1 and 1 bitnami mean ssl install#

To generate a certificate for a wildcard domain, you will need to use DNS-01 validation when running the lego tool, as explained in the official Let’s Encrypt documentation. NOTE: The steps described above will generate certificates for one or more explicitly-named domains. Note this expiry date carefully as you will need to renew your certificate before that date in order for it to remain valid. IMPORTANT: For security reasons, never post or disclose your server’s SSL private key file in a public forum.Īn output message will provide some information, including the expiry date of the certificate. This set includes the server certificate file DOMAIN.crt and the server certificate key file DOMAIN.key.

The first domain in your list will be added as the “CommonName” of the certificate and the rest, will be added as “DNSNames” to the SAN extension within the certificate.Ī set of certificates will now be generated in the /opt/bitnami/letsencrypt/certificates directory. NOTE: You can use more than one domain (for example, DOMAIN and When supplying multiple domains, Lego creates a SAN (Subject Alternate Names) certificate which results in only one certificate valid for all domains you entered. $ sudo /opt/bitnami/letsencrypt/lego -tls -email='EMAIL-ADDRESS' -domains='DOMAIN' -domains='www.DOMAIN' -path='/opt/bitnami/letsencrypt' run IMPORTANT: Replace the DOMAIN placeholder with your actual domain name, and the EMAIL-ADDRESS placeholder with your email address. Request a new certificate for your domain as below, both with and without the www prefix. Turn off all Bitnami services: $ sudo /opt/bitnami/ctlscript.sh stop The next step is to generate a Let’s Encrypt certificate for your domain. If the Bitnami application host is behind a load balancer or CDN, the commands below require additional parameters, which can be provided by the Bitnami support team on request. NOTE: Before proceeding with this step, ensure that your domain name points to the public IP address of the Bitnami application host. Step 2: Generate a Let’s Encrypt certificate for your domain These steps will download, extract and copy the Lego client to a directory in your path. $ sudo mv lego /opt/bitnami/letsencrypt/lego $ curl -Ls | grep browser_download_url | grep linux_amd64 | cut -d ''' -f 4 | wget -i. Note that you will need to replace the X.Y.Z placeholder with the actual version number of the downloaded archive: $ cd /tmp

1 and 1 bitnami mean ssl install#

Run the following commands to install the Lego client. Log in to the server console as the bitnami user. The Lego client simplifies the process of Let’s Encrypt certificate generation.

You have configured the domain name’s DNS record to point to the public IP address of your Bitnami application instance.įollow the steps below: Step 1: Install the Lego client.

You have the necessary credentials to log in to the Bitnami application instance.

You have deployed a Bitnami application and the application is available at a public IP address so that the Let’s Encrypt process can verify your domain.

The steps below describe the process of manually generating and installing a Let’s Encrypt certificate for your Bitnami application. Generate and configure a Let's Encrypt certificate