Enabling SSL/TLS

Adding SSL/TLS ensures that the exchange is encrypted between the server and the client.

Installation

sudo apt install certbot python3-certbot-apache

Adjusting the firewall

sudo ufw allow 'Apache Full'
sudo ufw delete allow 'Apache'

SSL/TLS certificate

Get a SSL/TLS certificate with Let's Encrypt:

sudo certbot --apache

Since this is the first run, we answer a series of question:

  • Enter email and validate with Enter
  • Accept Let's Encrypt ToS with Y + Enter
  • Share our email with the EFF? The answer is up to you.
  • Finally, we see this screen:
Which names would you like to activate HTTPS for?
We recommend selecting either all domains, or all domains in a VirtualHost/server block.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: grav.howto.ovh
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter 'c' to cancel):

Type 1 and Enter to install the certificate.