TLS (formerly SSL) is a network protocol for serving web pages like HTTP is, but only encrypted.

Let's Encrypt Edit

Debian 8 (Jessie / currently oldstable) Edit

Installing the Let's Encrypt client with backports:

echo deb jessie-backports main | sudo tee /etc/apt/sources.list.d/jessie-backports.list
sudo apt update
sudo apt -t jessie-backports install certbot

Generate cert for $domain, when you don't have a webserver running currently:

certbot certonly --standalone -d $domain

Generate CSR Edit


openssl req -new -newkey rsa:4096 -nodes -keyout server.key -out server.csr

It will then ask you for the following information:

Country Name (2 letter code) [AU]:
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (e.g. server FQDN or YOUR name) []:
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

Not all fields are required for CAs to sign your certificate.

See also Edit