letsencrypt configuration

[Valeri Galtsev]

On Fri, March 31, 2017 3:08 pm, Andre Goree wrote:
> On 2017/03/31 3:40 pm, Andre Goree wrote:
>> So how is everyone going about configuring letsencrypt on FreeBSD?  It
>> would seem that multiple ports that used to exist for this very
>> purpose are no longer in the repos (letskencrypt, py-letsencrypt), so
>> tutorials I'm finding (and even letskencrypt, which is still in the
>> FreeBDS wiki) aren't much help.
>>
>> Thanks in advance.
>>
> I actually found this immediately after I posted, all can disregard this
> post:  https://brnrd.eu/security/2016-12-30/acme-client.html
>


There was thread not long ago where I described in detail how I installed
it. Look for that if nothing else helps. The only thing I would add to
that thread is: you have to reload apache (as if you are restarting it) to
load updated certificate, which you can do in the cron job you set for
updating certs; add --post-hook like below:

/usr/local/bin/certbot renew --quiet --post-hook
"/usr/local/sbin/apachectl graceful"

Thanks.
Valeri

>
>
> --
> Andre Goree
> -=-=-=-=-=-

++++++++++++++++++++++++++++++++++++++++
Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247
++++++++++++++++++++++++++++++++++++++++