# Place where to create the certificate and change this folder

**URL:** <https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981>\
**Category:** Help\
**Created:** [January 30, 2023, 10:01pm UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981 "2023-01-30T22:01:11Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![misterio12](https://avatars.discourse-cdn.com/v4/letter/m/a8b319/32.png) [@misterio12](https://community.letsencrypt.org/u/misterio12)\
**Post date:** [January 30, 2023, 10:01pm UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/1 "2023-01-30T22:01:11Z")

</div>

I use termux **Version 0.118.0** on android:  
TERMUX\_MAIN\_PACKAGE\_FORMAT=debian  
Kernel build information: Linux localhost 3.18.91-16526088 #1 SMP PREEMPT Tue Jun 29 14:22:03 KST 2021 armv8l Android  
my version nginx/1.23.3,

I download version Certbot for windows certbot-beta-installer-win\_amd64,  
it possible create certificate on my windows,  
and then copy folder "live" to my nginx on phone?  
But I see in live folder README file: "WARNING: DO NOT MOVE OR RENAME THESE FILES!"/

certbot certonly --manual -d mydomainname --email my@email  
I did acme-challenge to verified my site and received the certificate files, but they are on my laptop.  
thank you.

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [January 30, 2023, 10:03pm UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/2 "2023-01-30T22:03:55Z")

</div>

> [@misterio12](#):
>
> it possible create certificate on my windows,  
> and then copy folder "live" to my nginx on phone?

Sure, you can copy the cert to your phone, but _why_ exactly would you want to do that?

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [January 30, 2023, 10:06pm UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/3 "2023-01-30T22:06:36Z")

</div>

What service are you trying to secure?

---

<div class="post-metadata">

**Author:** ![misterio12](https://avatars.discourse-cdn.com/v4/letter/m/a8b319/32.png) [@misterio12](https://community.letsencrypt.org/u/misterio12)\
**Post date:** [January 30, 2023, 10:39pm UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/4 "2023-01-30T22:39:17Z")

</div>

I have a domain on noip site, nginx I configured the server on port 80, I also plan to connect a reverse proxy for the express js server,  
I want to see in the browser that the site starts with https, and see lock icon, maybe this will solve the future problems with cors, browser warnings, and it is considered safer.

---

<div class="post-metadata">

**Author:** ![danb35](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/danb35/32/70869_2.png) [@danb35](https://community.letsencrypt.org/u/danb35)\
**Post date:** [January 30, 2023, 11:38pm UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/5 "2023-01-30T23:38:36Z")

</div>

> [@misterio12](#):
>
> and then copy folder "live" to my nginx on phone?

You can't copy the `live` folder, but you can copy the cert files. But why are you running a web server on your phone? Or is this a "just because I can" thing? Or perhaps a "homework assignment" thing?

---

<div class="post-metadata">

**Author:** ![misterio12](https://avatars.discourse-cdn.com/v4/letter/m/a8b319/32.png) [@misterio12](https://community.letsencrypt.org/u/misterio12)\
**Post date:** [January 31, 2023, 1:34am UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/6 "2023-01-31T01:34:57Z")

</div>

On this site I wanted to place my node js pet project, and test the speed on a live project.  
As well as:  
types of errors that may occur,  
check the speed of different methods, database calls, code block execution speed, etc.  
launch an online parser to collect data,  
do a couple of experiments on communicating with esp8266  
and much more.

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [January 31, 2023, 2:19am UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/7 "2023-01-31T02:19:56Z")

</div>

> [@misterio12](#):
>
> I have a domain on noip site, nginx I configured the server on port 80, I also plan to connect a reverse proxy for the express js server,

Then you need `nginx` integration OR simply manually add the required code in `nginx` to use the cert.  
As for:

> [@misterio12](#):
>
> copy folder "live" to my nginx on phone?

I'm not sure how you're going to run a web service on your phone... But that might be possible.  
Although, if you can run a web server on your phone, it can likely also do all the necessary to obtain its' own certificate.

---

<div class="post-metadata">

**Author:** ![misterio12](https://avatars.discourse-cdn.com/v4/letter/m/a8b319/32.png) [@misterio12](https://community.letsencrypt.org/u/misterio12)\
**Post date:** [January 31, 2023, 2:40am UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/8 "2023-01-31T02:40:07Z")

</div>

I just checked and the icon appeared,  
and the certificate connected,  
the main problems are file paths,  
you have to spend a lot of time looking for a working solution.

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [January 31, 2023, 6:59am UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/9 "2023-01-31T06:59:37Z")

</div>

So if I understand you correctly, you're trying to set up nginx/NodeJS et cetera **on your Android phone**?

---

<div class="post-metadata">

**Author:** ![9peppe](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/9peppe/32/31596_2.png) [@9peppe](https://community.letsencrypt.org/u/9peppe)\
**Post date:** [January 31, 2023, 10:01am UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/10 "2023-01-31T10:01:15Z")

</div>

> [@rg305](#):
>
> But that might be possible.

It is indeed. I'm afraid the phone will be NATted into oblivion, tho.

@misterio12 can you get to your non-encrypted service from your home internet, if your phone is on mobile network only?

---

<div class="post-metadata">

**Author:** ![misterio12](https://avatars.discourse-cdn.com/v4/letter/m/a8b319/32.png) [@misterio12](https://community.letsencrypt.org/u/misterio12)\
**Post date:** [January 31, 2023, 1:09pm UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/11 "2023-01-31T13:09:21Z")

</div>

> [@Osiris](#):
>
> So if I understand you correctly, you're trying to set up nginx/NodeJS et cetera **on your Android phone**?

Yes, you are right, nginx reverse proxy and express js.

---

<div class="post-metadata">

**Author:** ![misterio12](https://avatars.discourse-cdn.com/v4/letter/m/a8b319/32.png) [@misterio12](https://community.letsencrypt.org/u/misterio12)\
**Post date:** [January 31, 2023, 1:17pm UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/12 "2023-01-31T13:17:02Z")

</div>

Probably in this case I will need to create some kind of script that will update the ip address already through the phone and not the PC, in a dns service such as noip or duckdns.  
I saw a setting in duckDNS for android, maybe this is the apk file or some else that will update my ip address  
This needs to be checked.

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [January 31, 2023, 1:30pm UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/13 "2023-01-31T13:30:49Z")

</div>

If you're running all your services on that Android phone (why would you want to do that anyway?), isn't it possible to run an ACME client on that Android phone too? A low resource ACME client, such as [one of the Bash based clients](https://letsencrypt.org/docs/client-options/#clients-bash)? Or cross-compile [one of the C based clients](https://letsencrypt.org/docs/client-options/#clients-c) so it'll work on Android? I have no idea if that's even possible...

---

<div class="post-metadata">

**Author:** ![misterio12](https://avatars.discourse-cdn.com/v4/letter/m/a8b319/32.png) [@misterio12](https://community.letsencrypt.org/u/misterio12)\
**Post date:** [January 31, 2023, 1:54pm UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/14 "2023-01-31T13:54:49Z")

</div>

I thought about something like this,  
my linux is in termux app on android,  
maybe possible can install something better, some Kali Linux, but these searches take a lot of time,  
I read that you can somehow add libraries into the termux, and it is maybe launch a certbot, which will create it all there and update it, but it seems to me that if I start to delve into this now, it process will drag on for weeks.  
So far I install the certificate and completed the challenge on the PC, and transfer files to the termux, and it works.  
For now, I'll be happy with the result.

---

<div class="post-metadata">

**Author:** ![Bruce5051](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/bruce5051/32/76576_2.png) [@Bruce5051](https://community.letsencrypt.org/u/Bruce5051)\
**Post date:** [January 31, 2023, 3:59pm UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/15 "2023-01-31T15:59:36Z")

</div>

> [@misterio12](#):
>
> Android

While does run on top of a linux kernel (various) and that what you are asking is technically possible, I do not believe that this community is the proper place for technical support of setup an Android as a server that uses and servers TLS Domain Validated Certificates. If you get the support you are looking for here that is great, but I suspect looking towards Android developer forums will be more helpful for you.

There are several Android Forums that maybe a better places to look on; here is just a random sample of some Android Forums. Search and look I am sure you will find more.

- [https://androidforums.com/](https://androidforums.com/)
- [https://forums.androidcentral.com/](https://forums.androidcentral.com/)
- [https://www.xda-developers.com/](https://www.xda-developers.com/)
- [https://www.droidforums.net/](https://www.droidforums.net/)
- [https://www.makeuseof.com/tag/7-android-forums-learn-apps-features/](https://www.makeuseof.com/tag/7-android-forums-learn-apps-features/)
- [https://blog.feedspot.com/android\_forums/](https://blog.feedspot.com/android_forums/)
- [Android Forums Archives - Phandroid](https://phandroid.com/guide/android-forums/)

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [January 31, 2023, 4:33pm UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/16 "2023-01-31T16:33:40Z")

</div>

> [@misterio12](#):
>
> and it is maybe launch a certbot

Certbot is a Python application and thus would probably require a lot of resources on a device like a mobile phone. It wouldn't be me first choice.

---

<div class="post-metadata">

**Author:** ![danb35](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/danb35/32/70869_2.png) [@danb35](https://community.letsencrypt.org/u/danb35)\
**Post date:** [January 31, 2023, 4:50pm UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/17 "2023-01-31T16:50:43Z")

</div>

I ran Apache on a jailbroken iPhone once, several years ago. It was cool, for a few minutes. Then I realized, "what's the point?"

---

<div class="post-metadata">

**Author:** ![9peppe](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/9peppe/32/31596_2.png) [@9peppe](https://community.letsencrypt.org/u/9peppe)\
**Post date:** [January 31, 2023, 6:11pm UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/18 "2023-01-31T18:11:00Z")

</div>

acme.sh will work in termux. so will certbot if you can install it. (using pip, maybe)

the issue I can think of is that without root powers (and perhaps even if you do have them) there's no way your services will be on port 80.

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [January 31, 2023, 6:39pm UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/19 "2023-01-31T18:39:25Z")

</div>

> [@9peppe](#):
>
> the issue I can think of is that without root powers (and perhaps even if you do have them) there's no way your services will be on port 80.

If the device is behind a NAT portmap device, it's possible to portmap external port 80 to internal port `whateveryoulike`, for IPv4 at least.

---

<div class="post-metadata">

**Author:** ![misterio12](https://avatars.discourse-cdn.com/v4/letter/m/a8b319/32.png) [@misterio12](https://community.letsencrypt.org/u/misterio12)\
**Post date:** [January 31, 2023, 7:43pm UTC](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981/20 "2023-01-31T19:43:34Z")

</div>

thanks for the tip, will try acme.sh and pip  
Why can't root?  
I can get root, through the sudo command.  
According to the correct one, I read earlier, there you need to create a new user, such as user@someuser, and then work through it.

[Next page](https://community.letsencrypt.org/t/place-where-to-create-the-certificate-and-change-this-folder/191981.md?page=2)
