free-ssl

This script will help you to generate a trusted SSL certificate issued by Let's Encrypt using certbot for your Shift node.

Prerequisites

In order to complete this script, you will need:

• Have a working Shift instance
• Your own domain. You can get a free one for one year at dot.tk
  • Your domain will look something like this --> subdomain.domain.tk
• An A Record that points your domain to the public IP address of your server
• To know your network interface
  • Run ifconfig and write it down (normally it is eth0, eth1, eth2, ens1, ens2, ens3...)
    

Install Let's Encrypt certificate

First of all you'll need to clone this repository:

cd ~
git clone https://github.com/nytrobound/free-ssl.git
cd free-ssl

To generate and install the trusted SSL certificate, run: bash installssl.sh
The script will guide you through the installation process.

Renew Let's Encrypt certificate

renewssl.sh checks the expiring date of your certificate and renew it, if the expiration date is less than 30 days. However, you will need to add a cronjob with crontab -e to automatically execute the script.

Make sure to replace $SSLUSER with the username you ran the script on!

Example:* 12 * * WED bash /home/$SSLUSER/free-ssl/start_renew.sh >> /home/$SSLUSER/free-ssl/logs/cron.log
This cronjob checks and renews your SSL certificate every Wednesday at 12pm.

You can also use Crontab Generator to generate a custom cronjob.

Links

Documentation: https://certbot.eff.org/docs
Software project: https://github.com/certbot/certbot
Notes for developers: https://certbot.eff.org/docs/contributing.html
Main Website: https://certbot.eff.org
Let's Encrypt Website: https://letsencrypt.org
Community: https://community.letsencrypt.org
ACME spec: http://ietf-wg-acme.github.io/acme/
ACME working area in github: https://github.com/ietf-wg-acme/acme

Original script: https://github.com/mrgrshift/free-ssl.git