Adding SSL/TLS ensures that the exchange is encrypted between the server and the client.
Installation
BASH
sudo apt install certbot python3-certbot-apache
Adjusting the firewall
BASH
sudo ufw allow 'Apache Full'
BASH
sudo ufw delete allow 'Apache'
SSL/TLS certificate
Check if the domain name redirects to the correct IP:
BASH
nslookup howto.cogip.be
The IP adress should be ours. If so, get a SSL/TLS certificate with Let's Encrypt:
BASH
sudo certbot --apache
Since this is the first run, we answer a series of question:
- Enter email and validate with Enter
- Accept Let's Encrypt ToS with Y + Enter
- Share our email with the EFF? The answer is up to you.
- Finally, we see this screen:
TEXT
Which names would you like to activate HTTPS for?
We recommend selecting either all domains, or all domains in a VirtualHost/server block.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: howto.cogip.be
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter 'c' to cancel):
Type 1 and Enter to install the certificate.