Editing Elastic Beanstalk Security Certificates Archived November 2020 (section)

=== Installing `certbot` ===

<p class="alert alert-warning">WARNING! These instructions describe how to install `certbot-auto` which is a script that allows for automated execution of `certbot` installation of Let's Encrypt security certificates. `certbot-auto` is not supported on Amazon Linux 2 as of mid-2020.</p>

[https://certbot.eff.org/docs/using.html#certbot-commands Certbot Commands] documentation

`certbot` is a command line script that will install Let's Encrypt certificates and configure the current web server to recognize the certificates in order to serve https requests. 

Let's encrypt certificates typically are stored in `.pem` files located in `/etc/letsencrypt/live/mydomain.com`.

Also the server's config file must be updated in order store the location of the certificate files. A typical path for this file is `/etc/httpd/conf.d/ssl.conf`.

==== Installing `certbot` from the command line ====

<pre>
$ mkdir -p /opt/certbot 
$ wget https://dl.eff.org/certbot-auto -O /opt/certbot/certbot-auto 
$ chmod a+x /opt/certbot/certbot-auto
</pre>

==== Installing `certbot` in `.ebextensinos` ====

The above commands likely would require `sudo` on the command line. The best location for this configuration is in a `.ebextensions` config file with something like this:

<syntaxhighlight lang="yaml">
  20_install_certbot:
    command: "mkdir -p /opt/certbot &amp;&amp; wget https://dl.eff.org/certbot-auto -O /opt/certbot/certbot-auto &amp;&amp; chmod a+x /opt/certbot/certbot-auto"
</syntaxhighlight>