https

2020-03-18

• followed instructions at https://wiki.debian.org/LetsEncrypt
• apt install python-certbot-apache
• apt install
• had to change 000-default.conf to bonmot.ca.conf
• had to remove an extra ServerAlias from gay.hfxns.org.conf
• created the cert with:

that LetsEncrypt page says all you need to do is:

 sudo certbot --apache -d <domain> --post-hook "/usr/sbin/service apache2 restart"

 certbot --authenticator standalone --installer apache \
 -dbonmot.ca  -dperformance.bonmot.ca -drecipes.bonmot.ca \
 -dgay.hfxns.org -dwayves.ca \
 -dw2sa.ca \
 -dpaulpitre.ca -dyvette.paulpitre.ca \
 -dprideplacehalifax.ca \
 -dzengarden.oddmuse.org \
 --pre-hook "service apache2 stop" --post-hook "service apache2 start"

• To renew: just do:

 certbot renew ; systemctl reload dovecot

• test with https://www.ssllabs.com/ssltest/
• test with https://whynopadlock.com/