In this article we will install certbot and get a SSL certificate on Rocky Linux 9 from Let’s encrypt including how to renew and delete them when needed.
Installation and getting certificate
Install certbot through dnf package manager.
dnf install certbotTo get only a certificate without web root.
certbot certonly -d DOAMIN.COM To get a certificate with web root.
certbot certonly --webroot -w /var/www/html -d DOAMIN.COMIf you are testing a website you can get a staging certificate which you can upgrade by running the above command later.
certbot certonly --test-cert --webroot -w /var/www/html -d DOAMIN.COMRenew
You can use cronjob to renew the certificates.
Cron job commands are, to list crontab -l, to edit crontab -e
30 04 * * * certbot renewThis will run at 4.30AM.
Delete
To delete a certificate you don’t need to remove directories like live/archive/renew etc anymore manually, just run the following command and you are good to go.
certbot delete --cert-name DOMAIN.COM
