The goal of this article is to provide you the steps needed to generate a trusted SSL certificate using Let's Encrypt.
...
At the end of the process, your certificate, private key, and LE chain will be installed to /etc/letsencrypt/archive/<YOUR_DOMAIN> directory.
Install the certificate
Copy the generated private key and certificate to the default directory (used by Asterisk and Nginx):
| Code Block |
|---|
|
mv /etc/letsencrypt/archive/<YOUR_DOMAIN>/privkey1.pem /etc/pki/tls/private/motion.key
mv /etc/letsencrypt/archive/<YOUR_DOMAIN>/fullchain1.pem /etc/pki/tls/certs/motion.crt |
Restart services
Restart Asterisk and Nginx services in order to apply changes:
| Code Block |
|---|
|
systemctl restart asterisk
systemctl start nginx |
| Status |
|---|
| colour | Red |
|---|
| title | ONLY FOR DEBIAN |
|---|
|
Backup private key and certificate
Before running the SSL certificate generation, backup the existing private key and the certificate:
| Code Block |
|---|
|
mv /etc/ssl/private/motion.key /etc/ssl/private/motion.key.bak
mv /etc/ssl/certs/motion.crt /etc/ssl/certs/motion.crt.bak |
Install package dependencies
Connect to your server through SSH console and install the following packages:
| Code Block |
|---|
|
apt -y install certbot |
Obtaining a Certificate
| Note |
|---|
TCP port 80 must be open to your server in order to obtain the certificate |
Before obtaining the certificate, stop nginx service and be sure that no service is running on TCP port 443:
| Code Block |
|---|
|
systemctl stop nginx |
Once you installed the certbot package, you can run the command in SSH console and follow the instructions:
| Code Block |
|---|
|
certbot certonly --standalone -d <YOUR_DOMAIN> --email <YOUR_EMAIL_ADDRESS> |
At the end of the process, your certificate, private key, and LE chain will be installed to /etc/letsencrypt/archive/<YOUR_DOMAIN> directory.
Install the certificate
Copy the generated private key and certificate to the default directory (used by Asterisk and Nginx):
| Code Block |
|---|
|
mv /etc/letsencrypt/archive/<YOUR_DOMAIN>/privkey1.pem /etc/ssl/private/motion.key
mv /etc/letsencrypt/archive/<YOUR_DOMAIN>/fullchain1.pem /etc/ssl/certs/motion.crt |
Restart services
Restart Asterisk and Nginx services in order to apply changes:
...