<\/span><\/h2>\n\n\n\nBefore we install the certificate we need to install certbot software on our system<\/p>\n\n\n\n
sudo apt install certbot python3-certbot-apache -y<\/pre>\n\n\n\nThe next step is to obtain the certificate<\/p>\n\n\n\n
sudo certbot --apache<\/pre>\n\n\n\nIn the next few steps, you will be asked some questions while you install the Free Let’s Encrypt SSL certificate<\/p>\n\n\n\n
root@vps:~# sudo certbot --apache\nSaving debug log to \/var\/log\/letsencrypt\/letsencrypt.log\nPlugins selected: Authenticator apache, Installer apache\nEnter email address (used for urgent renewal and security notices) (Enter 'c' to\ncancel): admin@your_domain.com<\/b>\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nPlease read the Terms of Service at\nhttps:\/\/letsencrypt.org\/documents\/LE-SA-v1.2-November-15-2017.pdf. You must\nagree in order to register with the ACME server at\nhttps:\/\/acme-v02.api.letsencrypt.org\/directory\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n(A)gree\/(C)ancel: A<\/b>\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nWould you be willing to share your email address with the Electronic Frontier\nFoundation, a founding partner of the Let's Encrypt project and the non-profit\norganization that develops Certbot? We'd like to send you email about our work\nencrypting the web, EFF news, campaigns, and ways to support digital freedom.\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n(Y)es\/(N)o: N<\/b>\n\nWhich names would you like to activate HTTPS for?\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n1: your_domain.com\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nSelect the appropriate numbers separated by commas and\/or spaces, or leave input\nblank to select all options shown (Enter 'c' to cancel): 1\nObtaining a new certificate\nPerforming the following challenges:\nhttp-01 challenge for your_domain.com<\/b>\nWaiting for verification...\nCleaning up challenges\nCreated an SSL vhost at \/etc\/apache2\/sites-available\/your_domain-le-ssl.conf<\/b>\nDeploying Certificate to VirtualHost \/etc\/apache2\/sites-available\/your_domain-le-ssl.conf<\/b>\nEnabling available site: \/etc\/apache2\/sites-available\/your_domain-le-ssl.conf<\/b>\n\nPlease choose whether or not to redirect HTTP traffic to HTTPS, removing HTTP access.\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n1: No redirect - Make no further changes to the webserver configuration.\n2: Redirect - Make all requests redirect to secure HTTPS access. Choose this for\nnew sites, or if you're confident your site works on HTTPS. You can undo this\nchange by editing your web server's configuration.\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nSelect the appropriate number [1-2] then [enter] (press 'c' to cancel): 2<\/b>\nRedirecting vhost in \/etc\/apache2\/sites-enabled\/your_domain.com<\/b>.conf to ssl vhost in \/etc\/apache2\/sites-available\/your_domain-le-ssl.conf<\/b>\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nCongratulations! You have successfully enabled https:\/\/your_domain.com\n<\/pre>\n\n\n\nLet’s say the limit for Let’s Encrypt is reached after multiple attempts and we are not able to install a certificate. Then we should wait for some time after we try again. This is the main purpose of this blog post, to use an alternative way to install a free SSL certificate and that way is to use free BuyPass or ZeroSSL.<\/p>\n\n\n\n
<\/span>Install Socat and Acme<\/span><\/h2>\n\n\n\nBefore we start installing the Free Let’s Encrypt SSL alternatives, we need to install some prerequisites on our server for fake web server and client support features:<\/p>\n\n\n\n
sudo apt install socat -y && sudo curl https:\/\/get.acme.sh | sh && source ~\/.bashrc<\/pre>\n\n\n\n<\/span>Install Free BuyPass SSL certificate<\/span><\/h2>\n\n\n\nCreate BuyPass.com account:<\/p>\n\n\n\n
acme.sh --server https:\/\/api.buypass.com\/acme\/directory --register-account --accountemail admin@your_domain.com<\/pre>\n\n\n\nYou should receive the following output:<\/p>\n\n\n\n
# root@vps:~# acme.sh --server https:\/\/api.buypass.com\/acme\/directory --register-account --accountemail admin@your_domain.com<\/b>\n[Thu 11 Nov 2021 11:42:54 AM UTC] Create account key ok.\n[Thu 11 Nov 2021 11:42:55 AM UTC] Registering account: https:\/\/api.buypass.com\/acme\/directory\n[Thu 11 Nov 2021 11:42:58 AM UTC] Registered\n[Thu 11 Nov 2021 11:42:59 AM UTC] ACCOUNT_THUMBPRINT='vOwTA7qCPKft4BWy0gkmEAD0Dpfbl5OuGRC5zUjBGgM<\/pre>\n\n\n\nNext step is to generate the BuyPass free SSL using acme.sh<\/p>\n\n\n\n
acme.sh --issue --standalone -d your_domain.com<\/b> --server https:\/\/api.buypass.com\/acme\/directory<\/pre>\n\n\n\nYou should receive the following output:<\/p>\n\n\n\n
root@vps:~# acme.sh --issue --standalone -d your_domain.com<\/b> --server https:\/\/api.buypass.com\/acme\/directory\n[Thu 11 Nov 2021 11:45:50 AM UTC] Using CA: https:\/\/api.buypass.com\/acme\/directory\n[Thu 11 Nov 2021 11:45:50 AM UTC] Standalone mode.\n[Thu 11 Nov 2021 11:45:50 AM UTC] Creating domain key\n[Thu 11 Nov 2021 11:45:51 AM UTC] The domain key is here: \/root\/.acme.sh\/your_domain.com<\/b>\/your_domain.com<\/b>.key\n[Thu 11 Nov 2021 11:45:51 AM UTC] Single domain='your_domain.com<\/b>'\n[Thu 11 Nov 2021 11:45:51 AM UTC] Getting domain auth token for each domain\n[Thu 11 Nov 2021 11:45:58 AM UTC] Getting webroot for domain='your_domain.com<\/b>'\n[Thu 11 Nov 2021 11:45:59 AM UTC] Verifying: your_domain.com<\/b>\n[Thu 11 Nov 2021 11:45:59 AM UTC] Standalone mode server\n[Thu 11 Nov 2021 11:46:04 AM UTC] Success\n[Thu 11 Nov 2021 11:46:04 AM UTC] Verify finished, start to sign.\n[Thu 11 Nov 2021 11:46:05 AM UTC] Lets finalize the order.\n[Thu 11 Nov 2021 11:46:05 AM UTC] Le_OrderFinalize='https:\/\/api.buypass.com\/acme\/order\/YRsxSMk6P5zbryxUWTA6FFy4UfT0YScFAuG75YtJjpQ\/finalize'\n[Thu 11 Nov 2021 11:46:11 AM UTC] Downloading cert.\n[Thu 11 Nov 2021 11:46:11 AM UTC] Le_LinkCert='https:\/\/api.buypass.com\/acme-v02\/cert\/ffNgivH34nQ'\n[Thu 11 Nov 2021 11:46:13 AM UTC] Cert success.\n-----BEGIN CERTIFICATE-----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\n\/FYz4ToP5GfN1UgYGDnkGguFw\/MmUBPNpvZUGbNR0lO+MPgTdw==\n-----END CERTIFICATE-----\n[Thu 11 Nov 2021 11:46:13 AM UTC] Your cert is in: \/root\/.acme.sh\/your_domain.com<\/b>\/your_domain.com<\/b>.cer\n[Thu 11 Nov 2021 11:46:13 AM UTC] Your cert key is in: \/root\/.acme.sh\/your_domain.com<\/b>\/your_domain.com<\/b>.key\n[Thu 11 Nov 2021 11:46:13 AM UTC] The intermediate CA cert is in: \/root\/.acme.sh\/your_domain.com<\/b>\/ca.cer\n[Thu 11 Nov 2021 11:46:13 AM UTC] And the full chain certs is there: \/root\/.acme.sh\/your_domain.com<\/b>\/fullchain.cer\n<\/pre>\n\n\n\nWhere your_domain.com<\/b> will be your real domain and real paths to the certificate<\/p>\n\n\n\n