https://onnocenter.or.id/wiki/index.php?action=history&feed=atom&title=OpenSSL%3A_Membuat_CRT_dari_Let%27s_Encrypt_CA 2026-04-07T05:49:53Z Revision history for this page on the wiki MediaWiki 1.35.4 https://onnocenter.or.id/wiki/index.php?title=OpenSSL:_Membuat_CRT_dari_Let%27s_Encrypt_CA&diff=48445&oldid=prev 2017-06-07T14:14:50Z

<p>Created page with &quot;==Overview== Untuk memperoleh CRT free / gratisan, bisa melirik CA Let&#039;s Encrypt https://letsencrypt.org/ Di browser Firefox bisa dilihat di Preferences &gt; Advanced &gt; Cert...&quot;</p> <p><b>New page</b></p><div>==Overview==<br /> <br /> Untuk memperoleh CRT free / gratisan, bisa melirik CA Let's Encrypt <br /> <br /> https://letsencrypt.org/<br /> <br /> Di browser Firefox bisa dilihat di Preferences &gt; Advanced &gt; Certificates &gt; View Certificates &gt; Authorities. Let's Encrypt ada bawah<br /> <br /> Digital Signature Trust Co.<br /> DST Root CA X3<br /> Let's Encrypt Authority X3<br /> <br /> Berarti browser kita akan mengenali CRT yang di tanda tangani oleh Let's Encrypt.<br /> <br /> ==Cara Memperoleh CRT==<br /> <br /> Masuk ke<br /> <br /> https://certbot.eff.org/<br /> <br /> Pilih untuk<br /> <br /> * Apache<br /> * Ubuntu 16.04<br /> <br /> Maka yang perlu dilakukan di shell hanya<br /> <br /> sudo apt-get install software-properties-common<br /> sudo add-apt-repository ppa:certbot/certbot<br /> sudo apt-get update<br /> sudo apt-get install python-certbot-apache <br /> <br /> Buat CRT<br /> <br /> certbot --apache<br /> <br /> <br /> ==Renewal Certificate==<br /> <br /> Karena CRT hanya punya waktu 90 hari, harus di renew automatis. Bisa di dry-run dulu<br /> <br /> certbot renew --dry-run<br /> <br /> Jika sudah yakin, gunakan crontab -e (bisa seminggu sekali / sebulan sekali)<br /> <br /> certbot renew<br /> certbot renew --pre-hook &quot;service apache2 stop&quot; --post-hook &quot;service apache2 start&quot;<br /> <br /> <br /> <br /> <br /> ==Referensi==<br /> <br /> * https://certbot.eff.org/</div>

Onnowpurbo