layout | title |
---|---|
default |
EZProxy TLS |
We use the Automated Certificate Management Environment (ACME) defined here and included in the EzProxy Role.
The process runs as a cron job that can be confirmed by running the following command:
sudo certbot renew --dry-run --standalone --non-interactive --agree-tos --email [email protected] --server https://acme.sectigo.com/v2/InCommonRSAOV --eab-kid XXXxxNNxNNWxXxxXNXxXx --eab-hmac-key _XNXXxxNXNNXxXNXXNXXXxxxXNNxXxxXXXxxXXXNX_XXxXxNxNNNX_XXxxNXXxXNxxXXXXxXxxXXXxXxNzXXxX
The TLS files will be saved at
/etc/letsencrypt/live/ezproxy
EzProxy software public UI is managed at the following URI Your netid will need to be among those allowed to manage the EzProxy application. The file to modify is can be found at the EzProxy Conf Repo
You will need to Import the
the /etc/letsencrypt/live/ezproxy/certN.pem
for the certificate, /etc/letsencrypt/live/ezproxy/keyN.pem
for the key and select Import Certificate then select /etc/letsencrypt/live/ezproxy/chainN.pem
on the next page and type ACTIVE to make the selected keys the now active keys for the Application.