Hack The Sec-Leading Resource Of Linux Tutorial: Lets

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: center;">
 Let's Encrypt Free SSL Certificate</div>
Another Big Milestone – Let's Encrypt is now offering Free HTTPS certificates to everyone. 
 
Let's Encrypt has opened to the public, allowing anyone to obtain Free SSL/TLS (Secure  
Socket Layer/Transport Layer Security) certificates for their web servers and to set up  
HTTPS websites in a few simple steps (mentioned below). 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1sjOf0OvF38_XIzP1MSCnDswZKku0NZgHHzM3Z0u2KqzLUnVIxfvxHsQgWR_pD0bERZ5kp_IzF3JXdVT_d_pC-sGpGXU8Rop8uMcJbOtiwJITUBEOJZRtWyRc1k9qWxBUXzxDFhzmVPTE/s1600/free-ssl-certificate_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="394" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1sjOf0OvF38_XIzP1MSCnDswZKku0NZgHHzM3Z0u2KqzLUnVIxfvxHsQgWR_pD0bERZ5kp_IzF3JXdVT_d_pC-sGpGXU8Rop8uMcJbOtiwJITUBEOJZRtWyRc1k9qWxBUXzxDFhzmVPTE/s640/free-ssl-certificate_www.hackthesec.co.in.png" width="640" /></a></div>
 
 
Let's Encrypt – an initiative run by the Internet Security Research Group (ISRG) – is a new, free, and open certificate authority recognized by all major browsers, including Google's Chrome, Mozilla's Firefox and Microsoft's Internet Explorer. 
 
The Free SSL Certification Authority is now in public beta after testing a trial among a select group of volunteers. 
 
Why Let's Encrypt? 
 
Let's Encrypt promised to offer a certificate authority (CA) which is: 
 
 
<ul style="text-align: left;">
<li>Free – no charge for HTTPS certs.</li>
</ul>
<ul style="text-align: left;">
<li>Automatic – the installation, configuration as well as the renewal of the certificates do not require any administrator action.</li>
</ul>
<ul style="text-align: left;">
<li>Open – the automatic issuance, as well as renewal procedures, will be published as the open standard.</li>
</ul>
<ul style="text-align: left;">
<li>Transparent – the records of all certs issuance or revocation will be available publicly.</li>
</ul>
<ul style="text-align: left;">
<li>Secure – the team is committed to being a model of best practice in their own operations.</li>
</ul>
<ul style="text-align: left;">
<li>Cooperative – Let's Encrypt is managed by a multi-stakeholder organization and exists to benefit the community, not any of the consortium members.</li>
</ul>
 
 
How to Install Let's Encrypt Free SSL Certificate 
First of all, let's say you want to get a certificate for example.com. To run the installation, you must have root access to your example.com web server. 
 
To Generate and Install Let's Encrypt Free SSL Certificate, you must first download and run the Let's Encrypt client application. 
 
To install Let's Encrypt Free SSL certificate follow these Steps: 
 
Step 1: Login to your 'example.com' web server using SSH with root access.  
 
 
<div style="background-color: white; border: 0px; color: #333333; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
Step 2: To install the Git version control system, type the following command:</div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); font-size: 12px; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">apt-get install git</pre>
<div style="background-color: white; border: 0px; color: #333333; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
Step 3: Then download and install the latest version of Let's Encrypt Client application, type the following commands:</div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); font-size: 12px; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
git clone https://github.com/letsencrypt/letsencrypt</div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
cd letsencrypt</div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
./letsencrypt-auto</div>
</pre>
Step 4: Once the installation starts, press Enter to accept the agreement. 
 
Step 5: Then press Enter to specify the server name manually in the text box (for example,www.example.com) and then press Enter. 
 
Step 6: Next, enter your email address, where you can receive messages from Let's Encrypt and to recover lost keys, and then press Enter. 
 
Step 7: Review the 'Terms of Service,' and then press Enter to generate and install the SSL certificate. 
 
Once the installation completes, you'll receive a 'Congratulation' message. 
 
How to Configure Nginx/<a href="http://www.hackthesec.co.in/search/label/Apache" target="_blank">Apache</a> for Let's Encrypt SSL Certificate 
 
By default, Nginx or Apache web servers are not configured to how to use your new certificates. 
 
For example, in case of Nginx: To use the installed SSL certificate, you need to edit Nginx configuration file. Type the following command to open Nginx configuration file: 
 
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); font-size: 12px; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">$ sudo nano /etc/nginx/sites-available/www.example.com</pre>
<div style="background-color: white; border: 0px; color: #333333; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
Within that file, add the following lines.</div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); font-size: 12px; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
http{</div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
server{</div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
…</div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
listen 443 ssl;</div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
server_name www.example.com;</div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
ssl_certificate /etc/letsencrypt/live/www.example.com/fullchain.pem;</div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
ssl_certificate_key /etc/letsencrypt/live/.wwwexample.com/privkey.pem;</div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
…</div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
}</div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
}</div>
</pre>
<div style="background-color: white; border: 0px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
Save the file, and just restart your Nginx web server, using the following command:</div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">$ sudo nginx -s reload</pre>
That's it! Check complete <a href="https://letsencrypt.readthedocs.org/en/latest/">documentation</a> here.  
 
Congratulation you have successfully installed SSL certificate for your example.com domain. 
 
Note : How to Renew Let's Encrypt Free SSL Certificate: It is important to note that the beta version of 
Let's Encrypt issues certificates that expire after 90 days. So, to renew your SSL certificate, you need 
 
to run the letsencrypt-auto script again after expiration. 
 
<a href="http://www.hackthesec.co.in/">Hack The Security</a> 
<a href="https://www.twitter.com/hackthesecurity">Hack The Security Twitter</a></div>