Certbot


Installation

sudo apt install python3-certbot-apache
sudo a2enmod ssl
sudo systemctl restart apache2
sudo certbot --apache -d tbruchet.fr -d hugo.tbruchet.fr -d www.tbruchet.fr

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator apache, Installer apache
Requesting a certificate for tbruchet.fr and hugo.tbruchet.fr and www.tbruchet.fr
Created an SSL vhost at /etc/apache2/sites-available/tbruchet-le-ssl.conf
Deploying Certificate to VirtualHost /etc/apache2/sites-available/tbruchet-le-ssl.conf
Enabling available site: /etc/apache2/sites-available/tbruchet-le-ssl.conf
Created an SSL vhost at /etc/apache2/sites-available/tbruchet-le-ssl.conf
Deploying Certificate to VirtualHost /etc/apache2/sites-available/tbruchet-le-ssl.conf
Redirecting vhost in /etc/apache2/sites-enabled/tbruchet.conf to ssl vhost in /etc/apache2/sites-available/tbruchet-le-ssl.conf
Redirecting vhost in /etc/apache2/sites-enabled/tbruchet.conf to ssl vhost in /etc/apache2/sites-available/tbruchet-le-ssl.conf

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Congratulations! You have successfully enabled https://tbruchet.fr and https://hugo.tbruchet.fr and -d https://www.tbruchet.fr
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:    /etc/letsencrypt/live/tbruchet.fr-0001/fullchain.pem
   Your key file has been saved at:    /etc/letsencrypt/live/tbruchet.fr-0001/privkey.pem
   Your certificate will expire on 2022-03-31. To obtain a new or tweaked version of this certificate in the future, simply run certbot again with the "certonly" option. To non-interactively renew *all* of your certificates, run "certbot renew" 
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le

Vérification du renouvellement

sudo certbot renew --dry-run