Install Certbot
#change to our home directory cd # Download and install the "Extra Packages for Enterprise Linux (EPEL)" wget -O epel.rpm –nv https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm sudo yum install -y ./epel.rpm # Install certbot for Apache (part of EPEL) sudo yum install python2-certbot-apache.noarch # Create a dummy ssl certificate. This will not become part of your ssl strategy. # You only need to install it because of default settings in Apache ssl configuration sudo /etc/pki/tls/certs/make-dummy-cert localhost.crt sudo service httpd restart
2. Execute certbot
# Launch the certbot installer with the following parameters: # -i apache Use the Apache installer. # -a manual Authenticate domain ownership manually. # --preferred-challenges dns Use DNS TXT records for authentication challenge. # -d test.example.com Specify the domain for the SSL/TLS certificate. sudo certbot -i apache -a manual --preferred-challenges dns -d ssl.example.com