Comments on: How to Install Let’s Encrypt SSL Certificate to Secure Nginx on RHEL 9/8

By: Ravi Dave

Ravi Dave — Mon, 04 May 2020 11:58:12 +0000

Is there any way I can use this procedure for the wildcard domain?

By: Ravi Saive

Ravi Saive — Mon, 25 Mar 2019 06:15:25 +0000

In reply to Jeff. @Jeff, Please add the following SSL configuration to your nginx.conf to get A rating.

listen 443 ssl default_server;
ssl_certificate /etc/letsencrypt/live/your_domain.tld/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/your_domain.tld/privkey.pem;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';

By: Jeff

Jeff — Sun, 24 Mar 2019 22:59:55 +0000

Hi, I’m still getting a B rating. Was the addition of : ssl_protocols TLSv1 and ssl cipher are needed? Currently I’m only having the 2 ssl perm key written in the nginc.

As how do you manager to created the cipher number : ssl_ciphers ‘EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH’ Or it’s just generic and i add it directly to nginx file ?

thanks in advance

By: Henrik Jakobsen

Henrik Jakobsen — Fri, 08 Feb 2019 14:20:29 +0000

Fantastic tutorial, easy to follow and very well explained.

I had 2 issue:

1. I am on a windows machine and I made the cert-renew script in notepad++, but it didn’t work. Then I changed the EOL conversion setting to Unix (LF) and it worked. It’s under Edit – EOL Conversions.
2. Using vim for the crontab editing, but I followed a guide here to figure it out: https://www.tecmint.com/vi-editor-usage/

By: Ravi Saive

Ravi Saive — Thu, 18 Oct 2018 04:46:32 +0000

In reply to Ashok.

@Ashok,

Please add IPv4 A record for you domain, before running the Let’s encrypt script.