Cara Install SSL Let’s Encrypt dengan Nginx di FreeBSD
Selain mendukung sistem operasi berbasis Linux, Let’s Encrypt juga mendukung sistem operasi FreeBSD. Tutorial ini membahas install Let’s Encrypt untuk Nginx web server di FreeBSD.
0. Perangkat yang Digunakan
Tutorial ini menggunakan:
1. Install Let’s Encrypt
Install certbot nginx.
1 | pkg install py22-certbot-nginx |
Generate sertifikat SSL.
1 | certbot --nginx -d kliros.tk -d www.kliros.tk |
Jawab pertanyaan yang ditampilkan.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 | Enter email address (used for urgent renewal and security notices) (Enter 'c' to cancel): hai@musaamin.web.id Please read the Terms of Service at https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must agree in order to register with the ACME server at https://acme-v02.api.letsencrypt.org/directory - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - (A)gree/(C)ancel: A Would you be willing to share your email address with the Electronic Frontier Foundation, a founding partner of the Let's Encrypt project and the non-profit organization that develops Certbot? We'd like to send you email about our work encrypting the web, EFF news, campaigns, and ways to support digital freedom. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - (Y)es/(N)o: N Please choose whether or not to redirect HTTP traffic to HTTPS, removing HTTP access. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 1: No redirect - Make no further changes to the webserver configuration. 2: Redirect - Make all requests redirect to secure HTTPS access. Choose this for new sites, or if you're confident your site works on HTTPS. You can undo this change by editing your web server's configuration. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2 Congratulations! You have successfully enabled https://kliros.tk and https://www.kliros.tk You should test your configuration at: https://www.ssllabs.com/ssltest/analyze.html?d=kliros.tk https://www.ssllabs.com/ssltest/analyze.html?d=www.kliros.tk |
2. Pengujian
Mengakses domain kliros.tk, harus bisa https dan otomatis redirect dari http ke https.
Menguji konfigurasi melalui SSL Labs.
Selamat mencoba 🙂
