Install Free SSL Domain di Server VPS Apache, linux Let’s Encrypt
SSL Gratis Let’s Encrypt hanya mendukung sertifikat SSL untuk nama domain bukan IP address, saat ini tidak mendukung langsung IP adress SSL namun hanya domain saja.
Pertama silahkan masuk SSH, install sertifikat free ssl
sudo apt install certbot python3-certbot-apache
Catatan: pastikan DNS domain sudah berhasil terpointing menuju IP server VPS
Aktifkan firewall https
Berguna membuka port 443 untuk koneksi enkripsi dengan kode :
ufw allow https
Install Sertifikat SSL
Install serifikat ssl gratis :
sudo certbot --apache
Hasil:
Which names would you like to activate HTTPS for?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: your_domain
2: www.your_domain
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter 'c' to cancel):
Pilih domain yang akan di pasang SSL gratis.
Please choose whether or not to redirect HTTP traffic to HTTPS, removing HTTP access.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: No redirect - Make no further changes to the webserver configuration.
2: Redirect - Make all requests redirect to secure HTTPS access. Choose this for
new sites, or if you're confident your site works on HTTPS. You can undo this
change by editing your web server's configuration.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
Selanjutnya pilih no.2 untuk redirect ke https.
Tanggal masa aktif SSL
cek tanggal masa aktif free ssl untuk renew setifikat berikutnya secara gratis.
sudo systemctl status certbot.timer
● certbot.timer - Run certbot twice daily
Loaded: loaded (/lib/systemd/system/certbot.timer; enabled; vendor preset: enabled)
Active: active (waiting) since Tue 2020-04-28 17:57:48 UTC; 17h ago
Trigger: Wed 2020-04-29 23:50:31 UTC; 12h left
Triggers: ● certbot.service