Self-Signed SSL Certificate / Certbot

From DISI
Revision as of 21:38, 11 May 2022 by Jgutierrez6 (talk | contribs)
Jump to navigation Jump to search

Introduction

We self sign our SSL Certificates for our websites proxied at these machines:

  • files2
  • vav
  • bksmailman

How To Self-Sign A Website(s)

Assuming that you are already running the software/app on httpd then we can begin.

  1. The command is:
    • certbot --apache <options>
  2. Usually, I just use the '-d' domain flag:
    • certbot --apache -d sample.docking.org

How To Remove SSL Cert From A Domain

  1. You should only do this if UCSF IT gave you an SSL Cert to use or you are migrating a domain name to another site.
    • certbot delete --cert-name sample.docking.org