How to Install a Free SSL Certificate with Let's Encrypt (on Nginx and Apache websites)

Learn how to install a free Let's Encrypt SSL certificate with Certbot for your website on an Apache or Nginx web server. Although this video tutorial demonstrates how to do this with WordPress on an Ubuntu Linode server, the same concept applies on pretty much any other web hosting provider where you have ssh root access and a domain name.
One-click WordPress installs from $5/mo 👉 ttt.do/LinodeL... ($100 free credit applied after sign up with my affiliate link)
Find more at tonyteaches.tech
Check out my vlog channel ‪@TonyFlorida‬
#letsencrypt #certbot #wordpress #linode

[@thodorispaparrigopoulos8542]

Essentially after you have set up your nginx or apache server you execute 1) sudo apt install certbot python3-certbot-nginx 2) sudo certbot --nginx (dash dash) You fill the questions being asked and then it is automated to update the nginx configuration file and then you are good to go! Thanks a lot for your video. Saved me hours of searching.

[@sserwangabenam9273]

Do you mean we do not need to setup automated renewal after running those codes?

[@thodorispaparrigopoulos8542]

@@sserwangabenam9273 after about 3 months you got to re update. Again with the same command

[@ebiscaia]

Some considerations: - The package now is called python3-certbot-apache - If someone is doing this at home, make sure to set the firewall to open port 443 (ufw for ubuntu) and NAT port forwarding from port 443 to the internal ip address and the port in which the the website is hosted, normally also 443). Thanks, Tny

[@TonyTeachesTech]

Thanks for the tips

[@miroslavmilutinovic4333]

thank u so much

[@healthyloaf]

Thank you so much man. I have been stuck trying to install namecheap's ssl onto my contabo VPS with winSCP and I couldn't transfer any of my crt and ca_bundle files. I couldn't even create a file and edit/save my cert on my server via winSCP or Putty. I then moved on to VNC viewer to try and create/edit crt and ca_files via Vim editor. But then I was stuck again trying to access my system clipboard. No matter how many forums or KZbin videos I visited for vim, I couldnt solve the issue I was facing. I really appreciate your video man! You got a sub! Also if anyone is using Ubuntu and can't do the certbot installation, try "sudo apt install -y certbot python3-cerbot-apache" hope you success!

[@TonyTeachesTech]

Awesome, thanks so much Dan for sharing :)

[@SuperMu3ath]

Very helpful, easy and straight to the point! I liked the fact that you showed the config file in /etc/apache2/ ... What if I want to get a wildcard certificate? can you please do a tutorial on that? thanks a lot!

[@tommyrobe]

Thank you so much! It works Great! :) *Just remind to do the "tab"-pressing in the conf-file, otherwise the reroute from http to https will not work, looks like a bug in certbot! Thank you :)

[@TonyTeachesTech]

You're welcome!

[@_zh3ro_]

Thanks for the video! I'd love to have that cron job tutorial on automating the https get together.

[@TonyTeachesTech]

Check out the blog post I have linked for that tutorial

[@syedwajahatali2020]

​@@TonyTeachesTech Pls provide the video to Automate the SSL Sertificate each time as soon as it expires

[@TonyTeachesTech]

@@syedwajahatali2020 kzbin.info/www/bejne/nZm9iXmvft5-Z9E

[@davidcorona644]

God bless you for making this video.

[@TonyTeachesTech]

🙏

[@ohmyads3d]

I believe you mentioned namecheap, does it work for namecheap shared hosting package? Do you need to have delicate ip to install the ssl cert as you shown here?

[@danielroop4123]

Thanks for the great content Tony!

[@clashking8427]

Thanks a lot

[@TonyTeachesTech]

You're welcome!

[@khandakershahi]

Hi Tony, You use Linode for wordpress hosting and ssl but how about the email server? In shared hosting we got webmail system is there anything like that? Thank you for your tutorial.

[@TonyTeachesTech]

No, linode does not have email. You would have to set that up yourself. I personally use email forwarding like this kzbin.info/www/bejne/iJO3Y2uOZdyciNk which allows me to send and receive emails for my domain name from within my Gmail inbox for the cost of the domain name itself

[@kaveengoonawardane9651]

Super useful video. Thanks mate!

[@TonyTeachesTech]

You're welcome!

[@jordanjones6131]

Thanks Tony very helpful 😁

[@bigbigder]

It really works, thanks!!

[@TonyTeachesTech]

You're welcome!

[@TechWithBenam]

Nice one

[@redtoblackmarketing]

Great content man :-)

[@bobsigny]

I only have access to Cloudflare account can I still do this?

[@mauwiks]

I can't seem to find the apache2 folder

[@josetellez4270]

How can I get the "wordpress.conf" file?

[@TonyTeachesTech]

You can create this file. With an Apache web server, you can have multiple configuration files that each correspond to a separate web site.

[@cristcampos]

Thanks!

[@TonyTeachesTech]

You're welcome

[@NelsonIzack]

Thanks for the video! I encounter problem on 4:14 when i run command certbot --apache output " *the requested apache plugin does not appear to be installed* " How can i resolve this? Appreciate.

[@TonyTeachesTech]

Did you install python-certbot-apache? sudo apt-get install python-certbot-apache

[@NelsonIzack]

@@TonyTeachesTech thanks for the reply.. Yes! I run the command. You can see it here nimb.ws/oLY2rp for your reference.

[@paulfitz4861]

Thank you for the video very easy to follow. Now my site is secure!!!! XD

[@TonyTeachesTech]

You're welcome Paul!

[@salexkorsan8790]

@@TonyTeachesTech it works on subdomain also or not ??

[@TonyTeachesTech]

@@salexkorsan8790 Yep

[@charlesderek7107]

How do you write this to execute by a bash script (no interactivity)

[@quickfingers5982]

These steps will work with AWS EC2?

[@TonyTeachesTech]

Definitely should work

[@fahadfaysal9626]

Cant it be done on Hostinger's "Business Shared Hosting" plan. I have SSH access but can't implement your exact process.

[@TonyTeachesTech]

Sorry I am not familiar with Hostinger

[@Mr92Metallica]

Hi ! Thanks for the tutorial, but after doing that I'm having a redirection error ERR_TOO_MANY_REDIRECTS. What should I do ? Having that my wordpress is inside a docker container and that I'm using reverse proxy configuration.

[@TonyTeachesTech]

Sorry I have never run into that before. I would get rid of the cert and try again

[@allanmartin7031]

I have the same problem, do you find a solution ?

[@hamzasamlali4805]

Hi man after installing the SSL certificate, i can no longer access the Admin dashboard. Can you please advise on that issue

[@TonyTeachesTech]

What is the error you get?

[@jillsarkozi1595]

Can this work when I don't host my domian only point it to a vps servers with no control panel but I've set A record and NS records.I'm unable to get SSL install on my domain.

[@TonyTeachesTech]

Yes this should work with that setup

[@rexbenedict8474]

So Tony. What's up. I installed the certificate on the 18.04 ubuntu nginx. Certificate is valid. Tlv is 1.2,1.3. but it's saying some contents are still not secure. I have no idea how to resolve it. I'm stuck. It's an e-commerce site.

[@TonyTeachesTech]

Have you tried to access on another device or in a private window? Sometimes cache is to blame.

[@rexbenedict8474]

@@TonyTeachesTech your technique works. I reinstalled and configurated nginx again. Thanks Tony.

[@abdelmadjidgueffaz9561]

Hi man after installing the SSL certificate, i can no longer access the Admin dashboard. Can you please advise on that issue This site cannot be rach even if I open the HTTPS port 443

[@TonyTeachesTech]

Hmm I’m not sure what that’s the case

[@kak9989]

Can you show how to disable https redirect for a folder on apache 2 ?

[@TonyTeachesTech]

What is your use case for doing this?

[@trangoul8898]

Hey! Can I do it if the domain name, and the server is on different network? And the server is behind NAT.

[@TonyTeachesTech]

As long as your domain name is publicly accessible, then you will be able to use Let's Encrypt to get your free SSL cert.

[@trangoul8898]

@@TonyTeachesTech Yep, I figured out allready, and it works, thank you.

[@andersonjoseph4879]

Hello, i tried to "ssh root@my website" from my MacBook terminal BUT it says "ssh: connect to host mywebsite.com port 22: Operation timed out" I have been trying to fix it but couldn't ... what can I do please?

[@TonyTeachesTech]

You'll need to make sure your website hosting company has enabled ssh access on your server and that you have the credentials to access it. Sorry for not making this clear in the video. What hosting company do you use?

[@andersonjoseph4879]

@@TonyTeachesTech Namecheap, but is there a way I can enable it manually?

[@TonyTeachesTech]

@@andersonjoseph4879 For ssh on Namecheap, please follow the instructions here kzbin.info/www/bejne/fInFooJsZsSBjMU

[@andersonjoseph4879]

@@TonyTeachesTech Thanks so much super helpful

[@mrpoliticalguy5602]

Hi I got a question is ngrok more secure than port forwarding and more immune to ddos.

[@TonyTeachesTech]

I'm not familiar with ngrok, sorry

[@mrpoliticalguy5602]

@@TonyTeachesTech ok

[@ddrci88]

Hello Guys, All command here and i fixed some place : 1.apt install certbot python3-certbot-apache -y we install python3 because pyhton depracete it 2.certbot --apache 3.ufw app list check your ufw if listed 4.ufw app info "Apache Full" 5.ufw allow in "Apache Full"

[@Xpressd]

I would be lost without tony /bowdown

[@TonyTeachesTech]

:)

[@salexkorsan8790]

is it wildcard ssl or not ???

[@TonyTeachesTech]

No. For wildcard, see this kzbin.info/www/bejne/rnTJZYqbl9t2fJo

[@abrarsnewworldorder]

How do I find the ssh root access to the server?

[@TonyTeachesTech]

The default ssh username is root and the password is the root password that you created before deploying the server :)

[@abrarsnewworldorder]

@@TonyTeachesTech Thanks a ton!

[@kak9989]

I did all the steps well and my web site ka1000.xyz does not have the secured icon for ssl certificate

[@kak9989]

I solved the problem but when I type ka1000.xyz I’m redirected to my website without the ssl certificate and when I type ka1000.xyz I’m redirected to my website with the ssl certificate

[@kak9989]

I don't understand what I did wrong plz help Thanks !

[@kak9989]

nevermind I found the solution by changing the .htaccess file

[@TonyTeachesTech]

Happy you figured it out

[@syedwajahatali2020]

​ #TonyTeachesTech Pls provide the video to Automate the SSL Sertificate each time as soon as it expires

[@TonyTeachesTech]

kzbin.info/www/bejne/nZm9iXmvft5-Z9E

[@Karyodom]

apt-get install certbot python-certbot-apache is not run

[@mortezajafaree7984]

apt-get install certbot python3-certbot-apache

[@brentcrowley3119]

I got failed authorization procedure. These steps won't work for everyone. Nice try though.

[@TonyTeachesTech]

Sorry to hear that

[@rishabhgarg3112]

i am getting SERVFAIL error!!!!!

[@TonyTeachesTech]

Uh oh

[@rishabhgarg3112]

@@TonyTeachesTech Solved

[@josetellez4270]

Is not working for me.

[@TonyTeachesTech]

What is the error you get?

[@vaheedmohammad9243]

How to install a free Lets Encrypt SSL certificate from Apache Server to another server?

[@TonyTeachesTech]

You would need to install the SSL certificate directly on the other server

[@vaheedmohammad9243]

@@TonyTeachesTech I don't have access to other server. Is it possible to setup SSL from my server to other server?

[@TonyTeachesTech]

@@vaheedmohammad9243 No sorry

[@govtjobsnotifications2791]

Make my websites ssl

[@TonyTeachesTech]

This video will do it for you (assuming you have ssh access with the proper permissions)

[@govtjobsnotifications2791]

@@TonyTeachesTech actually i m getting stuck and not able to figure out i can give access to u my server by putty or we can connect on gmeet so that it can done it is hardly 5 minutes for u..only