system certificate letsencrypt

Instead of uploading CA certificate from your local directory, an easier way is to configure FortiWeb to obtain a CA certificate from Let's encrypt on behalf of you.

It's recommended to configure Let's Encrypt certificate through Web UI, where more functions are offered. Refer to "Let's Encrypt certificates" in FortiWeb Administration Guide.

To use this command, your administrator account’s access control profile must have either w or rw permission to the admingrp area. For details, see Permissions.

Syntax

show system certificate letsencrypt

config system certificate letsencrypt

edit "<certificate_name>"

set domain "<application_domain_name>"

set renewal-period <int>

config subject-alternative-names

edit <index>

set san-dns <domain_name>

end

next

end

Variable	Description	Default
"<certificate_name>"	Enter the name of a certificate file. The maximum length is 63 characters.	No default.
domain "<application_domain_name>"	Enter the domain name of your application. FortiWeb will then retrieve the CA certificate for this domain from Let's encrypt. For Let's encrypt certificate, it's supported to added add up to 11 domains. One of them should be root domain, while the rest 10 should all belong to the root domain. It's recommended to enter the root domain here, then add the rest domain items in san-dns <domain_name>.	No default.
renewal-period <int>	Set how soon FortiWeb obtains the SSL certificate from Let’s Encrypt. The valid range is 1-60 days.	30 (days)
san-dns <domain_name>	Enter domain names. Up to 10 items can be added and they all should belong to the same domain.	No default.

Related topics

• system certificate ca
• system certificate ca-group
• system certificate verify