We have been struggling for long with getting LetsEncrypt running on Google Compute Engine.
On GCE we successfully installed the Bitnami Wordpress on a micro instance.
We do want to have our website secured through Let's Encrypt. After having succesfully installed the Certificates, Access to SSH and SFTP has been denied.
At this moment I'm even wondering if its even possible to do so. Love to receive some advice...
I ran this command:
Install Git
~$ sudo apt-get install git-all
Change to root access
~$ sudo su
Change to the temporary directory:
~$ cd /tmp
Clone the Let's Encrypt repository from Github*:
~$ git clone https://github.com/letsencrypt/letsencrypt
Use the cert-auto script to download and install all the necessary dependencies:
~$ cd letsencrypt)
~$ sudo apt-get update
~$ ./letsencrypt-auto
STEP 2: SET A DNS RECORD POINTING THAT DOMAIN NAME TO THE PUBLIC IP ADDRESS OF THE SERVER.
Go to: https://console.cloud.google.com/networking/dns/zones/[zone-name]?project=[project-name]
select the relevant zone.
Create a subdomain and create A record.
Under Data type IP Adress
STEP 3: GENERATE AND INSTALL A CERTIFICATE FOR THE DOMAIN USING THE LET'S ENCRYPT CLIENT?
Change to the directory containing the Let's Encrypt client.
~$ /tmp/letsencrypt/
Request a new certificate for your domain as below.
~$ ./letsencrypt-auto certonly --webroot -w /opt/bitnami/apache2/htdocs -d DOMAIN
example:
Next, install the generated certificate in your Web server as shown in the next sections.
Run Commands
~$ sudo cp /etc/letsencrypt/live/DOMAIN/cert.pem /opt/bitnami/apache2/conf/server.crt
~$ sudo cp /etc/letsencrypt/live/DOMAIN/privkey.pem /opt/bitnami/apache2/conf/server.key
Restart the Apache server:
~$ sudo /opt/bitnami/ctlscript.sh restart apache
downloaded:
chain.pem
privkey.pem
fullchain.pem
cert.pem
It produced this output:
Unable to access the instance, SSH and SFTP
My operating system is (include version):
Debian 8
I can login to a root shell on my machine (yes or no, or I don't know):
No anymore after running the script
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
No, as it on Google Cloud Platform