{"id":1683,"date":"2019-11-20T22:12:30","date_gmt":"2019-11-21T03:12:30","guid":{"rendered":"http:\/\/matthannan.net\/blog\/?p=1683"},"modified":"2019-11-20T22:12:31","modified_gmt":"2019-11-21T03:12:31","slug":"lets-encrypt-again-part-3","status":"publish","type":"post","link":"https:\/\/matthannan.net\/blog\/lets-encrypt-again-part-3\/","title":{"rendered":"Let’s Encrypt, again, Part 3"},"content":{"rendered":"\n

Another 3 months has past and I needed to renew my certs. The previous method for taking care of NycNyne is still a relatively simple one liner, but matthannan.net continues to be a nightmare. Well, a hassle, anyway.<\/p>\n\n\n\n

I went with the links in the Part 2 of this series and was mightily struggling with the first one. Wanna know why? I was updating the TXT record at NameCheap, not CloudFlare! I happened to recall that I moved my DNS servers to CloudFlare a while back.<\/p>\n\n\n\n

Anyway, the third link ran like a charm. I am going to put the command, run from a local instance of Debian, here, but all credit goes to the guy in Part 2.<\/p>\n\n\n\n

sudo .\/certbot-auto certonly --server https:\/\/acme-v02.api.letsencrypt.org\/directory --manual --preferred-challenges dns -d *.matthannan.net -d matthannan.net<\/code><\/pre>\n\n\n\n
I want to also remind my three months from now self about this little gem, that is displayed after you run this code:<\/p>\n\n\n\n
<\/p>To obtain a new or tweaked version of this certificate in the future, simply run certbot-auto again. To non-interactively renew *all* of your certificates, run:
 sudo certbot-auto renew <\/cite><\/blockquote>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
Another 3 months has past and I needed to renew my certs. The previous method for taking care of NycNyne is still a relatively simple one liner, but matthannan.net continues to be a nightmare. Well, a hassle, anyway. I went … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[5],"tags":[433,429,30,368,404,367,423],"class_list":["post-1683","post","type-post","status-publish","format-standard","hentry","category-geek","tag-certbot","tag-cloudflare","tag-dns","tag-lets-encrypt","tag-royal-pita","tag-ssl","tag-tls"],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p2NxlE-r9","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"jetpack-related-posts":[{"id":1664,"url":"https:\/\/matthannan.net\/blog\/use-cloudflare-as-dynamic-dns-with-raspberry-pi\/","url_meta":{"origin":1683,"position":0},"title":"Use Cloudflare as Dynamic DNS with Raspberry Pi","author":"matthannan","date":"19 October 2019","format":false,"excerpt":"This guy is like my spirit animal. Make Raspberry Pi automatically update a domain after your IP changes. Gain access to your home server from anywhere with Cloudflare as Dynamic DNS.Source: Use Cloudflare as Dynamic DNS with Raspberry Pi - Let's WP I set this up in just a few\u2026","rel":"","context":"In "Geek"","block_context":{"text":"Geek","link":"https:\/\/matthannan.net\/blog\/category\/geek\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1796,"url":"https:\/\/matthannan.net\/blog\/pi-hole-with-unbound\/","url_meta":{"origin":1683,"position":1},"title":"Pi-Hole with Unbound","author":"matthannan","date":"21 April 2020","format":false,"excerpt":"Going right to the top on DNS lookups. I am liking Cloudflare's offerings, but I want to try this solution out for a couple of days at least. https:\/\/docs.pi-hole.net\/guides\/unbound\/","rel":"","context":"In "Geek"","block_context":{"text":"Geek","link":"https:\/\/matthannan.net\/blog\/category\/geek\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1656,"url":"https:\/\/matthannan.net\/blog\/pi-hole-stuff\/","url_meta":{"origin":1683,"position":2},"title":"Pi-Hole Stuff","author":"matthannan","date":"29 September 2019","format":false,"excerpt":"I noticed that there were plenty of ads showing on my phone this morning, so I immediately started thinking that either the Pi-Hole Pi had an issue, or Pi-Hole itself was acting up. While reading the news, I saw that Pi-Hole is moving away from ad-block style filtering to straight\u2026","rel":"","context":"In "Geek"","block_context":{"text":"Geek","link":"https:\/\/matthannan.net\/blog\/category\/geek\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1605,"url":"https:\/\/matthannan.net\/blog\/lets-encrypt-again\/","url_meta":{"origin":1683,"position":3},"title":"Let’s Encrypt, again","author":"matthannan","date":"18 August 2019","format":false,"excerpt":"This has become buried at nycnyne.net, so I wanted to get this added here. Three more months and I am playing with Let's Encrypt at Namecheap again. I can get nycnyne.net working again with this one-liner and a copy\/paste the key to the cPanel. acme.sh --issue -d nycnyne.net -d www.nycnyne.net\u2026","rel":"","context":"In "Geek"","block_context":{"text":"Geek","link":"https:\/\/matthannan.net\/blog\/category\/geek\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2377,"url":"https:\/\/matthannan.net\/blog\/lets-encrypt-v3\/","url_meta":{"origin":1683,"position":4},"title":"Let’s Encrypt V3","author":"matthannan","date":"1 June 2022","format":false,"excerpt":"The Acme script that I use, like many people out there, to keep my Let's Encrypt TLS\/SSL certificate updated has recently had a breaking change of an upgrade. Namecheap, my hosting provider, is using an older version of OpenSSL. While this does not sound awesome, it is the upgrade from\u2026","rel":"","context":"In "Geek"","block_context":{"text":"Geek","link":"https:\/\/matthannan.net\/blog\/category\/geek\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1608,"url":"https:\/\/matthannan.net\/blog\/lets-encrypt-again-part-2\/","url_meta":{"origin":1683,"position":5},"title":"Let’s Encrypt, again, Part 2","author":"matthannan","date":"18 August 2019","format":false,"excerpt":"This site gave me a good starting point. I ran the commands in my WLS Debian instance and then uploaded the keys via cPanel copy & paste, per this site starting at Step 9. I am a little concerned about this, as matthannan.net is, basically, what everything runs off of,\u2026","rel":"","context":"In "Geek"","block_context":{"text":"Geek","link":"https:\/\/matthannan.net\/blog\/category\/geek\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/matthannan.net\/blog\/wp-content\/uploads\/2019\/08\/LE_mhnet.png?resize=350%2C200","width":350,"height":200},"classes":[]}],"_links":{"self":[{"href":"https:\/\/matthannan.net\/blog\/wp-json\/wp\/v2\/posts\/1683","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/matthannan.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/matthannan.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/matthannan.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/matthannan.net\/blog\/wp-json\/wp\/v2\/comments?post=1683"}],"version-history":[{"count":3,"href":"https:\/\/matthannan.net\/blog\/wp-json\/wp\/v2\/posts\/1683\/revisions"}],"predecessor-version":[{"id":1687,"href":"https:\/\/matthannan.net\/blog\/wp-json\/wp\/v2\/posts\/1683\/revisions\/1687"}],"wp:attachment":[{"href":"https:\/\/matthannan.net\/blog\/wp-json\/wp\/v2\/media?parent=1683"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/matthannan.net\/blog\/wp-json\/wp\/v2\/categories?post=1683"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/matthannan.net\/blog\/wp-json\/wp\/v2\/tags?post=1683"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}