DEV Community

Cover image for How to enable HTTPS with acme-client
manuel
manuel

Posted on • Originally published at wildauer.io on

How to enable HTTPS with acme-client

#openbsd #httpd #privacy

Populate /etc/acme-client.conf and replace example.com with your domain

authority letsencrypt {
  api url "https://acme-v01.api.letsencrypt.org/directory"
  account key "/etc/acme/letsencrypt-privkey.pem"
}
authority letsencrypt-staging {
  api url "https://acme-staging.api.letsencrypt.org/directory"
  account key "/etc/acme/letsencrypt-staging-privkey.pem"
}
domain example.com {
  alternative names { example.com }
  domain key "/etc/ssl/private/example.com.key"
  domain certificate "/etc/ssl/example.com.crt"
  domain full chain certificate "/etc/ssl/example.com.pem"
  sign with letsencrypt
}
Enter fullscreen mode Exit fullscreen mode

Create directories

mkdir -p -m 700 /etc/acme
mkdir -p -m 700 /etc/ssl/acme/private
mkdir -p -m 755 /var/www/acme
Enter fullscreen mode Exit fullscreen mode

Populate /etc/httpd.conf

server "example.com" {
  listen on * port 80
  root "/htdocs/example.com"
  location "/.well-known/acme-challenge/*" {
    root { "/acme", strip 2 }
  }
}
Enter fullscreen mode Exit fullscreen mode

Check the configuration and restart httpd

httpd -n
Enter fullscreen mode Exit fullscreen mode

When everything looks ok, restart httpd

rcctl restart httpd
Enter fullscreen mode Exit fullscreen mode

Run the acme-client

acme-client -vAD example.com
Enter fullscreen mode Exit fullscreen mode

Now enable HTTPS and restart httpd

Populate /etc/httpd.conf and add a new server section for HTTPS

server "example.com" {
  listen on * tls port 443
  root "/htdocs/example.com"
  tls {
    certificate "/etc/ssl/example.com.pem"
    key "/etc/ssl/private/example.com.key"
  }
  location "/.well-known/acme-challenge/*" {
    root { "/acme", strip 2 }
  }
}
Enter fullscreen mode Exit fullscreen mode

Check the configuration and restart httpd

httpd -n
Enter fullscreen mode Exit fullscreen mode

and

rcctl restart httpd
Enter fullscreen mode Exit fullscreen mode

Now you should reach your website over HTTPS

Top comments (0)

Read next

peterlidee profile image

5. Mocking usePathName, useSearchParams and useRouter with Jest in Next 15

Peter Jacxsens -

per-starke-642 profile image

My Journey to Creating a Supportive Community for Freelancers & Small Business Owners - #1: The Vision

Per Starke -

jaiminbariya profile image

Basic SQL Question for Interview, everyone should know

Jaimin Bariya -

peterlidee profile image

3. How to setup Jest in a Next 15 project (+ eslint for testing)

Peter Jacxsens -