{"id":5044,"date":"2018-12-10T20:05:35","date_gmt":"2018-12-10T19:05:35","guid":{"rendered":"https:\/\/monodes.com\/predaelli\/?p=5044"},"modified":"2018-12-10T16:13:17","modified_gmt":"2018-12-10T15:13:17","slug":"dehydrated-a-bash-client-for-lets-encrypt-antoine-aflalo","status":"publish","type":"post","link":"https:\/\/monodes.com\/predaelli\/2018\/12\/10\/dehydrated-a-bash-client-for-lets-encrypt-antoine-aflalo\/","title":{"rendered":"Dehydrated: a bash client for Let’s Encrypt – Antoine Aflalo"},"content":{"rendered":"

\"\"\/<\/a>Tutorial on how to use Dehydrated, a bash client for Let’s Encrypt ACME Protocol. Dehydrated helps you take care of your SSL certificates.<\/p><\/blockquote>\n

Source: Dehydrated: a bash client for Let’s Encrypt – Antoine Aflalo<\/a><\/em><\/p>\n

<\/p>\n

\n
\n

Dehydrated: a bash client for Let\u2019s Encrypt<\/a><\/h1>\n<\/div>\n
\"\"<\/div>\n
\n

Dehydrated was firstly known as letsencrypt.sh but because letsencrypt is a trademark, they decided to rename the project, but keep the excellent features.<\/p>\n

Purpose<\/span><\/h1>\n
If you\u2019re already familiar with let\u2019s encrypt and the ACME protocol, you can go directly to the next section on how to use Dehydrated.<\/sub><\/div>\n

Let\u2019s encrypt give you the possibility to automatize the creation and renewal of SSL certificate. Those certificates and keys can be used for anything that uses SSL protocol like to activate https on your website, TLS on your SMTP\/IMAP server, etc \u2026 everywhere you can use an SSL cert; you can use let\u2019s encrypt.<\/p>\n

Let\u2019s Encrypt is an authorised CA which mean all the certificate generated by it are considered verified and will be recognised as it by the different clients (browser, email client, etc \u2026). This is one of the biggest advantages against self-signed certificates, and your users won\u2019t have to bypass a security warning or add a security exception.<\/p>\n

Not only the generated certificate are valid, but let\u2019s encrypt is an entirely automatize protocol, there is no need of human interaction to create and renew a certificate, all you need is a client compatible with the ACME protocol, and that were Dehydrated enter.<\/p>\n

Dehydrated<\/span><\/h1>\n

Install<\/span><\/h2>\n

Either you take one of the release packages, or you clone the repository. I advise creating a symlink after to \/usr\/local\/sbin\/dehydrated<\/code> it\u2019s easier like this for setting the cronjob after. You also need to have the OpenSSL package installed for dehydrated to work. You also need a web server, Apache or Nginx will do fine.<\/p>\n

\n
\n

lukas2511<\/a> \/ dehydrated<\/strong><\/a> <\/span><\/h2>\n<\/header>\n
\n

letsencrypt\/acme client implemented as a shell-script \u2013 just add water<\/p>\n

https:\/\/dehydrated.io<\/strong><\/a><\/p>\n<\/section>\n