Topic: Let's Encrypt for Apache :: How-To mod_md

[Steffen]

# Uncomment in your httpd.conf
LoadModule watchdog_module modules/mod_watchdog.so
LoadModule md_module modules/mod_md.so

# Configuration
see http://httpd.apache.org/docs/2.4/mod/mod_md.html
and
Far better https://github.com/icing/mod_md/blob/master/README.md

You need at least:
MDCertificateAgreement accepted
MDomain .... .....

In the :443 VirtualHost(s), turn on mod_ssl:
SSLEngine on


Normally, certificates are valid for around 90 days and mod_md will renew them the earliest 30 days before they expire.

You can set for example every 10 days: MDRenewWindow 80d

When testing, consider the rate limits: https://letsencrypt.org/docs/rate-limits/
If you need to experiment and not to hit the limits, configure :
MDCertificateAuthority https://acme-staging-v02.api.letsencrypt.org/directory . Then no valid certificates are generated.

To get more insight what is going on, set: LogLevel info md:trace2 ssl:notice



Enjoy,

Steffen

[Steffen]

Maybe you have already noticed that mod_md can now automatically stop/start Apache to activate after a (re)new.

A discussion with the author stefan from greenbytes resulted in a new directive MDNotifyCmd : https://httpd.apache.org/docs/trunk/mod/mod_md.html#mdnotifycmd

Now with a simple script you can do what you want.
For example I have now a .bat and mailsend in the Apache/folder:

[Steffen]

Updated the start post.

Also there is now MDMessageCmd https://github.com/icing/mod_md/blob/master/README.md#mdmessagecmd

Very handy

I use a script to send a mail:

[Steffen]

Forget to tell:

There is also better monitoring.

server-status : mod_md info is added

md-status : info JSON format

certificate-status : info about current and upcoming certificates on a domain.

See all at https://github.com/icing/mod_md/blob/master/README.md#monitoring

[nono303]

my 2 cents, same notification for a mattermost hook url (what I use)