{"id":197,"date":"2020-03-25T19:58:00","date_gmt":"2020-03-25T19:58:00","guid":{"rendered":"https:\/\/abruptlycreative.com\/?p=197"},"modified":"2023-07-02T23:11:17","modified_gmt":"2023-07-02T23:11:17","slug":"sentora-centos-lets-encrypt-installation","status":"publish","type":"post","link":"https:\/\/abruptlycreative.com\/index.php\/2020\/03\/25\/sentora-centos-lets-encrypt-installation\/","title":{"rendered":"How to Install Let&#8217;s Encrypt in a Sentora \/ CentOS \/ Apache Environment"},"content":{"rendered":"\n<p class=\"has-text-align-left\"><img decoding=\"async\" class=\"wp-image-981\" style=\"width: 600px;\" src=\"https:\/\/abruptlycreative.com\/wp-content\/uploads\/2020\/03\/SSLLABS-A.jpg\" alt=\"SSL Labs A Score\"><\/p>\n\n\n\n<p class=\"has-text-align-left\">I&#8217;m no webmaster.  Any knowledge I have in web hosting, servers, or coding  is from self-teaching and alot of trial and error.  Along the way, I&#8217;ve learned a secure site is important to prevent hacking, database injections, and to increase the site&#8217;s presence on the internet (basically its Google ranking).  So it&#8217;s important to have a SSL\/TLS certifcate installed on your site.  Let&#8217;s Encrypt offers SSL\/TLS cerficates for free!  However, you can support the organization through donations.  Here&#8217;s how to install a Let&#8217;s Encyrpt Certificate in a Sentora \/CentOS environment.<\/p>\n\n\n\n<div class=\"wp-block-group has-very-light-gray-background-color has-background is-layout-flow\"><div class=\"wp-block-group__inner-container\">\n<p><strong>CAUTION<\/strong> <strong>#1<\/strong>:  Do <strong>NOT <\/strong>use the <a href=\"http:\/\/docs.sentora.org\/?node=103\">Let&#8217;s Encrypt: Sentora Domains<\/a> instructions found in Sentora&#8217;s <a href=\"http:\/\/docs.sentora.org\/?node=23\">documentation<\/a>.  It&#8217;s outdated and doesn&#8217;t work.<\/p>\n\n\n\n<p><strong>How do I know?  <\/strong><\/p>\n\n\n\n<p>One, the link for the github repository for Let&#8217;sEncrypt is incorrect.  It&#8217;s no longer under Let&#8217;s Encrypt.  It&#8217;s under Certbot.  <\/p>\n\n\n\n<p>Two, the code from Sentora&#8217;s doesn&#8217;t work.  I updated the repository link to no avail.  <\/p>\n\n\n\n<p><strong>CAUTION #2:  <\/strong>You will get errors when you follow this tutorial <span style=\"text-decoration: underline;\">after<\/span> following Sentora&#8217;s instructions.  The two methods do not play together nicely.  Trust me!  I had to send a SOS to my hosting provider when Sentora locked me out.<\/p>\n<\/div><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">SSH into your server<\/h4>\n\n\n\n<p class=\"has-small-font-size\" style=\"font-style:italic;font-weight:100\">I use putty.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Install Certbot<\/h4>\n\n\n\n<pre class=\"wp-block-code\"><code>wget https:\/\/dl.eff.org\/certbot-auto\nsudo mv certbot-auto \/usr\/local\/bin\/certbot-auto\nsudo chown root \/usr\/local\/bin\/certbot-auto\nsudo chmod 0755 \/usr\/local\/bin\/certbot-auto<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\">Get a Certificate from Let&#8217;s Encrypt and have Certbot automatically edit the Apache configuration for you.<\/h4>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo \/usr\/local\/bin\/certbot-auto --apache<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\">Setup Automatic Renewal<\/h4>\n\n\n\n<pre class=\"wp-block-code\"><code>echo \"0 0,12 * * * root python -c 'import random; import time; time.sleep(random.random() * 3600)' &amp;&amp; \/usr\/local\/bin\/certbot-auto renew -q\" | sudo tee -a \/etc\/crontab &gt; \/dev\/null<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\">Use <a href=\"https:\/\/www.ssllabs.com\/ssltest\/\">SSL Labs<\/a> (recommended by Certbot) to confirm your site&#8217;s security and https:\/\/ installation <\/h4>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Is SSL3 causing vulnerability on your site?  <\/strong><\/h3>\n\n\n\n<p class=\"has-medium-font-size\">I was disappointed to discover SSL Labs rated my site with a <strong>B<\/strong> after all that work!  No worries.  To boost your SSL Labs rating to an <strong>A<\/strong>, follow my tutorial <a href=\"https:\/\/abruptlycreative.com\/2020\/03\/24\/how-to-disable-sslv2-sslv3-protocols\/\">How to Disable SSL2 and SSL3 Protocols in a Sentora \/ CentOS \/ Apache Environment<\/a> tutorial.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I&#8217;m no webmaster. Any knowledge I have in web hosting, servers, or coding is from self-teaching and alot of trial and error. Along the way, I&#8217;ve learned a secure site<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"wprm-recipe-roundup-name":"","wprm-recipe-roundup-description":""},"categories":[55],"tags":[51,56,50,57],"_links":{"self":[{"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/posts\/197"}],"collection":[{"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/comments?post=197"}],"version-history":[{"count":1,"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/posts\/197\/revisions"}],"predecessor-version":[{"id":200,"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/posts\/197\/revisions\/200"}],"wp:attachment":[{"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/media?parent=197"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/categories?post=197"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/tags?post=197"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}