LetsEncrypt SSL for Node.js - Installation and Renewal

Challenges.txt

- In Standalone phase, one will be asked to clear "TLS-SNI-01 challenge". This can be made valid only by enabling HTTP mode.

CreateSSL.txt

$ certbot --version (Check the version of the bot, useful in case the config changes with versions)
$ certbot certificates (Check the latest certificates)
$ sudo certbot certonly
-> 1 (Standalone Server)
-> Enter domain example.com
$ sudo certbot certonly --standalone -d example.com -d www.example.com (Standalone Mode)

DeleteSSL.txt

$ certbot delete --cert-name example.com (In case you simply want to delete due to testing / staging reasons)

InstallationSSL.txt

# Valid for Ubuntu 14.X
$ sudo apt-get update
$ sudo apt-get install software-properties-common
$ sudo add-apt-repository ppa:certbot/certbot
$ sudo apt-get update
$ sudo apt-get install certbot 

LetsEncryptSSL (certbot) - Introduction.txt

Let’s Encrypt is a free, automated, and open Certificate Authority.

https://letsencrypt.org/

RenamingDomainsSSL.txt

$ certbot certonly --cert-name example.com -d example.com

RenewSSL.txt

$ sudo certbot renew --dry-run (Simulate renew)
certbot renew 

RevokingSSL.txt

$ certbot revoke --cert-path /etc/letsencrypt/live/CERTNAME/cert.pem --reason keycompromise (In case the key has been comprimised)

Troubleshooting.txt

-> 1. In standalone mode "Problem binding to port 443: Could not bind to IPv4 or IPv6."
---> The port 443 seems to be unbinable, hence we need to check if it blocked by some application?

- $ netstat -tpln
-> if the outcome is "tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 13807/httpd", then simply stop the app and retry.