go-certbot

A npx-able repo to invoke certbot to do its thing.

TL; DR

To create a cert for my.example.com:

npx github:briancsparks/go-certbot example.com my.example.com [email protected]
ls -l ~/.go-certbot/certs/config/live/my.example.com

Details

Uses Let's Encrypt (certbot) to generate a server certificate for your subdomain. For example, my.example.com, using Route-53 as the DNS challenge responder.

• Uses AWS Route-53 to prove to certbot that you control the owning domain (example.com.)
  • So, obviously, you must own the domain and manage it with Route-53.
  • You must have AWS credentials setup on the machine running go-certbot.
• Must have certbot installed. If not, see below.

Installing certbot

Ubuntu:

sudo apt-add-repository -y ppa:certbot/certbot
sudo apt-get update
sudo apt-get install -y certbot

Results

The results are put into ~/.go-certbot/...

• The cert: ~/.go-certbot/certs/config/live/my.example.com/fullchain.pem
• The key: ~/.go-certbot/certs/config/live/my.example.com/privkey.pem

Other

The commands that I always end up needing next are at:

• https://www.sslshopper.com/article-most-common-openssl-commands.html
• https://www.sslshopper.com/ssl-converter.html