{"id":539,"date":"2020-01-30T15:16:37","date_gmt":"2020-01-30T20:16:37","guid":{"rendered":"https:\/\/increasec.com\/?p=539"},"modified":"2020-01-30T15:50:53","modified_gmt":"2020-01-30T20:50:53","slug":"letsencrypt-windows","status":"publish","type":"post","link":"https:\/\/increasec.com\/?p=539","title":{"rendered":"LetsEncrypt Windows"},"content":{"rendered":"\n<p>LetsEncrypt provides Free SSL Certificates using automated methods to prove you own the DNS or Website.  But the certificates provided are only valid for 90 days.  This was done purposefully because Certificate Revocation is broken.  The intention is to use automation to work around the 90 day limit.<\/p>\n\n\n\n<p>On Windows we are going to use the <a href=\"https:\/\/github.com\/PKISharp\/win-acme\/releases\">Windows ACME Simple <\/a>tool and a simple HTTP server named <a href=\"https:\/\/sourceforge.net\/projects\/miniweb\/\">MiniWeb<\/a><\/p>\n\n\n\n<p>MiniWeb was chosen so we don&#8217;t need to change any IIS configuration (if you have TCP port 80 bound on your IIS server you can even use a workstation for this procedure) and we can start and stop it whenever we need to.<\/p>\n\n\n\n<p>Download and start MiniWeb making sure to specify port 80 or it will by default start listening on port 8000.   miniweb.exe -p 80<\/p>\n\n\n\n<p>Make sure your Firewall is forwarding Tcp Port 80 to the PC running MiniWeb<\/p>\n\n\n\n<p>Download and run the WACS tool.  It will show a simple list of available commands <\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"653\" height=\"281\" src=\"https:\/\/increasec.com\/wp-content\/uploads\/2020\/01\/image-6.png\" alt=\"\" class=\"wp-image-540\" srcset=\"https:\/\/increasec.com\/wp-content\/uploads\/2020\/01\/image-6.png 653w, https:\/\/increasec.com\/wp-content\/uploads\/2020\/01\/image-6-300x129.png 300w\" sizes=\"auto, (max-width: 653px) 100vw, 653px\" \/><\/figure>\n\n\n\n<p>M: Manual (Full Options)<\/p>\n\n\n\n<p>2: Manual Input<\/p>\n\n\n\n<p>enter a comma separated list of Public DNS names that point to your firewall.  Sign into GoDaddy to manage your DNS entries?  Use whatsmyip.org to verify the public address of your firewall.<\/p>\n\n\n\n<p>Enter a friendly name or just hit enter to use the DNS name<\/p>\n\n\n\n<p>1: save verification files to a path<\/p>\n\n\n\n<p>enter the path to the miniWeb server.  could look something like this C:\\Share\\miniweb\\htdocs        HINT: you can paste the path from the clipboard by clicking the lock icon in the top left of the wacs.exe window and choosing Edit, Paste<\/p>\n\n\n\n<p>Copy  default web.config before validation = y<\/p>\n\n\n\n<p>Encryption Type = 2 \/ Enter<\/p>\n\n\n\n<p>1:  Store certificate as .pfx file<\/p>\n\n\n\n<p>Path to cert store = whatever    i used c:\\share<\/p>\n\n\n\n<p>Password = whatever   i used ByeByeMissAmericanPie<\/p>\n\n\n\n<p>3: No additional Storage<\/p>\n\n\n\n<p>4: Do not run any Extra installation steps<\/p>\n\n\n\n<p>LetsEncrypt will now try to connect to your HTTP server and retrieve the verification files.  If all is working well you should see a bunch of text fly past in the MiniWeb server window, and your Certificate will be created.  <\/p>\n\n\n\n<p>If MiniWeb is blank there is a problem with the DNS > FirewalIp > Vip\/PortForward > MiniWeb server<\/p>\n\n\n\n<p>Reference <a href=\"https:\/\/miketabor.com\/how-to-install-a-lets-encrypt-ssl-cert-on-microsoft-iis\/\">here<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>LetsEncrypt provides Free SSL Certificates using automated methods to prove you own the DNS or Website. But the certificates provided are only valid for 90 days. This was done purposefully&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[85,88,21],"class_list":["post-539","post","type-post","status-publish","format-standard","hentry","category-uncategorised","tag-certificates","tag-letsencrypt","tag-windows"],"_links":{"self":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/539","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=539"}],"version-history":[{"count":2,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/539\/revisions"}],"predecessor-version":[{"id":542,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/539\/revisions\/542"}],"wp:attachment":[{"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=539"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=539"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=539"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}