# Certbot - Install SSL

###### tags: `Ubuntu` `Technology`

> **Date**：2024/02/21
> **Taker**：Sin

## Installation

### Install Snap

  sudo apt install snapd

### Run the following commands to update Snap

  sudo snap install core
  sudo snap refresh core

### Remove any existing Certbot packages to avoid possible conflicts

  sudo apt-get remove certbot

### Install Certbot

  sudo snap install --classic certbot

### Configure a symbolic link to the Certbot directory

  sudo ln -s /snap/bin/certbot /usr/bin/certbot

## Usage

### Either get and install certificates

  sudo certbot --apache

### Delete SSL Certificate

  sudo certbot delete --cert-name {domain}

### Show the list of certificates

  sudo certbot certificates

### Renew certificates

  sudo certbot renew --dry-run

### Install certificates with wildcard domain

  sudo certbot certonly --apache --preferred-challenges=dns --server https://acme-v02.api.letsencrypt.org/directory --agree-tos -d '*.domain.com'

### Install certificates with wildcard domain in China (Custom Nginx)

#### Create a file named `authenticator.sh` in `/etc/letsencrypt/`

  sudo vim /etc/letsencrypt/authenticator.sh

#!/bin/bash

# Authenticator hook script for certbot
# This script should perform the necessary steps to authenticate domain ownership
# and fulfill the challenge specified by Let's Encrypt.

# Add your authentication logic here

# Example: Output the DNS challenge information
echo "DNS challenge information:"
echo "Domain: _acme-challenge.${CERTBOT_DOMAIN}"
echo "Token: ${CERTBOT_VALIDATION}"

# After completing the authentication, you may need to propagate the changes or perform other tasks.

#### Set the file permissions

  sudo chmod +x /etc/letsencrypt/authenticator.sh

#### Run the following command to install the SSL certificate

  sudo certbot certonly --manual --preferred-challenges=dns --manual-auth-hook /etc/letsencrypt/authenticator.sh --server https://acme-v02.api.letsencrypt.org/directory --agree-tos -d '*.domain.com'