Let’s Encrypt is a certificates authority that gives unfastened SSL certificate for internet sites. It was once introduced in 2014 to verify all internet sites are protected and HTTPS. More than 250 million internet sites use it.
In addition to providing SSL certificate, it additionally handles implementation and automated renewal of certificate in the course of the Certbot consumer.
Here, we can see easy methods to set up Let’s Encrypt SSL Certificate in Apache on Ubuntu 22.04.
Prerequisites
Install Apache Webserver
Before continuing additional, set up the Apache webserver for your machine.
READ: How to Install LAMP Stack on Ubuntu 22.04
OR
Use the apt command to put in the Apache webserver on my own if you want to host just a simple HTML web site.
sudo apt replace
sudo apt set up -y apache2
Then, use the beneath command to permit SSL and rewrite modules.
sudo a2enmod ssl rewrite
Create Apache Virtualhost
First, create an Apache digital host to serve the HTTP model of the site.
sudo nano /and so forth/apache2/sites-available/www.holhol24.web.conf
Then, use the beneath configuration on your site. Do keep in mind to switch ServerName, ServerAlias, and Directory stanza in response to your requirement. If you don’t use the www subdomain, you’ll take away the ServerAlias.
ServerName holhol24.web
ServerAlias www.holhol24.web
ServerAdmin admin@holhol24.web
DocumentRoot /var/www/html/www.holhol24.web
ErrorLog ${APACHE_LOG_DIR}/www.holhol24.net_error.log
CustomLog ${APACHE_LOG_DIR}/www.holhol24.net_access.log mixed
Options FollowSymlinks
AllowOverride All
Require all granted
Once you may have created the digital host configuration document, permit the site.
sudo a2ensite www.holhol24.web
Next, create a root listing to carry your site’s information.
sudo mkdir -p /var/www/html/www.holhol24.web/
Then, trade the possession and workforce of the listing.
sudo chown -R www-data:www-data /var/www/html/www.holhol24.web/
Finally, position the check HTML document at the site’s file root.
echo “This is a test site @ www.holhol24.net” | sudo tee /var/www/html/www.holhol24.web/index.html
Then, restart the Apache carrier to re-read the configurations.
sudo systemctl restart apache2
Install Let’s Encrypt SSL Certificate in Apache
Create / Update DNS Record
To generate a Let’s Encrypt SSL certificates, you should level your area to the server IP. So, move in your area registrar and create an A/CNAME document for the area. For instance, the beneath symbol presentations the A/CNAME data for the area www.holhol24.web.
NOTE: After making adjustments within the DNS data, it is important to look ahead to a couple of mins to hours to mirror, relying at the TTL you put for the document.
DNS RecordsInstall Certbot
The Certbot ACME consumer handles the certificates issuance and set up with out downtime. It is out there as a snap package deal for Ubuntu working machine. So, first, set up the Snapd package deal.
sudo apt replace
sudo apt set up -y snapd
Then, replace the snapd to the newest model.
sudo snap set up core; sudo snap refresh core
Finally, set up the Certbot consumer the use of the snap command.
sudo snap set up –classic certbot
sudo ln -s /snap/bin/certbot /usr/bin/certbot
Install Let’s Encrypt Certificate
Use the certbot command to create a Let’s Encrypt certificates and configure Apache to make use of the certificates.
sudo certbot –apache
You will wish to practice the interactive suggested and set up the certificates. Since I’ve two domain names, I will be able to set up SSL certificate for each domain names.
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Enter electronic mail deal with (used for pressing renewal and safety notices)
(Enter ‘c’ to cancel): admin@holhol24.com Once you turn on HTTPS on your area, the Certbot consumer will upload rewrite laws to redirect visitors from HTTP to the HTTPS web site.
By default, it puts two laws for redirections.
http://holhol24.web >> https://holhol24.web
http://www.holhol24.web >> https://www.holhol24.web
As you’ll see, the primary redirection has no longer reached the www HTTPS model of the area. So, you could wish to practice the beneath phase to set it up. If you don’t use the www area, you’ll skip the following phase.
Redirect non-www HTTP requests to www HTTPS with Apache
You might need to configure the Apache webserver to redirect the visitors from the non-www HTTP web site to the WWW HTTPS web site, I.e., http://holhol24.web >> https://www.holhol24.web.
So, edit the Let’s Encrypt SSL digital host document (no longer your unique digital host document).
sudo nano /and so forth/apache2/sites-available/www.holhol24.net-le-ssl.conf
Then, upload the beneath laws prior to the . Change the area identify as in step with your requirement.
# Redirect NON-WWW HTTP to WWW HTTPS
RewriteEngine on
RewriteCond %{SERVER_NAME} =holhol24.web
RewriteRule ^ https://www.holhol24.web%{REQUEST_URI} [END,NE,R=permanent]1,L]
Finally, restart the Apache carrier.
sudo systemctl restart apache2
Verify Let’s Encrypt Certificate
You can test the Let’s Encrypt certificates by means of visiting your site.
http://your-http-web-site
OR
https://your-https-web-site
You must get the HTTPS model of your web site now.
Let’s Encrypt SSL CertificateTest SSL Certificate
Test your Let’s Encrypt SSL certificates for any problems and its safety scores by means of going to the beneath URL.
https://www.ssllabs.com/ssltest/analyze.html?d=www.holhol24.web
Renew Let’s Encrypt Certificate
By default, Let’s Encrypt certificate have 90 days of validity and need to be renewed on time. However, the renewal procedure is now automatic via a systemd carrier equipped by means of the Certbot consumer. So, you wouldn’t have to resume them manually.
However, it is strongly recommended to simulate certificates renewals to verify no problems.
sudo certbot renew –dry-run
Output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –
Processing /and so forth/letsencrypt/renewal/holhol24.web.conf
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –
Account registered.
Simulating renewal of an current certificates for holhol24.web and www.holhol24.web
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –
Congratulations, all simulated renewals succeeded:
/and so forth/letsencrypt/reside/holhol24.web/fullchain.pem (good fortune)
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –
The above output confirms that the check renewal is a hit, and the automated renewal will occur as anticipated.
Conclusion
That’s All. I am hoping you realized easy methods to set up Let’s Encrypt SSL Certificate in Apache on Ubuntu 22.04.
