How to Install Let's Encrypt SSL in Apache on CentOS Stream 10

To install Let's Encrypt SSL on Apache in CentOS Stream 10, follow these steps.

Step 1 : Make sure your domain is correctly configured in DNS and points to the server where Apache is running. This is necessary for Certbot to verify your domain ownership.

Step 2 : Start by updating your system packages to ensure everything is up to date:

sudo dnf update -y

Step 3 : First, ensure that snapd is installed on your system. You can do this with the following commands:

sudo dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-10.noarch.rpm
sudo dnf -y install snapd

Step 4 : Enable and start the snapd service and create a symlink

sudo systemctl enable --now snapd.socket
sudo ln -s /var/lib/snapd/snap /snap

Step 5 : Install the mod_ssl module for Apache, which is required to enable SSL:

sudo dnf install mod_ssl -y
sudo systemctl restart httpd

Step 6 : Now, you can install Certbot using Snapd:

snap install certbot --classic

Step 7 : Create a symbolic link to use Certbot easily:

sudo ln -s /snap/bin/certbot /usr/bin/certbot

Step 8 : Verify that Certbot is installed correctly:

Step 9 : Create a new Apache configuration file for your domain:

sudo nano /etc/httpd/conf.d/example.devtutorial.io.conf

Add the following configuration (replace example.devtutorial.io with your domain):

<VirtualHost *:80>
    ServerAdmin webmaster@devtutorial.io
    DocumentRoot /var/www/html/example.devtutorial.io
    ServerName example.devtutorial.io

    ErrorLog /var/log/httpd/example.devtutorial.io_error.log
    CustomLog /var/log/httpd/example.devtutorial.io_access.log combined

    <Directory /var/www/html/example.devtutorial.io>
        AllowOverride All
    </Directory>

</VirtualHost>

Step 10 : Create the directory for your domain and an index.html file:

sudo mkdir -p /var/www/html/example.devtutorial.io
echo "Hello World" | sudo tee /var/www/html/example.devtutorial.io/index.html

Step 11 : Run the following command to test the Apache configuration for syntax errors:

sudo apachectl configtest

If the output is Syntax OK, you are good to go.

- Restart Apache to apply the configuration:

sudo systemctl restart httpd

Step 12 : Run Certbot to obtain and install the SSL certificate:

sudo certbot --apache -d example.devtutorial.io

You will be prompted for the following:

- Enter email address: Provide your email address.

- Agree to the terms of service: Type y to agree.

- Share your email address: Type y to share your email address with the EFF.

Step 13 : Test the SSL certificate renewal process:

sudo certbot renew --dry-run

Step 14 : Now, visit https://example.devtutorial.io in your browser. You should see the secure connection (a padlock) and the "Hello World" page.

Congratulations, you have successfully installed Let's Encrypt SSL on Apache in CentOS Stream 10!