Difference between revisions of "ZeroSSL"
From Indie IT Wiki
Plittlefield (talk | contribs) |
Plittlefield (talk | contribs) |
||
| (4 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
| − | ZeroSSL is a Certificate Authority similar to [[Let's Encrypt]]. | + | [https://zerossl.com/ ZeroSSL] is a Certificate Authority similar to [[Let's Encrypt]]. |
However, in recent months - there have been a raft of issues and problems when the Let's Encrypt Root Certificates expired - leaving people stranded and old devices unable to connect. | However, in recent months - there have been a raft of issues and problems when the Let's Encrypt Root Certificates expired - leaving people stranded and old devices unable to connect. | ||
| Line 8: | Line 8: | ||
https://github.com/acmesh-official/acme.sh | https://github.com/acmesh-official/acme.sh | ||
| + | |||
| + | https://github.com/acmesh-official/acme.sh/wiki/Change-default-CA-to-ZeroSSL | ||
| + | |||
| + | https://github.com/acmesh-official/acme.sh/wiki/Server | ||
== Installation == | == Installation == | ||
| Line 13: | Line 17: | ||
git clone <nowiki>https://github.com/acmesh-official/acme.sh.git</nowiki> | git clone <nowiki>https://github.com/acmesh-official/acme.sh.git</nowiki> | ||
cd ./acme.sh | cd ./acme.sh | ||
| − | ./acme.sh --install -m my@example.com | + | ./acme.sh --install -m my@example.com --server zerossl |
| + | |||
| + | https://github.com/acmesh-official/acme.sh/wiki/Server | ||
== Scripts == | == Scripts == | ||
| − | Script to issue and renew a cert using Gandi LiveDNS | + | Script to issue and renew a cert using Gandi LiveDNS verification for an Emby Media Server ... |
#!/bin/bash | #!/bin/bash | ||
| Line 25: | Line 31: | ||
# cd /root/.acme.sh | # cd /root/.acme.sh | ||
| − | # ./acme.sh --issue --domain my.domain.com --dns dns_gandi_livedns | + | # ./acme.sh --issue --domain my.domain.com --dns dns_gandi_livedns --server zerossl |
# ./acme.sh --list | # ./acme.sh --list | ||
# ./acme.sh --to-pkcs12 --domain my.domain.com | # ./acme.sh --to-pkcs12 --domain my.domain.com | ||
Latest revision as of 10:53, 9 December 2021
ZeroSSL is a Certificate Authority similar to Let's Encrypt.
However, in recent months - there have been a raft of issues and problems when the Let's Encrypt Root Certificates expired - leaving people stranded and old devices unable to connect.
This solves that problem.
How to create free SSL Certificates using the Linux acme.sh script and the Certificate Authority (CA) of ZeroSSL.
https://github.com/acmesh-official/acme.sh
https://github.com/acmesh-official/acme.sh/wiki/Change-default-CA-to-ZeroSSL
https://github.com/acmesh-official/acme.sh/wiki/Server
Installation
git clone https://github.com/acmesh-official/acme.sh.git cd ./acme.sh ./acme.sh --install -m my@example.com --server zerossl
https://github.com/acmesh-official/acme.sh/wiki/Server
Scripts
Script to issue and renew a cert using Gandi LiveDNS verification for an Emby Media Server ...
#!/bin/bash # cd /root/.acme.sh # ./acme.sh --help # cd /root/.acme.sh # ./acme.sh --issue --domain my.domain.com --dns dns_gandi_livedns --server zerossl # ./acme.sh --list # ./acme.sh --to-pkcs12 --domain my.domain.com # cp -av my.domain.com/my.domain.com.pfx /opt/emby-server/my.domain.com.pfx # service emby-server restart # cd /root/.acme.sh # ./acme.sh --renew --domain my.domain.com # ./acme.sh --to-pkcs12 --domain my.domain.com # cp -av my.domain.com/my.domain.com.pfx /opt/emby-server/my.domain.com.pfx # service emby-server restart cd /root/.acme.sh && \ ./acme.sh --renew --domain my.domain.com && \ ./acme.sh --to-pkcs12 --domain my.domain.com && \ cp -av my.domain.com/my.domain.com.pfx /opt/emby-server/my.domain.com.pfx && \ service emby-server restart && \ exit;
