Skip to content

Commit

Permalink
Explain Docker limitations (fixes certbot#1000).
Browse files Browse the repository at this point in the history
  • Loading branch information
kuba committed Oct 25, 2015
1 parent 38036b7 commit c43825f
Showing 1 changed file with 21 additions and 5 deletions.
26 changes: 21 additions & 5 deletions docs/using.rst
Original file line number Diff line number Diff line change
Expand Up @@ -59,9 +59,22 @@ Throughout the documentation, whenever you see references to
Running with Docker
-------------------

Docker_ is another way to quickly obtain testing certs. From the
server that the domain your requesting a cert for resolves to,
`install Docker`_, issue the following command:
Docker_ is an amazingly simple and quick way to obtain a
certificate. However, this mode of operation is unable to install
certificates or configure your webserver, because our installer
plugins cannot reach it from inside the Docker container.

You should definitely read the :ref:`where-certs` section, in order to
know how to manage the certs
manually. https://github.com/letsencrypt/letsencrypt/wiki/Ciphersuite-guidance
provides some information about recommended ciphersuites. If none of
these make much sense to you, you should definitely use the
letsencrypt-auto_ method, which enables you to use installer plugins
that cover both of those hard topics.

If you're still not convinced and have decided to use this method,
from the server that the domain your requesting a cert for resolves
to, `install Docker`_, issue the following command:

.. code-block:: shell
Expand All @@ -70,8 +83,9 @@ server that the domain your requesting a cert for resolves to,
-v "/var/lib/letsencrypt:/var/lib/letsencrypt" \
quay.io/letsencrypt/letsencrypt:latest auth
and follow the instructions. Your new cert will be available in
``/etc/letsencrypt/certs``.
and follow the instructions (note that ``auth`` command is explicitly
used - no installer plugins involved). Your new cert will be available
in ``/etc/letsencrypt/live`` on the host.

.. _Docker: https://docker.com
.. _`install Docker`: https://docs.docker.com/userguide/
Expand Down Expand Up @@ -149,6 +163,8 @@ Let's Encrypt is working hard on automating the renewal process. Until
the tool is ready, we are sorry for the inconvenience!


.. _where-certs:

Where are my certificates?
==========================

Expand Down

0 comments on commit c43825f

Please sign in to comment.