Fast, Easy and Free SSL Certificates with Let's Encrypt - Hak5 2023

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:
____________________________________________
Setting up Let's Encrypt Certificates, and understanding TLS / SSL. This time on Hak5!
-------------------------------
------------------------------

Commands:
pwd
chmod a+x certbot-auto
/root/certbot-auto
/root/certbot-auto --apache

/root/certbot-auto renew --dry-run

crontab -e
/root/certbot-auto renew --quiet --no-self-upgrade

15 4 * * * /root/certbot-auto renew --quiet --no-self-upgrade

-~-~~-~~~-~~-~-
Please watch: "Bash Bunny Primer - Hak5 2225"
-~-~~-~~~-~~-~-
____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

[DimusTech]

As an IT person who manages lots of SSL certificates on many websites at work I never thought there are such cool free and automatic tools. Thanks for those!

[iamfrankstallone]

Never knew about you guys but wanted to find out more about Let's Encrypt. You're video was incredibly thorough in exactly the way I was looking for. Well done with the overall production of your videos. =)

[rydohg]

I found this last month and its great. I'm glad you are telling people about it.

[whackahost]

So awesome! Was spending a fortune on SSL certs! About time!

[MilesWilsondreamteam]

I have been using let's encrypt for a while now and it's great!

[TUnit]

Been using it since the beta started last fall. Good stuff and I even score better than my bank's login on the SSLLabs test.

[omgwtfbbqalekx]

1:24
Shannon: "pokem..."
Darren: "NO."
loved it.

[notpublic]

I have wanted to learn more about this for a while. I tried to make one a while back and failed due to several N00b mistakes. thanks for the videos guys. oh and yes I do give you dem loves on your patreon. keep up the good work.

[SanAltGaming]

How will this work with multiple existing sites? What about multiple domains? Will this overwrite my /etc/apache2/sites-available/ files?

[METRIX]

love the show as always guys keep up the good work

[JustinHyneswashplant]

That was so easy, great video, and kind destroys the whole reason why it is supposed to be secure. Thank you :)

[blacknoirschwarz]

Great episode! Dnssec would probably also be good topic to cover.

[MilesWilsondreamteam]

Dreamhost has one-click installs of let's encrypt certificates, I would recommend it

[JoanNin]

Nice! glad i find this channel good content and easy to digest

[dergrunepunkt]

I administered Squid proxy servers for quite some time and SSL/TLS connections can't cached by proxy servers because they are actually more or less a NAT connection, unless you do a MAN-IN-THE-MIDDLE or unless you're reverse-proxy. I assume that's Facebook's reason to not to allow SSL/TLS.

[woodrowwiIsn]

it'd be cool if you could show this on debian with nginx...heh...anyway thank you for the episode! motivated me to do some research!

[PJBrunet]

As far as the crontab, I also recommend restarting the webserver, otherwise you're not using the renewed cert.

[JamesSalomon]

I love this channel!!! So informative.

[Downloader]

Thanks for the awesome show, any simple tips for using certbot/LetsEncrypt on regular webhosting services that donot have ssh access?

[bigyadiel]

OMG I WANT THAT SHIRT!! CATS WITH LIGHT-SABERS!!