let's encrypt on uberspace
let's encrypt (homepage) is in open beta right now (read announcement) and as always, uberspace is bleeding edge and „supporting“ let's encrypt. please take a moment an read their blog post.
set up
run these two commands in terminal, after logging in to your uberspace account:
[]$ uberspace-letsencrypt
…
[]$ letsencrypt certonly
renew certificates
to automatically renew your certificates, we'll create a script for that:
[]$ nano ~/bin/renew-certs.sh
copy and paste the following lines into your new script file (replace domain.tld with your domain name (see output from setup scripts above)):
#!/bin/bash
# renew certificates
/usr/local/bin/letsencrypt-renewer --config-dir ~/.config/letsencrypt --logs-dir ~/.config/letsencrypt/logs --work-dir ~/tmp/
# prepare certificates
/usr/local/bin/uberspace-prepare-certificate -k ~/.config/letsencrypt/live/domain.tld/privkey.pem -c ~/.config/letsencrypt/live/domain.tld/cert.pem
save file and close nano. now make it executable:
[]$ chmod +x ~/bin/renew-certs.sh
and finally create a new cronjob:
[]$ crontab -e
and paste this line:
0 3 1 */2 * ~/bin/renew-certs.sh
at the begining of every second month, at 3 am, the script will be executed to update all certificates.
update 2015-12-11: benjamin found an error in the crontab instructions above (which has been fixed). please check out his blog at 8300111.de.
