$> openssl genrsa -out <name>.key 2048
$> openssl ecparam -genkey -name secp384r1 -out <name>.key
$> openssl req -new -x509 -sha256 \
-key <name>.key -out <name>.crt -days 3650
- Install required packages :
$> sudo apt-get install -y dirmngr
- Add backports repository to the sources :
$> echo 'deb http://httpredir.debian.org/debian \
stretch-backports main contrib non-free' | \
sudo tee -a /etc/apt/sources.list.d/debian-backports.list
- Add the Debian package signing keys :
$> sudo apt-key adv --keyserver keyserver.ubuntu.com \
--recv-keys E0B11894F66AEC98
$> sudo apt-key adv --keyserver keyserver.ubuntu.com \
--recv-keys 7638D0442B90D010
$> sudo apt-key adv --keyserver keyserver.ubuntu.com \
--recv-keys 8B48AD6246925553
$> sudo apt-get install -y certbot -t stretch-backports