deb/apache-letsencrypt.bash
changeset 37 f2b49f2d087b
parent 36 dc0a281349d1
child 38 5c3fb23b9208
equal deleted inserted replaced
36:dc0a281349d1 37:f2b49f2d087b
    31 # python3-certbot-apache - Apache plugin for Certbot
    31 # python3-certbot-apache - Apache plugin for Certbot
    32 
    32 
    33 # systemctl reload apache2
    33 # systemctl reload apache2
    34 # sudo certbot --apache --agree-tos --redirect -m youremail@email.com -d domainname.com -d www.domainname.com
    34 # sudo certbot --apache --agree-tos --redirect -m youremail@email.com -d domainname.com -d www.domainname.com
    35 
    35 
       
    36 # apt download python3-certbot-apache
       
    37 #   /usr/lib/python3/dist-packages/certbot_apache/_internal/tls_configs/current-options-ssl-apache.conf
       
    38 #   /usr/lib/python3/dist-packages/certbot_apache/_internal/tls_configs/old-options-ssl-apache.conf
    36 cat >/srv/www/letsencrypt/apache-ssl-options.conf <<EOF
    39 cat >/srv/www/letsencrypt/apache-ssl-options.conf <<EOF
    37 SSLEngine on
    40 SSLEngine on
    38 SSLProtocol             all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
    41 SSLProtocol             all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
    39 SSLOptions +StrictRequire
    42 SSLOptions +StrictRequire
    40 
    43