SSL

SSL notes: Let's Encrypt issuance, JKS, testing, and renewal.

Topics

Let's Encrypt

Let's Encrypt via gethttpsforfree.com: admin RSA key, server CSR, install on the server; test on SSL Labs; JKS via certbot issue 2920.

Renewal

Do not reuse the CSR on renewal; repeat the entire Let's Encrypt process.