K-Developers: Web-design

How to setup Let's encrypt SSL Certificate on an amazon AWS Instance

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh__D2iSVwO0NqKbuvwrg0grz6wc2li-_XR4SLMbMSSikaMdwOuF6H8F0O1M5gAUblrpZC0BgEn5H9xmwX_7k2kbW4bwddz5dI98uUs-0Udhk4NGQbOhn45216OZZ7lqtM1eTdsLXqoUydu/s1600/le-logo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh__D2iSVwO0NqKbuvwrg0grz6wc2li-_XR4SLMbMSSikaMdwOuF6H8F0O1M5gAUblrpZC0BgEn5H9xmwX_7k2kbW4bwddz5dI98uUs-0Udhk4NGQbOhn45216OZZ7lqtM1eTdsLXqoUydu/s320/le-logo.png" width="320" /></a></div>
A few days ago we showed you how to add an SSL certificate – one that you can purchase – to your newly created Amazon AWS Instances. As I was researching SSL certificates, I came across an interesting initiative: Let’s Encrypt.  It’s an organization dedicated to serving up free SSL certfiicates so you can encrypt your site data.</div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
According to their website, they have six key points to their reasoning:</div>
<blockquote style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border-bottom-color: initial; border-bottom-style: initial; border-image: initial; border-left-color: rgb(221, 221, 221); border-left-style: solid; border-right-color: initial; border-right-style: initial; border-top-color: initial; border-top-style: initial; border-width: 0px 0px 0px 1px; color: #777777; font-family: Montserrat, sans-serif; font-size: 17px; font-stretch: inherit; font-style: italic; font-variant-numeric: inherit; line-height: 24px; margin: 0px 0px 20px; padding: 9px 20px 0px 19px; quotes: none; vertical-align: baseline;">
<ul style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 28px; list-style-image: initial; list-style-position: initial; margin: 0px 0px 20px 30px; padding: 0px; vertical-align: baseline;">
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;"><strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Free:</strong> Anyone who owns a domain name can use Let’s Encrypt to obtain a trusted certificate at zero cost.</li>
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;"><strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Automatic:</strong> Software running on a web server can interact with Let’s Encrypt to painlessly obtain a certificate, securely configure it for use, and automatically take care of renewal.</li>
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;"><strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Secure:</strong> Let’s Encrypt will serve as a platform for advancing TLS security best practices, both on the CA side and by helping site operators properly secure their servers.</li>
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;"><strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Transparent:</strong> All certificates issued or revoked will be publicly recorded and available for anyone to inspect.</li>
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;"><strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Open:</strong> The automatic issuance and renewal protocol will be published as an open standard that others can adopt.</li>
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;"><strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Cooperative:</strong> Much like the underlying Internet protocols themselves, Let’s Encrypt is a joint effort to benefit the community,</li>
</ul>
</blockquote>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Whereas some people are turned off by the cost of an SSL Certificate from a trusted authority, this becomes a much better option.</div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
<em style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Note: There are a couple of other tutorials on setting up the “letsencrypt” package, but I ran into a few snags post-setup that I want to address, specifically on the WordPress front.</em></div>
<h3 style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat, sans-serif; font-size: 28px; font-stretch: inherit; font-variant-numeric: inherit; font-weight: 300; line-height: initial; margin-bottom: 10px !important; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding: 0px; vertical-align: baseline;">
Step 0: Prerequisites</h3>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
We’re setting this up on Ubuntu, so we’ll need:</div>
<ul style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; list-style-image: initial; list-style-position: initial; margin: 0px 0px 20px 30px; padding: 0px; vertical-align: baseline;">
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;">A user with sudo privileges. If you’ve been following the tutorials, you have this.</li>
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;">Your domain registrar login information.</li>
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;">Your domain pointed to the Amazon AWS Elastic IP with an A record. Letsencrypt validates the domain ownership via the A record, so make sure that the IP address is set up properly in your domain registrar.</li>
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;">You’ll need to stop the server for a few minutes to allow letsencrypt to run a web server on port 80. Make any necessary precautions.</li>
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;">There is a second, ‘webroot’ option that we can tap into for automatic renewals, so once the initial setup process is done we won’t have to shut down the server again.</li>
</ul>
<h3 style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat, sans-serif; font-size: 28px; font-stretch: inherit; font-variant-numeric: inherit; font-weight: 300; line-height: initial; margin-bottom: 10px !important; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding: 0px; vertical-align: baseline;">
Step 1: Installing the Let’s Encrypt Installation Scripts</h3>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Right now, it’s not available via the package managers – I have a suspiscion that will change soon. But we can definitely clone it via Git.</div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Update your packages…</div>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">$ sudo apt-get update</pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
…and install both <strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">git</strong> and <strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">bc.</strong></div>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">$ sudo apt-get -y install git bc</pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
BC, by the way, is an “arbitrary precision language calculator”. Neat!</div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Clone the letsencrypt package into /opt:</div>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">$ sudo git clone https://github.com/letsencrypt/letsencrypt /opt/letsencrypt</pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Now that it’s installed and we have our dependencies, we can start the installation package.</div>
<h3 style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat, sans-serif; font-size: 28px; font-stretch: inherit; font-variant-numeric: inherit; font-weight: 300; line-height: initial; margin-bottom: 10px !important; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding: 0px; vertical-align: baseline;">
Step 2: Using letsencrypt and Obtaining a Certificate</h3>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Stop your Nginx server…</div>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">$ sudo service nginx stop</pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
…and check to see if port 80 is open and in use.</div>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">$ netstat -na | grep ':80.*LISTEN'</pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
If you don’t seen any output… congrats! You’re ready to go!</div>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">$ cd /opt/letsencrypt
$ ./letsencrypt-auto certonly --standalone</pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
You’ll see a few things initialize, and you’ll be asked for a few bits of information. If this is your first time setting up, you’ll be asked for your email address. You’ll use this to receive notices and any recovery options, so make sure it’s valid and hit <OK>.</div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
<img alt="encrypt-email" class="alignnone size-full wp-image-4143" height="221" src="https://www.mitchcanter.com/wp-content/uploads/2016/01/encrypt-email.png" style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; padding: 0px; vertical-align: baseline;" width="597" /></div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Then a terms of service screen. Read the terms and click <Agree>.</div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
<img alt="encrypt-tos" class="alignnone size-full wp-image-4146" height="409" src="https://www.mitchcanter.com/wp-content/uploads/2016/01/encrypt-tos.png" style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; padding: 0px; vertical-align: baseline;" width="571" /></div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Now, enter the domain names you want to secure. If you have multiple subdomains (www vs non-www) enter them both. I usually enter the root top level domain (non-www) first, but that’s my preference:</div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
<img alt="encrypt-tld" class="alignnone size-full wp-image-4150" height="235" src="https://www.mitchcanter.com/wp-content/uploads/2016/01/encrypt-tld.png" style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; padding: 0px; vertical-align: baseline;" width="616" /></div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Let the command finish running. You should see a large wall of text with a few important pieces of information:</div>
<ul style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; list-style-image: initial; list-style-position: initial; margin: 0px 0px 20px 30px; padding: 0px; vertical-align: baseline;">
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;">Location of the saved certificate chain and keys:<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">/etc/letsencrypt/live/<strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">yourdomain.com</strong></pre>
</li>
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;">Expiration date of the certificate</li>
</ul>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
You’ll notice that the certificate expires quickly – 90 days. We’ll automate the renewal process later in the tutorial.</div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
You’ll also notice, if you list the location above…</div>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">$ sudo ls /etc/letsencrypt/live/<strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">yourdomain.com</strong></pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
That there are four files:</div>
<ul style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; list-style-image: initial; list-style-position: initial; margin: 0px 0px 20px 30px; padding: 0px; vertical-align: baseline;">
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;">cert.pem – your domain’s certificate</li>
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;">chain.pem – the Let’s Encrypt chain certificate</li>
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;">fullchain.pem – a concatenated (combined) file of cert.pem and chain.pem</li>
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;">privkey.pem – your certificate’s private key</li>
</ul>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
You’ll need <strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">fullchain.pem</strong> and <strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">privkey.pem</strong>, so mentally note where those are:</div>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">/etc/letsencrypt/live/<span class="highlight" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">yourdomain.com</strong>/fullchain.pem</span></pre>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">/etc/letsencrypt/live/<strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">yourdomain.com</strong><span class="highlight" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">/privkey.pem</span></pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Without those, we can’t set up the next part: the Nginx configuration.</div>
<h3 style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat, sans-serif; font-size: 28px; font-stretch: inherit; font-variant-numeric: inherit; font-weight: 300; line-height: initial; margin-bottom: 10px !important; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding: 0px; vertical-align: baseline;">
Step 3: Setting up Nginx</h3>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
<em style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">This is where the tutorial diverges from other similar tutorials. Other tutorials have you redirect the non-SSL traffic into the SSL traffic, but we actually need to keep the non-SSL and SSL traffic open with the same configuration, and use plugins to force SSL on the WordPress site. Otherwise, plugins such as Jetpack will cease to function correctly. </em></div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
We’re going to change the server configuration slightly from when we set it up initially. We’re still going to use all of the same variables from before, but we’re adding our elements to define the SSL certificates:</div>
<pre class="p2" style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;"># Define the microcache path.
fastcgi_cache_path /etc/nginx/cache levels=1:2 keys_zone=microcache:100m inactive=60m;

server {
 listen [::]:80;
 listen 80;
<span style="border: 0px; color: red; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"> listen 443 ssl;</span>

root /sites/<strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">yourdomain.com</strong>/htdocs;
 index index.php index.html index.htm;

server_name <strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">yourdomain.com</strong> www.<strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">yourdomain.com</strong>;

<span style="border: 0px; color: red; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">ssl_certificate /etc/letsencrypt/live/<strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">yourdomain.com</strong>/fullchain.pem;</span>
<span style="border: 0px; color: red; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"> ssl_certificate_key /etc/letsencrypt/live/<strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">yourdomain.com</strong>/privkey.pem;</span>
<span style="border: 0px; color: red; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"> ssl_protocols TLSv1 TLSv1.1 TLSv1.2;</span>
<span style="border: 0px; color: red; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"> ssl_prefer_server_ciphers on;</span>
<span style="border: 0px; color: red; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"> ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';</span>

# Include the basic h5bp config set
 include h5bp/basic.conf;
 
 location / {
 index index.php;
 try_files $uri $uri/ /index.php?$args;
 }
 
 location ~ \.php$ {
 fastcgi_cache microcache;
 fastcgi_cache_key $scheme$host$request_method$request_uri;
 fastcgi_cache_valid 200 304 10m;
 fastcgi_cache_use_stale updating;
 fastcgi_max_temp_file_size 1M;
 fastcgi_pass 127.0.0.1:9000;
 fastcgi_index index.php;
 fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
 include fastcgi_params;
 
 # Local variables to track whether to serve a microcached page or not.
 set $no_cache_set 0;
 set $no_cache_get 0;
 
 # If a request comes in with a X-Nginx-Cache-Purge: 1 header, do not grab from cache
 # But note that we will still store to cache
 # We use this to proactively update items in the cache!
 if ( $http_x_nginx_cache_purge ) {
 set $no_cache_get 1;
 }
 
 # If the user has a user logged-in cookie, circumvent the microcache.
 if ( $http_cookie ~* "comment_author_|wordpress_(?!test_cookie)|wp-postpass_" ) {
 set $no_cache_set 1;
 set $no_cache_get 1;
 }
 
 # fastcgi_no_cache means "Do not store this proxy response in the cache"
 fastcgi_no_cache $no_cache_set;
 
 # fastcgi_cache_bypass means "Do not look in the cache for this request"
 fastcgi_cache_bypass $no_cache_get;
 }
}</pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
The variables in red are new.  Walking through them, we end up doing the following:</div>
<ul style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; list-style-image: initial; list-style-position: initial; margin: 0px 0px 20px 30px; padding: 0px; vertical-align: baseline;">
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;">Adding a ‘listen’ reference to allow traffic to flow through port 443, the secure SSL port.</li>
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;">setting the paths for the certificate and certificate key – <strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">fullchain.pem</strong> and <strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">privkey.pem</strong> – that we generated earlier.</li>
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;">Setting an additional layer of security by specifying what ciphers and protocols we want to allow. The list above is a very modern list and will disallow outdated or insecure protocols from attempting to use the secure site.</li>
</ul>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Save and exit, and restart your webserver:</div>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">$ sudo service nginx start</pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Technically, we’re finished! You can visit https://yourdomain.com or https://www.yourdomain.com and see the secure site in its full glory!</div>
<h3 style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat, sans-serif; font-size: 28px; font-stretch: inherit; font-variant-numeric: inherit; font-weight: 300; line-height: initial; margin-bottom: 10px !important; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding: 0px; vertical-align: baseline;">
Step 4: Post-Setup for WordPress</h3>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
You may notice that the lock isn’t green (it may be greyed out). We still need to set WordPress to specifically use the HTTPS traffic over the non-HTTPS traffic. We can do that with two steps:</div>
<ol style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; list-style-image: initial; list-style-position: initial; margin: 0px 0px 20px 30px; padding: 0px; vertical-align: baseline;">
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;">Change the site_url and blog_url to <strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">https://yourdomain.com. </strong>You can do this either in the WordPress Settings > General screen, or by editing your wp-config.php file and adding these variables:<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">define('WP_HOME','https://yourdomain.com');
define('WP_SITEURL','https://yourdomain.com');</pre>
</li>
<li style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;">Using the <a href="https://wordpress.org/plugins/wp-force-ssl/" style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: #333333; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">WordPress Force SSL</a> to redirect all other traffic (images, links, etc) from non-HTTPS to HTTPS.</li>
</ol>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
<em style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Note: Other tutorials, as I mentioned above, require you to redirect the non-SSL traffic in, but I found that this caused problems with plugins that require port 80 to be free and clear – like Jetpack. I wasn’t getting any site stats for a few days and had to dive in to figure out why. Turns out it was being rejected at the redirection point. Opening port 80, and forcing the redirection at the WordPress level, did the trick.</em></div>
<h3 style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat, sans-serif; font-size: 28px; font-stretch: inherit; font-variant-numeric: inherit; font-weight: 300; line-height: initial; margin-bottom: 10px !important; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding: 0px; vertical-align: baseline;">
Step 5: Auto-Renewals of SSL Certificates</h3>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
The Let’s Encrypt certificates expire after 90 days. Let’s set up a server-side cron job (a script that runs automatically) to make sure we don’t have to worry about it again.</div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Instead of the standalone script we ran earlier, we’re going to set up a webroot script to run automagically in the background. Let’s Encrypt will use a special folder in your web root (/.well-known) to place its files, so let’s make sure that the server can access anything in those folders:</div>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">$ sudo nano /etc/nginx/sites-enabled/<strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">yourdomain.com</strong></pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
In the “server” block, add the following:</div>
<pre class="code-pre " style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">location ~ /.well-known {
     allow all;
}</pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Save and exit. This will open up that location’s files for letsencrypt, and drop in a hidden file that the scripts will use for validation. This way, we can keep our web server running – and not have to stop it to renew the certificates.</div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
You may want to figure out what your web root folder is. If you only have one site, it’ll be at /sites/<strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">yourdomain.com</strong>/htdocs (if you’ve been following my tutorials – otherwise, it’ll be different for each user).</div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Run this script, and make sure the variables are filled in with your information:</div>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">$ cd /opt/letsencrypt
./letsencrypt-auto certonly -a webroot --agree-tos --renew-by-default --webroot-path=/sites/<strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">yourdomain.com</strong>/htdocs -d <strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">yourdomain.com</strong> -d <strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">www.yourdomain.com</strong></pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
This goes through the prompts we filled in earlier, renews the certificate, and passes it through to the server (in the same locations you set up earlier).</div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Restart Nginx…</div>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">$ sudo service nginx reload</pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
…to have it use the newly created certificates.</div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Now we can create a cron job to automate this process.</div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Instead of having this long string entered in each time, let’s set up a configuration file we can refer to if we have problems or questions. A sample file is already provided, so we can start there to save time:</div>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">$ sudo cp /opt/letsencrypt/examples/cli.ini /usr/local/etc/le-renew-webroot.ini</pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Edit the file with your editor of choice:</div>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">$ sudo nano /usr/local/etc/le-renew-webroot.ini</pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
There’s a lot of commented-out (and useless) stuff in this file. So, let’s cut it down and fill in only the essentials: email address, domains, and the webroot authentication stuff.  You should have something similar to this:</div>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;"># Use a 4096 bit RSA key instead of 2048
rsa-key-size = 4096</pre>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;"># Registered Email
email = <strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">you@yourdomain.com</strong></pre>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;"># Domain(s) to Secure
domains = <strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">yourdomain.com</strong>, <strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">www.yourdomain.com</strong></pre>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;"># Webroot Authentication and Path
authenticator = webroot
webroot-path = /sites/<strong style="-webkit-font-smoothing: subpixel-antialiased; border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">yourdomain.com</strong>/htdocs</pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
There’s all the information we used earlier, in a nice and compact format. Let’s test it to see if the certificate renews this way:</div>
<pre class="code-pre " style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">$ cd opt/letsencrypt
$ ./letsencrypt-auto certonly -a webroot --renew-by-default --config /usr/local/etc/le-renew-webroot.ini</pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Notice how we set the –config flag to read the file we just created.  If all goes well, reload nginx again – just in case!</div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Finally we can set up this script with a cron job.</div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
There’s a Gist that has a nice packaged script we can run. Do your due dilligence and look it over before you install it.</div>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">$ sudo curl -L -o /usr/local/sbin/le-renew-webroot https://gist.githubusercontent.com/thisismitch/e1b603165523df66d5cc/raw/fbffbf358e96110d5566f13677d9bd5f4f65794c/le-renew-webroot</pre>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">$ sudo chmod +x /usr/local/sbin/le-renew-webroot</pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
This script can be executed anywhere. If you want, you can use it now to see how many days are left until your certificate needs to be renewed:</div>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">$ sudo le-renew-webroot</pre>
<pre class="code-pre " style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">Checking expiration date for <span class="highlight" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">example.com</span>...
The certificate is up to date, no need for renewal (89 days left).</pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Then, the cron job itself:</div>
<pre style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">$ sudo crontab -e</pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
Head to the bottom of the file and insert this all onto one line:</div>
<pre class="code-pre " style="-webkit-font-smoothing: subpixel-antialiased; background: rgb(18, 18, 20); border: 1px solid rgb(102, 102, 102); color: #cccccc; font-family: "Courier New", Courier, Monospaced; font-stretch: inherit; font-variant-numeric: inherit; line-height: inherit; margin-bottom: 20px; padding: 5px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">30 2 * * 1 /usr/local/sbin/le-renew-webroot >> /var/log/le-renewal.log</pre>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
There’ll be a log file created at /var/log/le-renewal.log, so if anything goes awry you’ll have a reference as to how to fix it.</div>
<div style="-webkit-font-smoothing: subpixel-antialiased; background-color: white; border: 0px; color: #222222; font-family: Montserrat; font-size: 14px; font-stretch: inherit; font-variant-numeric: inherit; line-height: 28px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
And that’s it!  You’re now running an amazing free encryption from Let’s Encrypt, letting it renew automatically, and allowing WordPress’ finicky internal features (like Jetpack) still authenticate.</div>
</div>

Linux Web-design How to setup Let's encrypt SSL Certificate on an amazon AWS Instance

A few days ago we showed you how to add an SSL certificate – one that you can purchase – to your newly created Amazon AWS Instances. As ...

WordPress 4.2.3 Security and Maintenance Release

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJ-VOwCslFDLpb3w0USjUJgK6MRp6sS34VA-ZszUpZnlMg8Lrl0NoqIpbVfzVSWuXJ9wZI7Pbj3BMlnBNu3HTlkbLxnBHKy3sclmsQ-eGq4AQxQFIFxthP9FgcamugEfe85FNdZPr8w3Hw/s1600/Wordpress-new-release.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="228" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJ-VOwCslFDLpb3w0USjUJgK6MRp6sS34VA-ZszUpZnlMg8Lrl0NoqIpbVfzVSWuXJ9wZI7Pbj3BMlnBNu3HTlkbLxnBHKy3sclmsQ-eGq4AQxQFIFxthP9FgcamugEfe85FNdZPr8w3Hw/s320/Wordpress-new-release.jpg" width="320" /></a></div>
<br />
<div>
<br /></div>
<div>
<div style="background-color: white; color: #444444; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 22px; padding: 0px;">
<span style="font-family: Trebuchet MS, sans-serif;">WordPress 4.2.3 is now available. This is a<strong> security release</strong> for all previous versions and we strongly encourage you to update your sites immediately.</span></div>
<div style="background-color: white; color: #444444; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 22px; padding: 0px;">
<span style="font-family: Trebuchet MS, sans-serif;">WordPress versions 4.2.2 and earlier are affected by a cross-site scripting vulnerability, which could allow users with the Contributor or Author role to compromise a site. This was initially reported by <a href="https://profiles.wordpress.org/duck_" style="border-bottom-color: rgb(223, 223, 223); border-bottom-style: solid; border-bottom-width: 1px; color: #4ca6cf; text-decoration: none;">Jon Cave</a> and fixed by <a href="http://www.miqrogroove.com/" style="border-bottom-color: rgb(223, 223, 223); border-bottom-style: solid; border-bottom-width: 1px; color: #4ca6cf; text-decoration: none;">Robert Chapin</a>, both of the WordPress security team, and later reported by <a href="http://klikki.fi/" style="border-bottom-color: rgb(223, 223, 223); border-bottom-style: solid; border-bottom-width: 1px; color: #4ca6cf; text-decoration: none;">Jouko Pynnönen</a>.</span></div>
<div style="background-color: white; color: #444444; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 22px; padding: 0px;">
<span style="font-family: Trebuchet MS, sans-serif;">We also fixed an issue where it was possible for a user with Subscriber permissions to create a draft through Quick Draft. Reported by Netanel Rubin from <a href="https://www.checkpoint.com/" style="border-bottom-color: rgb(223, 223, 223); border-bottom-style: solid; border-bottom-width: 1px; color: #4ca6cf; text-decoration: none;">Check Point Software Technologies</a>.</span></div>
<div style="background-color: white; color: #444444; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 22px; padding: 0px;">
<span style="font-family: Trebuchet MS, sans-serif;">Our thanks to those who have practiced <a href="https://make.wordpress.org/core/handbook/reporting-security-vulnerabilities/" style="border-bottom-color: rgb(223, 223, 223); border-bottom-style: solid; border-bottom-width: 1px; color: #4ca6cf; text-decoration: none;">responsible disclosure</a> of security issues.</span></div>
<div style="background-color: white; color: #444444; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 22px; padding: 0px;">
<span style="font-family: Trebuchet MS, sans-serif;">WordPress 4.2.3 also contains fixes for 20 bugs from 4.2. For more information, see the <a href="https://codex.wordpress.org/Version_4.2.3" style="border-bottom-color: rgb(223, 223, 223); border-bottom-style: solid; border-bottom-width: 1px; color: #4ca6cf; text-decoration: none;">release notes</a> or consult the <a href="https://core.trac.wordpress.org/log/branches/4.2?rev=33382&stop_rev=32430" style="border-bottom-color: rgb(223, 223, 223); border-bottom-style: solid; border-bottom-width: 1px; color: #4ca6cf; text-decoration: none;">list of changes</a>.</span></div>
<div style="background-color: white; color: #444444; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 22px; padding: 0px;">
<span style="font-family: Trebuchet MS, sans-serif;">Download WordPress 4.2.3 below or venture over to Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.2.3.</span><br />
<span style="font-family: Trebuchet MS, sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://wordpress.org/latest.zip"><img alt=" Download" border="0" height="84" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEghUpaDqiwTVu-IjiwhuP5n7kDueA3lC32bMfHy4gvrfsHuNEB_4_RuqpxbTx02SVQDyHqZLK_dtxnz4hy6i-eMD9G1IXfp6NHpqrZLsF-48079CgepKXD_PqNoFBgAEHGTd2nQX0zgk9SP/s200/Download-button.jpg" width="200" /></a></div>
<span style="font-family: Trebuchet MS, sans-serif;"><br /></span></div>
<div style="background-color: white; color: #444444; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 22px; padding: 0px;">
<span style="font-family: Trebuchet MS, sans-serif;">Thanks to everyone who contributed to 4.2.3. </span></div>
</div>
</div>

Developers Web-design Wordpress WordPress 4.2.3 Security and Maintenance Release

WordPress 4.2.3 is now available. This is a security release for all previous versions and we strongly encourage you to update you...

Top 10 Must Have WordPress Plugins 2015.

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="font-family: Trebuchet MS, sans-serif;"><br /></span><div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieyrTKrLWa6F-0sP-2QDtcPjrp29w_UHwzrt-tF-vVhNBQy3cecbVWXtR1TrDfLIMFkCOKveIhnlrAU1m21JKFbS5GqilLtaRvHyZaIyPypTKDJT-31v8DN3A-b6smjxfKLsDC6HEX85av/s1600/wordpress-plugins.png"><span style="font-family: Trebuchet MS, sans-serif;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieyrTKrLWa6F-0sP-2QDtcPjrp29w_UHwzrt-tF-vVhNBQy3cecbVWXtR1TrDfLIMFkCOKveIhnlrAU1m21JKFbS5GqilLtaRvHyZaIyPypTKDJT-31v8DN3A-b6smjxfKLsDC6HEX85av/s320/wordpress-plugins.png" /></span></a></div>
<span style="font-family: Trebuchet MS, sans-serif;"><br /><br /><br /><br /><br />These the easy way take full advantage of your site would be to produce top quality content and also have the right plugins to enable you to get where you need to be. Allows explore the very best 10 plug ins that you ought to install in your WordPress blog.<br /><br /><b><u>1) Yoast Search engine optimization</u></b><br /><br />What – Yoast is really a complete Search engine optimization tool that is included with features for example Publish Title and meta description templates, RSS improvements, Permalink cleanup and much more.<br /><br />Why – This really is crucial for the website because you have to rank highly within the search engines like google to obtain found and become seen from your audience Therefore the better you optimize your site, the greater visibility you will get in the search engines like google.<br /><br /><b><u>2) YouAPPi Content Recommendation WordPress plugin</u></b><br /><br />What – When you are reading through through a website on your winning super bowl team or financial advice this wordpress plugin adds application recommendations at the end from the publish which are highly relevant to the information around the page and also to the person engaged user.<br /><br />Why – The significance of this wordpress plugin isn’t that will just your visitors be interested in installing the applications recommended since they’re highly relevant to the subject they’re reading through about however it puts just a little money in your wallet because YouAPPi pays marketers per download of applications.<br /><br /><b><u>3) W3 Total Cache</u></b><br /><br />What – The main focus of the wordpress plugin will be your WPO or WordPress Performance Optimisation tool. It will help together with your consumer experience and also the speed of the page.<br /><br />Why – Because individuals aren’t likely to hang in there your site very lengthy in case your page doesn’t load on time and also the consumer experience is poor.<br /><br /><b><u>4) Vault Press</u></b><br /><br />What – Every site needs an alarm system and a method to keep things supported. That’s what Valut Press does.<br /><br />Why – Like a blogger you need to have the ability to get enough rest during the night knowing your amazing blog isn’t being screwed with. Here’s another security plugins for WordPress<br /><br /><b><u>5) Digg Digg</u></b><br /><br />What – Digg Digg works submit hands with buffer to become a multi functional social distributing wordpress plugin. It enables you to definitely display all of your buttons in one location.<br /><br />Why – You do not want individuals to just read your latest publish and say: “that was cool” after which be done with it. You have to help remind these to share it on Facebook, Twitter, Pinterest, etc. so that they share it using their buddies.<br /><br /><b><u>6) Disqus</u></b><br /><br />What – Disqus is really a community of towns that can help you construct your community of active visitors who are curious about your articles. In the finish during the day, this can help create more powerful engagement together with your visitors.<br /><br />Why – Well there is not a reason for getting your blog should you aren’t attempting to share content that individuals will be thinking about reading through.<br /><br /><b><u>7) Akismet</u></b><br /><br />What – are you currently fed up with comment junk e-mail? Then you ought to get the wordpress plugin known as Akismet. I understand that seems like a lame infomercial but that’s what it really does and it is awesome so cope with it!<br /><br />Why – People aren’t likely to bring your blog seriously if you are permitting every spammy junk discuss your website. Ensure that it stays together guy. It will likely be appreciated.<br /><br /><b><u>8) Gravity Forms</u></b><br /><br />What – Well you need to have an sweet contact page to your blog but it’s a significant amount of try to decipher it yourself which means you install gravity forms also it takes proper care of that for you personally.<br /><br />Why – Because you are interested with what your visitors think you need to improve or are saying regarding your material you’re creating. Also you’ll need a method to be approached by marketers and guest posters who wish to be incorporated in your blog too.<br /><br /><b><u>9) Facebook Subscribe</u></b><br /><br />What – This enables individuals to as if you on Facebook so that they are activated to whatever awesome items you publish in your Facebook page.<br /><br />Why – People wish to feel and become connected. Believe rather than allow them to interact with yourself on Facebook and become your “Friend”? I can’t think about an easy method, are you able to?<br /><br /><b><u>10) Backup Buddy</u></b><br /><br />What – This phenomenal wordpress plugin enables you to definitely do three crucial things. Supports all of your info, reinstates your website whether it will get compromised or damaged by any means, and moves it to a different domain should you improve your domain title.<br /><br />Why – Who knows when you are have to these features however it aids in your bit of mind knowing you’ve that capacity whenever it pops up.<br /><br /><b><u><br /></u></b></span><div>
<span style="font-family: Trebuchet MS, sans-serif;"><b><u>Final Words</u></b><br /><br />They are all handy and useful plugins so we recommend you put in these when your blog is ready to go. Happy blogging!</span></div>
</div>

Developers Knowledge-bank Web-design Wordpress Top 10 Must Have WordPress Plugins 2015.

These the easy way take full advantage of your site would be to produce top quality content and also have the right plugins to enable you...

Top 7 Important Elements of a Good Web Design Portfolio

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkDLa25Q_H_wdwgGw-Ms7t1r-RfBNJcWz_HDROGufdQ2_rEY37f1XC0_0RuVgYLXh8vyloDwfOU32X3jrrVciajhQczZ7vc3frKRml6JI8XSN5J6g8kn2GJeOUt6cwVMQhyphenhyphenithL1nfokZl/s1600/portfolio2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="213" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkDLa25Q_H_wdwgGw-Ms7t1r-RfBNJcWz_HDROGufdQ2_rEY37f1XC0_0RuVgYLXh8vyloDwfOU32X3jrrVciajhQczZ7vc3frKRml6JI8XSN5J6g8kn2GJeOUt6cwVMQhyphenhyphenithL1nfokZl/s320/portfolio2.jpg" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div style="background-color: white; border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
The best way to show clients what you can do is to show them what you’ve already done. Direct them to your online portfolio.</div>
<div style="background-color: white; border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
If you’re a new freelance web designer, creating an online portfolio is one of the very first things that you need to do. As soon as you complete a project that you can be proud of, you can start to build your portfolio.</div>
<div style="background-color: white; border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
If you’re an experienced freelance web designer hopefully you already have a portfolio. However, don’t make the mistake that many experienced freelancers make and let your portfolio sit untouched for months–or even years. Your portfolio should be a changing online document that always highlights your very best work.</div>
<div style="background-color: white; border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
<br /></div>
<div style="background-color: white; border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
While looking at the portfolios of other web designers can certainly give you some good ideas, it’s also helpful to have a checklist of elements you should include on your own portfolio. That’s what this post is for. This post lists seven vital elements that every good web design portfolio should include.</div>
<div style="background-color: white; border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
<span id="more-9274" style="box-sizing: border-box;"></span></div>
<h2 style="background-color: white; box-sizing: border-box; color: #333333; font-family: ProximaNova, sans-serif; font-size: 32px; font-weight: 400; line-height: 40px; margin: 20px 0px;">
Element #1. Your Very Best Work</h2>
<div style="background-color: white; border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
You may think this is obvious, but if you haven’t updated your portfolio in a while the work that you display may no longer be your best work.</div>
<div style="background-color: white; border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
Your skills have likely improved with your growing experience. Also, technology changes. What was once stunning may no longer be impressive.</div>
<div style="background-color: white; border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
Don’t let your portfolio get stale. Make a point to review it every few months. Whenever you complete a major project ask yourself whether the work you just finished should be included in your portfolio.</div>
<h2 style="background-color: white; box-sizing: border-box; color: #333333; font-family: ProximaNova, sans-serif; font-size: 32px; font-weight: 400; line-height: 40px; margin: 20px 0px;">
Element #2. Challenges You’ve Overcome</h2>
<div style="background-color: white; border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
Did you just recently learn a new skill? Maybe you just solved a client’s major problem with your web design?</div>
<div style="background-color: white; border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
These achievements can certainly become selling points for your web design business, but only if prospective clients know about them. The only way they can know about your successes is if you show them.</div>
<div style="background-color: white; border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
So, when you update your portfolio remember to including challenging samples and samples of any new skills you have mastered.</div>
<h2 style="background-color: white; box-sizing: border-box; color: #333333; font-family: ProximaNova, sans-serif; font-size: 32px; font-weight: 400; line-height: 40px; margin: 20px 0px;">
Element #3. Explanatory Text</h2>
<div style="background-color: white; border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
Your portfolio may indeed be visually stunning, but you can’t assume that your prospects will understand the significance of what they are seeing.</div>
<div style="background-color: white; border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
Adding some explanatory text with your web design samples can help. Explanatory text helps your prospects to understand the back story behind your portfolio samples. Explaining why each sample is important also gives you a chance to market your abilities.</div>
<div style="background-color: white; border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
For example, another web designer may realize that a particular portfolio sample uses jQuery–an important new skill you’ve recently mastered. But a potential client probably won’t know this unless you point it out.</div>
<h2 style="background-color: white; box-sizing: border-box; color: #333333; font-family: ProximaNova, sans-serif; font-size: 32px; font-weight: 400; line-height: 40px; margin: 20px 0px;">
Element #4. Your Contact Information</h2>
<div style="background-color: white; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 20px;">
<div style="border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
In an ideal world, potential clients would always access your portfolio through your website or blog. Since your website contains your contact information, they would always know how to contact you. However, on the Internet you can’t take this for granted.</div>
<div style="border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
While your main site should definitely link to your portfolio, you also have to assume that some potential clients will wind up on your portfolio pages without ever visiting your main site. There are many ways this could happen. A blogger could link directly to your portfolio. A client could refer another business to you and send that business a link directly to your portfolio instead of your website.</div>
<div style="border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
Whatever the case, every portfolio page should have a way for prospective clients to contact you. Including your social media contact information is also a plus.</div>
<h2 style="box-sizing: border-box; font-family: ProximaNova, sans-serif; font-size: 32px; font-weight: 400; line-height: 40px; margin: 20px 0px;">
Element #5. Your Logo</h2>
<div style="border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
If you’ve branded your web design business, your logo is a critical part of that brand. It only makes sense to have your logo on every page of your portfolio along with your contact information.</div>
<div style="border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
However, the main focus of your portfolio is your work. While your logo needs to be there, it shouldn’t take center stage.</div>
<h2 style="box-sizing: border-box; font-family: ProximaNova, sans-serif; font-size: 32px; font-weight: 400; line-height: 40px; margin: 20px 0px;">
Element #6. Awards Received and/or Education</h2>
<div style="border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
Your portfolio should include your most marketable recent accomplishments. Naturally, that means your best design work.</div>
<div style="border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
What many web designers fail to include, however, are awards they’ve received or relevant courses they’ve recently taken. Yet, a list of your accomplishments could mean the difference between hiring you and hiring your competitor.</div>
<div style="border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
You can list your accomplishments directly on your portfolio site. For longer lists of accomplishments or for less recent accomplishments, you may want to create a separate page for the list and link to it.</div>
<h2 style="box-sizing: border-box; font-family: ProximaNova, sans-serif; font-size: 32px; font-weight: 400; line-height: 40px; margin: 20px 0px;">
Element #7. A Brief Bio</h2>
<div style="border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
People like to know who they are dealing with, and your web design clients are no exception. That’s why including a brief bio with your portfolio can help market your design business.</div>
<div style="border: 0px; box-sizing: border-box; color: #555555; font-family: ProximaNova, sans-serif; font-size: 16px; line-height: 24px; margin-bottom: 24px; padding: 0px;">
The bio you share with your portfolio shouldn’t be your complete, unabridged life story. In fact, it doesn’t need to be very long at all. Just write a few sentences explaining who you are and what make your web design unique.</div>
</div>
<br /></div>

Developers Knowledge-bank Web-design Top 7 Important Elements of a Good Web Design Portfolio

The best way to show clients what you can do is to show them what you’ve already done. Direct them to your online portfolio. If yo...

How to make your website look more consistent and closer to Material Design on Lollipop devices.

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="background-color: white; color: #3c4043; font-family: 'Open Sans', sans-serif; font-size: 16px; line-height: 26.3999996185303px; margin-bottom: 1.6em; margin-top: 1.6em;">
Starting in version 39, Chrome for Android supports the <code style="background: rgb(233, 241, 245); border-radius: 2px; border: 1px solid rgb(198, 220, 229); font-family: Inconsolata, monospace; font-size: 0.85em; padding: 1px 3px; white-space: pre;">theme color</code> meta tag, with which you can set a different color for the toolbar, other than the default grey. </div>
<div style="background-color: white; color: #3c4043; font-family: 'Open Sans', sans-serif; font-size: 16px; line-height: 26.3999996185303px; margin-bottom: 1.6em; margin-top: 1.6em;">
The syntax is simple. All you have to do is to add a meta tag to your page’s <code style="background: rgb(233, 241, 245); border-radius: 2px; border: 1px solid rgb(198, 220, 229); font-family: Inconsolata, monospace; font-size: 0.85em; padding: 1px 3px; white-space: pre;"><head></code> with the <code style="background: rgb(233, 241, 245); border-radius: 2px; border: 1px solid rgb(198, 220, 229); font-family: Inconsolata, monospace; font-size: 0.85em; padding: 1px 3px; white-space: pre;">name="theme-color"</code>, and set the content to any valid CSS color.</div>
<div style="background-color: white; color: #3c4043; font-family: 'Open Sans', sans-serif; font-size: 16px; line-height: 26.3999996185303px; margin-bottom: 1.6em; margin-top: 1.6em;">
<code style="background: rgb(233, 241, 245); border-radius: 2px; border: 1px solid rgb(198, 220, 229); font-family: Inconsolata, monospace; font-size: 0.85em; padding: 1px 3px; white-space: pre;"><meta name="theme-color" content="#db5945"/></code></div>
<div style="background-color: white; color: #3c4043; font-family: 'Open Sans', sans-serif; font-size: 16px; line-height: 26.3999996185303px; margin-bottom: 1.6em; margin-top: 1.6em;">
Change <code style="background: rgb(233, 241, 245); border-radius: 2px; border: 1px solid rgb(198, 220, 229); font-family: Inconsolata, monospace; font-size: 0.85em; padding: 1px 3px; white-space: pre;">#db5945</code> according to your preferences or your theme's color scheme.</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div style="background-color: white; color: #3c4043; font-family: 'Open Sans', sans-serif; font-size: 16px; line-height: 26.3999996185303px; margin-bottom: 1.6em; margin-top: 1.6em;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb9QpyBDrG0Dec81kxpLVcX4cgreJKt38ym3i0vVw4vO34To241_gzlct8OnDSoGprl5GWmtry8UsJZniZIjfiMBInYN17LdkcWUOAYYIC7FhnJtveuTQzLEPoI9oxK6iBe6H05ayK6wyX/s1600/material+design.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="284" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb9QpyBDrG0Dec81kxpLVcX4cgreJKt38ym3i0vVw4vO34To241_gzlct8OnDSoGprl5GWmtry8UsJZniZIjfiMBInYN17LdkcWUOAYYIC7FhnJtveuTQzLEPoI9oxK6iBe6H05ayK6wyX/s320/material+design.jpg" width="320" /></a></div>
<strong><br /></strong>
<strong>Note</strong>: In order to get this experience, you need be running Android 5.0, update to the latest versions of Chrome, and turn “Merge tabs and apps” to “on,” which merges your tabs into the app switcher.</div>
<div style="background-color: white; color: #3c4043; font-family: 'Open Sans', sans-serif; font-size: 16px; line-height: 26.3999996185303px; margin-bottom: 1.6em; margin-top: 1.6em;">
I know it's a subtle change to your theme, but with this your theme will look more consistent and closer to Material Design on Lollipop devices.</div>
</div>

How to make your website look more consistent and closer to Material Design on Lollipop devices.

Developers HTML5 Knowledge-bank Tutorials Web-design How to make your website look more consistent and closer to Material Design on Lollipop devices.

Starting in version 39, Chrome for Android supports the theme color meta tag, with which you can set a different color for the toolbar, ...

K-Developers

How to setup Let's encrypt SSL Certificate on an amazon AWS Instance

WordPress 4.2.3 Security and Maintenance Release

Top 10 Must Have WordPress Plugins 2015.

Top 7 Important Elements of a Good Web Design Portfolio

How to make your website look more consistent and closer to Material Design on Lollipop devices.

Trendind

Archive