147
edits
Changes
Jump to navigation
Jump to search
mLine 107:
Line 107: − + − source /opt/rh/python27/enable − export X_SCLS="`scl enable python27 'echo $X_SCLS'`" Line 119:
Line 117: − {{Note box| The above commands enable Python 2.7, but do not disable it again. In general we need to examine the effect of using SCL Python 2.7 on production servers where the default Python version is being used.}}+ + Line 128:
Line 127: − +
→Renewal of the certificates: call script with scl enable python27, removed scl lines from script
As part of the security of Letsencrypt the certificates must be renewed every 3 months.
As part of the security of Letsencrypt the certificates must be renewed every 3 months.
The following script will automatically renew your certificate. Save it in a convenient place, for example, /opt/letsencrypt-renew.sh;don't forget to chmod +x the file
The following script will automatically renew your certificate. Save it in a convenient place, for example, /opt/letsencrypt-renew.sh, and make sure to make it executable (chmod +x).
#!/bin/bash
#!/bin/bash
/sbin/service httpd-e-smith stop
/sbin/service httpd-e-smith stop
/opt/letsencrypt/letsencrypt-auto certonly --standalone --renew-by-default --email me@mydomain.co.uk \
/opt/letsencrypt/letsencrypt-auto certonly --standalone --renew-by-default --email me@mydomain.co.uk \
/sbin/e-smith/signal-event ibay-modify
/sbin/e-smith/signal-event ibay-modify
Call this script by running
# scl enable python27 '/opt/letsencrypt-renew.sh'
You may want to set this up as a cron job to run every two months, to make sure your certificate doesn't expire. Please see '''[[Crontab_Manager]]''' contrib for an easy way to achieve this. Or, to set this from the command line, do the following:
You may want to set this up as a cron job to run every two months, to make sure your certificate doesn't expire. Please see '''[[Crontab_Manager]]''' contrib for an easy way to achieve this. Or, to set this from the command line, do the following:
The following example will run the renewal script at 22:48 on the third of every other month (Jan, Mar, May, etc.):
The following example will run the renewal script at 22:48 on the third of every other month (Jan, Mar, May, etc.):
48 22 3 */2 * root /opt/letsencrypt-renew.sh
48 22 3 */2 * root scl enable python27 '/opt/letsencrypt-renew.sh'
then expand and restart
then expand and restart