joecap5
joecap5

Reputation: 167

Let's Encrypt via certbot on Shared Linux Server

Trying to install an SSL certificate on my shared hosting (Linux/cPanel at JustHost) server using Let's Encrypt. It's running Apache CentOS 6.4.

I do have SSH access so used the certbot. It downloaded to the server but I couldn't run it.

Looks like there are various manual options.

Wondering if anyone got one of these manual options or certbot to run on justhost.

I'm using a shared server so issue may be that I don't have root access.

Upvotes: 4

Views: 976

Answers (1)

ximaera
ximaera

Reputation: 2468

I assume you aren't really able to run your own commands on the remote server but have got the FTP account to upload files to the server and a limited SSH/SCP access to e.g. reload the HTTP server after the certificates were updated.

If this is true, you might wish to use getssl instead of certbot. getssl allows using an FTP server as a destination to place ACME challenges. The README for the project is really well written and pretty much covers it all, but to get a rough idea on how it would work: for your Web site (let's say it's http://example.com/) you'll need to create a file ~/.getssl/example.com/getssl.cfg with the following contents:

PRIVATE_KEY_ALG="rsa"

# Acme Challenge Location.
# If these start with ftp: then the next variables are ftpuserid:ftppassword:servername:ACL_location
ACL=('ftp:ftpuserid:ftppassword:${DOMAIN}:/web/.well-known/acme-challenge')

# Location for all your certs
DOMAIN_CERT_LOCATION="ssh:sshuserid@server5:/etc/ssl/domain.crt"
DOMAIN_KEY_LOCATION="ssh:sshuserid@server5:/etc/ssl/domain.key"

# The command needed to reload apache / nginx or whatever you use.
RELOAD_CMD="ssh:sshuserid@server5:service apache2 reload"

Upvotes: 1

Related Questions