport.com\/blog\/lets-encrypt-ssl-on-debian-9-with-apache-web-server\/","title":{"rendered":"Let\u2019s Encrypt SSL on Debian 9 with Apache web server"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Prerequisites<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>SSH with root access or sudo user access to Debian 9 server<\/li><li>The Apache web server with properly a domain and vhost\u00a0configured<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Step 1: Installing Let\u2019sEncrypt certbot<\/h3>\n\n\n\n<p>The first step to using Let\u2019s Encrypt to obtain an SSL certificate is to install the certbot Let\u2019s Encrypt client on your server. To install run this:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"># sudo apt-get install certbot<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Step 2: Create and install the SSL certificates<\/h3>\n\n\n\n<p>Generating the SSL Certificate for Apache using the Let\u2019s Encrypt client is quite straightforward. The client will automatically obtain and install a new SSL certificate that is valid for the domains in our Apache configuration. To execute the interactive installation and obtain a certificate for all of the domains de ned in your Apache configuration, type:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"># sudo certbot --apache<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Step 3: Check the SSL certificate(s) configuration<\/h3>\n\n\n\n<p>At above stage your certificate is created and configured. Now check your domain virtualhost conf le with the ssl is like this or not. If not then put these manually on virtualhost\u2019s ssl configuration:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">...\nSSLCertificateFile \/etc\/letsencrypt\/live\/&lt;your-domain&gt;\/cert.pem\nSSLCertificateKeyFile \/etc\/letsencrypt\/live\/&lt;your-domain&gt;\/privkey.pem\nSSLCertificateChainFile \/etc\/letsencrypt\/live\/&lt;your-domain&gt;\/chain.pem\n...<\/pre>\n\n\n\n<p>Now need to test as our configuration goes right with this \u2013<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"># sudo apachectl configtest<\/pre>\n\n\n\n<p>Finally, restart apache and your SSL should start working now.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"># sudo service apache2 reload<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Step 4: Setting up for the auto renewal<\/h3>\n\n\n\n<p>The Certbot packages on your system come with a cronjob that will renew your certificates automatically before they expire. Since Let\u2019s Encrypt certificates last for 90 days, it\u2019s highly advisable to take advantage of this feature. You can test automatic renewal for your certificates by running this command:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"># sudo certbot renew --dry-run<\/pre>\n\n\n\n<p>That&#8217;s all.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Prerequisites SSH with root access or sudo user access to Debian 9 server The Apache web server with properly a domain and vhost\u00a0configured Step 1: Installing Let\u2019sEncrypt certbot The first step to using Let\u2019s Encrypt to obtain an SSL certificate is to install the certbot Let\u2019s Encrypt client on your server. To install run this: [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[139,210],"tags":[304],"class_list":["post-3086","post","type-post","status-publish","format-standard","hentry","category-apache","category-security","tag-debian-9"],"jetpack_publicize_connections":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Let\u2019s Encrypt SSL on Debian 9 with Apache web server | 24x7serversupport Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.24x7serversupport.com\/blog\/lets-encrypt-ssl-on-debian-9-with-apache-web-server\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Let\u2019s Encrypt SSL on Debian 9 with Apache web server | 24x7serversupport Blog\" \/>\n<meta property=\"og:description\" content=\"Prerequisites SSH with root access or sudo user access to Debian 9 server The Apache web server with properly a domain and vhost\u00a0configured Step 1: Installing Let\u2019sEncrypt certbot The first step to using Let\u2019s Encrypt to obtain an SSL certificate is to install the certbot Let\u2019s Encrypt client on your server. To install run this: [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.24x7serversupport.com\/blog\/lets-encrypt-ssl-on-debian-9-with-apache-web-server\/\" \/>\n<meta property=\"og:site_name\" content=\"24x7serversupport Blog\" \/>\n<meta property=\"article:published_time\" content=\"2020-04-30T20:06:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-05-02T23:01:14+00:00\" \/>\n<meta name=\"author\" content=\"24x7support\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@24x7serversuppo\" \/>\n<meta name=\"twitter:site\" content=\"@24x7serversuppo\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"24x7support\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.24x7serversupport.com\/blog\/lets-encrypt-ssl-on-debian-9-with-apache-web-server\/\",\"url\":\"https:\/\/www.24x7serversupport.com\/blog\/lets-encrypt-ssl-on-debian-9-with-apache-web-server\/\",\"name\":\"Let\u2019s Encrypt SSL on Debian 9 with Apache web server | 24x7serversupport Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.24x7serversupport.com\/blog\/#website\"},\"datePublished\":\"2020-04-30T20:06:00+00:00\",\"dateModified\":\"2020-05-02T23:01:14+00:00\",\"author\":{\"@id\":\"https:\/\/www.24x7serversupport.com\/blog\/#\/schema\/person\/decfb5fad6bde6ac6822d4e965c6d401\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.24x7serversupport.com\/blog\/lets-encrypt-ssl-on-debian-9-with-apache-web-server\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.24x7serversupport.com\/blog\/lets-encrypt-ssl-on-debian-9-with-apache-web-server\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.24x7serversupport.com\/blog\/lets-encrypt-ssl-on-debian-9-with-apache-web-server\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.24x7serversupport.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Let\u2019s Encrypt SSL on Debian 9 with Apache web server\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.24x7serversupport.com\/blog\/#website\",\"url\":\"https:\/\/www.24x7serversupport.com\/blog\/\",\"name\":\"24x7serversupport Blog\",\"description\":\"Linux | CPanel | WHM | webhosting| Plesk | DirectAdmin | CentOs | Debian | Ubuntu Blog\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.24x7serversupport.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.24x7serversupport.com\/blog\/#\/schema\/person\/decfb5fad6bde6ac6822d4e965c6d401\",\"name\":\"24x7support\",\"url\":\"https:\/\/www.24x7serversupport.com\/blog\/author\/24x7support\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Let\u2019s Encrypt SSL on Debian 9 with Apache web server | 24x7serversupport Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.24x7serversupport.com\/blog\/lets-encrypt-ssl-on-debian-9-with-apache-web-server\/","og_locale":"en_US","og_type":"article","og_title":"Let\u2019s Encrypt SSL on Debian 9 with Apache web server | 24x7serversupport Blog","og_description":"Prerequisites SSH with root access or sudo user access to Debian 9 server The Apache web server with properly a domain and vhost\u00a0configured Step 1: Installing Let\u2019sEncrypt certbot The first step to using Let\u2019s Encrypt to obtain an SSL certificate is to install the certbot Let\u2019s Encrypt client on your server. To install run this: [&hellip;]","og_url":"https:\/\/www.24x7serversupport.com\/blog\/lets-encrypt-ssl-on-debian-9-with-apache-web-server\/","og_site_name":"24x7serversupport Blog","article_published_time":"2020-04-30T20:06:00+00:00","article_modified_time":"2020-05-02T23:01:14+00:00","author":"24x7support","twitter_card":"summary_large_image","twitter_creator":"@24x7serversuppo","twitter_site":"@24x7serversuppo","twitter_misc":{"Written by":"24x7support","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.24x7serversupport.com\/blog\/lets-encrypt-ssl-on-debian-9-with-apache-web-server\/","url":"https:\/\/www.24x7serversupport.com\/blog\/lets-encrypt-ssl-on-debian-9-with-apache-web-server\/","name":"Let\u2019s Encrypt SSL on Debian 9 with Apache web server | 24x7serversupport Blog","isPartOf":{"@id":"https:\/\/www.24x7serversupport.com\/blog\/#website"},"datePublished":"2020-04-30T20:06:00+00:00","dateModified":"2020-05-02T23:01:14+00:00","author":{"@id":"https:\/\/www.24x7serversupport.com\/blog\/#\/schema\/person\/decfb5fad6bde6ac6822d4e965c6d401"},"breadcrumb":{"@id":"https:\/\/www.24x7serversupport.com\/blog\/lets-encrypt-ssl-on-debian-9-with-apache-web-server\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.24x7serversupport.com\/blog\/lets-encrypt-ssl-on-debian-9-with-apache-web-server\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.24x7serversupport.com\/blog\/lets-encrypt-ssl-on-debian-9-with-apache-web-server\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.24x7serversupport.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Let\u2019s Encrypt SSL on Debian 9 with Apache web server"}]},{"@type":"WebSite","@id":"https:\/\/www.24x7serversupport.com\/blog\/#website","url":"https:\/\/www.24x7serversupport.com\/blog\/","name":"24x7serversupport Blog","description":"Linux | CPanel | WHM | webhosting| Plesk | DirectAdmin | CentOs | Debian | Ubuntu Blog","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.24x7serversupport.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.24x7serversupport.com\/blog\/#\/schema\/person\/decfb5fad6bde6ac6822d4e965c6d401","name":"24x7support","url":"https:\/\/www.24x7serversupport.com\/blog\/author\/24x7support\/"}]}},"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/www.24x7serversupport.com\/blog\/wp-json\/wp\/v2\/posts\/3086","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.24x7serversupport.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.24x7serversupport.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.24x7serversupport.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.24x7serversupport.com\/blog\/wp-json\/wp\/v2\/comments?post=3086"}],"version-history":[{"count":1,"href":"https:\/\/www.24x7serversupport.com\/blog\/wp-json\/wp\/v2\/posts\/3086\/revisions"}],"predecessor-version":[{"id":3087,"href":"https:\/\/www.24x7serversupport.com\/blog\/wp-json\/wp\/v2\/posts\/3086\/revisions\/3087"}],"wp:attachment":[{"href":"https:\/\/www.24x7serversupport.com\/blog\/wp-json\/wp\/v2\/media?parent=3086"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.24x7serversupport.com\/blog\/wp-json\/wp\/v2\/categories?post=3086"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.24x7serversupport.com\/blog\/wp-json\/wp\/v2\/tags?post=3086"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}