http://imil.net/blog/tags/ssl/tls/ Recent content in SSL/TLS on iMil.net Hugo en-us Mon, 02 Mar 2020 08:28:40 +0000 http://imil.net/blog/posts/2020/let-s-encrypt-certificates-using-lego/ Mon, 02 Mar 2020 08:28:40 +0000 http://imil.net/blog/posts/2020/let-s-encrypt-certificates-using-lego/ <p>This post is more like a self-reminder on how I setup automatic SSL/TLS certificate renewal on my servers.</p> <p>I chose <a href="https://go-acme.github.io/lego">LEGO</a> to handle my certificates renewal with <a href="https://letsencrypt.org/">Let&rsquo;s Encrypt</a> because it&rsquo;s simple to use, has no dependency, great documentation and is worked on at a constant pace.</p> <p>I found <a href="https://code.kuederle.com/letsencrypt/">this</a> and <a href="https://dddpaul.github.io/blog/2016/10/20/lego-nginx/">this</a> articles very useful, but they are outdated in their use of the <code>tls</code> and <code>http</code> parameters. So here are my notes.</p> <p>This procedure is <em>Debian GNU/Linux</em> based but I also used it pretty much as-is on <em>NetBSD</em> and <em>FreeBSD</em>, only <code>nginx</code> related <code>PATH</code>s changed.</p>