So you just setup a new shiny WordPress website on a Lightsail (WordPress) instance. Now, you’ve been told to setup an SSL certificate for your website domain. What to do? The following steps show how to generate a free SSL certificate provided by Let’s Encrypt.

bitnami@ip-172-26-12-25:~$ sudo /opt/bitnami/bncert-tool
----------------------------------------------------------------------------
Welcome to the Bitnami HTTPS Configuration tool.

----------------------------------------------------------------------------
Domains

Please provide a valid space-separated list of domains for which you wish to 
configure your web server.

Domain list []: lightsail.example.com

The following domains were not included: www.lightsail.example.com.
Do you want to add them? [Y/n]: n

Warning: No www domains (e.g. www.example.com) or non-www domains (e.g. www.example.com)
have been provided, so the following redirections will be disabled: non-www 
to www, www to non-www.
Press [Enter] to continue:

----------------------------------------------------------------------------
Enable/disable redirections

Please select the redirections you wish to enable or disable on your Bitnami installation.

Enable HTTP to HTTPS redirection [Y/n]: Y

----------------------------------------------------------------------------
Changes to perform

The following changes will be performed to your Bitnami installation:

1. Stop web server
2. Configure web server to use a free Let's Encrypt certificate for the domains: lightsail.example.com
3. Configure a cron job to automatically renew the certificate each month
4. Configure web server name to: lightsail.example.com
5. Enable HTTP to HTTPS redirection (example: redirect http://lightsail.example.com to https://lightsail.example.com)
6. Start web server once all changes have been performed

Do you agree to these changes? [Y/n]: Y

----------------------------------------------------------------------------
Create a free HTTPS certificate with Let's Encrypt

Please provide a valid e-mail address for which to associate your Let's Encrypt certificate.

Domain list: lightsail.example.com

Server name: lightsail.example.com

E-mail address []: validemail@example.com

The Let's Encrypt Subscriber Agreement can be found at:

https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf

Do you agree to the Let's Encrypt Subscriber Agreement? [Y/n]:

----------------------------------------------------------------------------
Performing changes to your installation

The Bitnami HTTPS Configuration Tool will perform any necessary actions to your Bitnami installation. 
This may take some time, please be patient.

----------------------------------------------------------------------------
Success

The Bitnami HTTPS Configuration Tool succeeded in modifying your installation.

The configuration report is shown below.

Backup files:
* /opt/bitnami/apache/conf/httpd.conf.back.202405220509
* /opt/bitnami/apache/conf/bitnami/bitnami.conf.back.202405220509
* /opt/bitnami/apache/conf/bitnami/bitnami-ssl.conf.back.202405220509
* /opt/bitnami/apache/conf/vhosts/wordpress-https-vhost.conf.back.202405220509
* /opt/bitnami/apache/conf/vhosts/wordpress-vhost.conf.back.202405220509

Find more details in the log file:

/tmp/bncert-202405220509.log

If you find any issues, please check Bitnami Support forums at:

https://github.com/bitnami/vms

Press [Enter] to continue:

That’s it.

References: