ryanwold.net - Civic Tech, Bitcoin, and Open Government Innovation

Show

An entry

Get it down. Make it good. Share it.

Title

Text

## Let's Encrypt Stuff

* Get the Cert
  * clone the Github repo
  * run `./letsencrypt-auto certonly --standalone -d example.com -d www.example.com`
    * ensure your site responds to `/.well-known/acme-challenge...`
    * note: if you use multiple domains, you'll need to respond to each key. For rails, I have a route that responds conditionally to each key
  * find the `.pem` in `/etc/letsencrypt/live/example.com/fullchain.pem`
  * `cat` the `.key` text from `etc/letsencrypt/keys/0001_key-letsencrypt.pem`

## Pivotal Cloud Foundry Stuff

* add a domain
* add a ssl cert
  * upload the .pem and .key text from above into the "Manage" section of the SSL-Addon service in Pivotal Web Services
* create routes
  * `cf create-route my-space private-domain.com`
reference: https://docs.run.pivotal.io/devguide/deploy-apps/routes-domains.html#private-domains
 
## DNS Stuff

* update the CNAME of your webhost to point to the new SSL-enabled endpoint on PWS, example: `www.example.com-abcd1234.ssl.run.pivotal.io`

Status

Series