Table of Contents

Install

snippet.bash
emerge -av letsencrypt

Configure lighttpd

Based on instructions here

bash mkdir -p /tmp/letsencrypt/public_html/.well_known

Modify /etc/lighttpd/lighttpd.conf to include the following…

snippet.bash
## Used for letsencrypt validation
$HTTP["url"] =~ "^/.well-known/" {
    server.document-root = "/tmp/letsencrypt/public_html/.well-known/"
    alias.url = ( "/.well-known/" => "/tmp/letsencrypt/public_html/.well-known/" )
    dir-listing.activate = "disable"
}

Restart your server…

snippet.bash
/etc/init.d/lighttpd restart

Obtain Certificate

Look for your basedir in /etc/lighttpd/lighttpd.conf

snippet.bash
grep base /etc/lighttpd/lighttpd.conf

Use your domain name, and the basedir the above returns…

snippet.bash
letsencrypt certonly --webroot -w /var/www/localhost -d kimura.no-ip.info

As advised backup the created /etc/letsencrypt/ directory to somewhere secure.

gentoo linux letsencrypt