{"id":33,"date":"2016-02-02T14:42:19","date_gmt":"2016-02-02T13:42:19","guid":{"rendered":"https:\/\/kerms.hobby-site.org\/?p=33"},"modified":"2016-02-02T14:42:19","modified_gmt":"2016-02-02T13:42:19","slug":"howto-set-up-letsencrypt-on-opensuse-13-2","status":"publish","type":"post","link":"https:\/\/kerms.hobby-site.org\/?p=33","title":{"rendered":"HowTo set up LetsEncrypt on OpenSUSE 13.2"},"content":{"rendered":"
\n

Setting up letsencrypt on a server with OpenSUSE 13.2 and apache2.<\/p>\n

I suppose you have a running apache2 web server with a virtual host config file named\/etc\/apache2\/vhosts.d\/mydomain.example.com.conf<\/code> for the domain mydomain.example.com<\/code><\/p>\n

Log in to your server by ssh, make yourself root. Then:<\/p>\n

1. Install required extra packages<\/h4>\n

cd \/root<\/code>
\nzypper in git<\/code><\/p>\n

On OpenSUSE 13.2 you will also need (versions of python > 2.7.8 probably will not require this):
\nzypper in python-pyOpenSSL<\/code><\/p>\n

2. Install letsencrypt<\/h4>\n

git clone https:\/\/github.com\/letsencrypt\/letsencrypt<\/code><\/p>\n

3.Configure data for letsencrypt<\/h4>\n

Create a file \/etc\/letsencrypt\/cli.ini<\/code> with this contents:<\/p>\n

    rsa-key-size = 4096\r\n    email = myaddress@example.com\r\n    authenticator = webroot\r\n    webroot-path = \/srv\/www\/vhosts\/mydomain.example.com\r\n    domain = mydomain.example.com<\/code><\/pre>\n
Obviously the webroot path must reflect the value of DocumentRoot<\/code> in your server configfile\/etc\/apache2\/vhosts.d\/mydomain.example.com.conf<\/code>, and email should be your address.<\/p>\n
4. Get your certificate<\/h4>\n
cd \/root\/letsencrypt
\n.\/letsencrypt-auto certonly -c \/etc\/letsencrypt\/cli.ini<\/p>\n
5. Configure the https server<\/h4>\n
If step 4 was successful, you’ll find your certificates in \/etc\/letsencrypt\/live\/mydomain.example.com\/<\/code>. Now you need to configure your apache2 to use these certificates. At first copy your http config file to a https config file:<\/p>\n
cp -a \/etc\/apache2\/vhosts.de\/mydomain.example.com.conf \/etc\/apache2\/vhosts.de\/mydomain.example.com-ssl.conf<\/code><\/p>\n
In that newly created file modify the lines containing „“ and „ServerName“ by appending „:443“ to IPs resp. domain name (resp. replacing „:80“ by „:443“). After these lines add the following lines:<\/p>\n
SSLEngine on\r\nSSLCertificateFile \/etc\/letsencrypt\/live\/mydomain.example.com\/fullchain.pem\r\nSSLCertificateKeyFile \/etc\/letsencrypt\/live\/mydomain.example.com\/privkey.pem<\/code><\/pre>\n
If you like, you may adjust the Logfile names (if you have the „combined“ parameter in CustomLog, you may substitute that by „ssl_combined“).<\/p>\n
Now make sure to have ssl activated in \/etc\/sysconfig\/apache2<\/code>:<\/p>\n
APACHE_MODULES=\"[...] ssl [...]\"<\/code>
\nand
\nAPACHE_SERVER_FLAGS=\"SSL\"<\/code><\/p>\n
Now restart the apache2 server (after a check):<\/p>\n
rcapache2 configtest\r\nrcapache2 restart<\/code><\/pre>\n
6. Renewal of the certificate<\/h4>\n
If all that was successful, you may wait two months (not more than 89 days) to renew your certifcate by repeating step 4. The apache2 server does not need any new configuration, but (possibily?) a restart.<\/p>\n
<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
Setting up letsencrypt on a server with OpenSUSE 13.2 and apache2. I suppose you have a running apache2 web server with a virtual host config file named\/etc\/apache2\/vhosts.d\/mydomain.example.com.conf for the domain mydomain.example.com Log in to your server by ssh, make yourself … Weiterlesen →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-33","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/kerms.hobby-site.org\/index.php?rest_route=\/wp\/v2\/posts\/33"}],"collection":[{"href":"https:\/\/kerms.hobby-site.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kerms.hobby-site.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kerms.hobby-site.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kerms.hobby-site.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=33"}],"version-history":[{"count":2,"href":"https:\/\/kerms.hobby-site.org\/index.php?rest_route=\/wp\/v2\/posts\/33\/revisions"}],"predecessor-version":[{"id":35,"href":"https:\/\/kerms.hobby-site.org\/index.php?rest_route=\/wp\/v2\/posts\/33\/revisions\/35"}],"wp:attachment":[{"href":"https:\/\/kerms.hobby-site.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=33"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kerms.hobby-site.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=33"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kerms.hobby-site.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=33"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}