let's encrypt (homepage) is in open beta right now (read announcement) and as always, uberspace is bleeding edge and „supporting“ let's encrypt. please take a moment an read their blog post.


set up

run these two commands in terminal, after logging in to your uberspace account:

[]$ uberspace-letsencrypt
…
[]$ letsencrypt certonly

renew certificates

to automatically renew your certificates, we'll create a script for that:

[]$ nano ~/bin/renew-certs.sh

copy and paste the following lines into your new script file (replace domain.tld with your domain name (see output from setup scripts above)):

#!/bin/bash

# renew certificates
/usr/local/bin/letsencrypt-renewer --config-dir ~/.config/letsencrypt --logs-dir ~/.config/letsencrypt/logs --work-dir ~/tmp/

# prepare certificates
/usr/local/bin/uberspace-prepare-certificate -k ~/.config/letsencrypt/live/domain.tld/privkey.pem -c ~/.config/letsencrypt/live/domain.tld/cert.pem

save file and close nano. now make it executable:

[]$ chmod +x ~/bin/renew-certs.sh

and finally create a new cronjob:

[]$ crontab -e

and paste this line:

0 3 1 */2 * ~/bin/renew-certs.sh

at the begining of every second month, at 3 am, the script will be executed to update all certificates.


update 2015-12-11: benjamin found an error in the crontab instructions above (which has been fixed). please check out his blog at 8300111.de.

main picture by dylan luder, CC0 1.0 license