AWS – LetsEncrypt SSL AutoRenew



  1. Install LetsEncrypt

    sudo mkdir /opt/bitnami/letsencrypt

    cd /opt/bitnami/letsencrypt

    sudo wget https://dl.eff.org/certbot-auto

    sudo chmod a+x ./certbot-auto

    sudo ./certbot-auto

  2. Stop the apache server

    sudo /opt/bitnami/ctlscript.sh stop

  3. Start lets encrypt

    cd /opt/bitnami/letsencrypt

    sudo ./certbot-auto certonly --standalone -d DOMAIN -d www.DOMAIN

  4. Update certificate links

    sudo mv /opt/bitnami/apache2/conf/server.crt /opt/bitnami/apache2/conf/server.crt.old

    sudo mv /opt/bitnami/apache2/conf/server.key /opt/bitnami/apache2/conf/server.key.old

    sudo mv /opt/bitnami/apache2/conf/server.csr /opt/bitnami/apache2/conf/server.csr.old

    sudo ln -s /etc/letsencrypt/live/DOMAIN/privkey.pem /opt/bitnami/apache2/conf/server.key

    sudo ln -s /etc/letsencrypt/live/DOMAIN/fullchain.pem /opt/bitnami/apache2/conf/server.crt

  5. Update permissions

    sudo chown root:root /opt/bitnami/apache2/conf/server*

    sudo chmod 600 /opt/bitnami/apache2/conf/server*

  6. Test Auto renewal

    cd /opt/bitnami/letsencrypt

    sudo ./certbot-auto renew

  7. Add auto renewal cron job

    sudo crontab -e

  8. Add the following lines

    24 0 * * * /opt/bitnami/letsencrypt/certbot-auto renew
    16 12 * * * /opt/bitnami/letsencrypt/certbot-auto renew
    30 1 * * 7 /opt/bitnami/ctlscript.sh restart apache

  9. Open bitnami conf

    This is the htaccess equivalent

    nano /opt/bitnami/apache2/conf/bitnami/bitnami.conf

  10. Drop www.

    Under VirtualHost _default_:443

    RewriteEngine On
    RewriteCond %{HTTP_HOST} ^www\.(.*)$ [NC]
    RewriteRule ^/?(.*)$ https://%1$1 [R=permanent,L]

  11. Force https://

    Under VirtualHost _default_:80

    RewriteEngine On
    RewriteCond %{SERVER_PORT} 80
    RewriteRule ^(.*)$ https://pp.pinkpanda.com.au/$1 [R,L]

  12. Start the server

    sudo /opt/bitnami/ctlscript.sh start

Other Process Documents