Securing your website with SSL (Secure Sockets Layer) is essential for encrypting data and ensuring secure communication between your server and users. Let’s Encrypt provides a free SSL certificate that is easy to install and renew. In this guide, we will walk you through the process of installing Let’s Encrypt SSL on Apache2 in Ubuntu 22.04.

Prerequisites

Before proceeding with the installation, ensure you have the following:

• A server running Ubuntu 22.04.
• Apache2 installed and configured.
• A registered domain name pointing to your server.
• sudo privileges or root access.

Step 1: Update Your Server

Before installing any new software, it’s a good practice to update the package list and upgrade existing packages.

sudo apt update && sudo apt upgrade -y

Step 2: Install Certbot and Apache Plugin

Let’s Encrypt uses Certbot, a tool that automates the process of obtaining and renewing SSL certificates. Install Certbot and the Apache plugin using the following command:

sudo apt install certbot python3-certbot-apache -y

Step 3: Obtain an SSL Certificate

To issue an SSL certificate for your domain, run the following command, replacing yourdomain.com with your actual domain:

sudo certbot --apache -d yourdomain.com -d www.yourdomain.com

• The command automatically configures your Apache settings to use the SSL certificate.
• When prompted, enter your email address for renewal notifications.
• Accept the terms and conditions.
• Choose whether to redirect HTTP traffic to HTTPS.

Step 4: Verify SSL Installation

After the process completes, check if your SSL certificate is installed correctly by running:

sudo apachectl configtest

If the output is Syntax OK, restart Apache to apply changes:

sudo systemctl restart apache2

Step 5: Test Your SSL Certificate

Visit your website in a browser using https://yourdomain.com. You can also use an SSL checker like SSL Labs to verify the certificate’s validity.

Step 6: Set Up Automatic Renewal

Let’s Encrypt certificates expire every 90 days, but Certbot automatically renews them. To ensure the renewal process runs smoothly, use the following command to simulate a renewal test:

sudo certbot renew --dry-run

If no errors appear, your certificate will renew automatically.

Conclusion

By following this guide, you have successfully installed a free SSL certificate from Let’s Encrypt on your Apache2 server running Ubuntu 22.04. Your website is now more secure, and visitors can browse with confidence. Keep your server updated and monitor your SSL certificate regularly for seamless security.

If you found this guide helpful, feel free to share it with others!