Managing a Website Certificate

sudo dnf install certbot

Creating a Certificate

sudo certbot certonly --manual -d cuneiform-lang.org,www.cuneiform-lang.org

The script will ask you to make a file available on the web server. The script provides you the locations of two information items: - fullchain.pem - privkey.pem

fullchain.pem contains two certificates. Store them in two separate files: cert.pem and ca.pem. View the content of the certificates using:

openssl x509 -in cert.pem -noout -text

Note that cert.pem is the certificate we want to set up and ca.pem is the upstream certificate that was used to create it.

Next, visit your web hoster (e.g., `kis.hosteurope.de`_). Navigate to the upload dialog, e.g., - Produktverwaltung - Webhosting - Konfigurieren - Sicherheit und SSL - SSL konfigurieren

Make sure to have a global certificate. If necessary, override that global certificate.

Extending a Certificate

To view the available certificates enter

sudo certbot certificates

To renew an available certificate follow the exact same procedure as for creating a certificate.