Here and welcome back.
Now, in this second part of the video, we look into how we can issue and configure the certificate.
So the certificate that will be issued.
It would be true.
Let's encrypt.
So let's encrypt is one of the entities from which you can get a free DNS certificate.
However, it is only issued for 90 days.
So every 90 days you will have to reissue a newer certificate.
So I have created a new server and I have pointed my domain, which is labs internal dot com to this
new server.
So let's quickly do one thing.
Let's install the build release package.
Again, this is a Sendai's seven based OS.
Great.
So once Apple releases that, let's go ahead and install Ingenix.
So once the engineers are installed, let's go ahead and start the engine service
and once it started, let's quickly verify.
Whoops, great.
So the engine is running.
So if you want to quickly verify, I'll do a call on LAVs Internet.com and you should see the default
engine exposure.
So in our case, we already have this step one.
We already have done the step to the third step is the CSA, as well as getting the CEOs are saying
now as far as the letters and group is concerned, you have an automated tool through which you can
do step three, step forward and step five altogether.
So let's go ahead and explore how we can do that.
So now let's go ahead and install sort what happened, Ingenix?
Great, so once this is done, you have to run the command third Haven Hafer engineers hyphen, followed
by the domain, which is Labs Internet.com.
Oops, let me just fix their typo here.
So it is in the email address.
Basically, this will help you get the notices related to renewal.
Remember that since these are the three certificates, although it works perfectly well, but the amount
of time for which it is issued is three months.
So I'll put the email address.
I'll agree the terms and conditions.
So whether I want to share my email address, I'll say no.
So do not fear that it is performing a challenge.
We just discussed about this in a moment.
So the next thing it is basically saying that whether you want to redirect or you do not want to redirect,
so now it automatically did step three and step four.
And in the step five, it is modifying the Web server configuration.
So now you have two options.
So the second option is that make all requests, redirect to the security sidepiece access.
So that basically means that even if you have EDP, if someone logs in, it has to be, then he will
automatically be redirected towards the EPA.
So for the time being, I just see one which is node redirect and it says we are all done early.
So now if you basically look into the Ingenix configuration, you're all right.
So now I know it's not that this is a pretty important utility, at least for me.
Great.
Let's go back down.
And now you see it has automatically added the SSN related configuration, so all of these things are
added by the Third World, so we don't really have to modify anything.
So earlier it did not happen.
So after the certificate was issued, we had to manually add these lines, but currently it is doing
automatically.
So if I read and the next everything is working fine, just restart your engine.
It's all right.
So once this is, then you can verify that good HDB labs, internal dot com and you should be able to
see the website.
So even from the browser.
Let's quickly verify.
You see, you're getting a perfect green lockyear and it says that verified by let's encrypt now in
here.
It does not read the email verification because if you would go a bit up within here, it is basically
making a challenging area.
All right.
So basically what you have to make sure that this server does not really restrict the inbound firewall
because it verifies whether the domain actually belongs to you.
So you have to make sure that if this is the server, then it is accessible and the firewall does not
really block the inbound EDP traffic.
Otherwise, your challenge verification will not fail and the certificate will not be issued.
So for me, since labs internal dot com is basically pointing to this specific server, that challenge
really works pretty well because I don't really have a firewall in between.
So this is one important part that you should remember.
So that's the high level overview about the let's encrypt now in case if you do not get the certificate
from let's encrypt and you got a certificate from a different provider, then these are some of the
configurations that you will have to put.
Specifically, these three lines are the most important where you have the gene, that pin and you have
the private keys.
So this will conclude this with you.
I will really encourage you to try this out, because let's encrypt something that you will be using
throughout your time so that this will conclude this.
We do.
I hope this video has been informative and I look forward to seeing the next video.