IPSEC-LETSENCRYPT(8) Executable programs IPSEC-LETSENCRYPT(8)

.SH "NAME" ipsec-letsencrypt - invoke Opportunistic Encryption utilities

.SH "SYNOPSIS"

.HP 432u

**ipsec letsencrypt**  
\[--client]  
\[--server]  
\[--test]  
\[--disable]  
\[--help]

\[--generate-certificate *hostname*]  
\[--renew *hostname*]

.SH "EXAMPLES"

.HP 432u

**ipsec letsencrypt**  
{ --client | --server | --test | --disable | --help }

.HP 432u

**ipsec letsencrypt**  
{ --generate-certificate | --renew }  
*hostname*

.SH "DESCRIPTION"

.PP *Letsencrypt* The command creates a secure Opportunistic Connection between the hosts commonly referred to as client and server. The client connects to the server and remains anonymous, whereas the server is authenticated before connecting to it. The server is not anonymous. The server uses Let's Encrypt certificates for authentication and encryption purposes.

.PP The option **--client** is used for initial client setup.

.PP The option **--server** is used for initial server setup.

.PP The option **--test** is used for testing the configuration/connection.

.PP The option **--generate-certificate hostname** is used for generating the certificate for the hostname.

.PP The option **--renew hostname** is used for updating the generated certificate, it keeps the private key same.

.PP The option **--disable** is used for disabling IPsec service.

.PP The option **--help** is used for displaying all the available options.

.SH "SEE ALSO"

.PP [**ipsec.conf**(5)](/man/enterprise-packages/libreswan/ipsec.conf.5)

.SH "HISTORY"

.PP Original Program written by <**Rishabh**\[1]>.

.SH "AUTHOR"

Andrew Cagney, Rishabh, Tuomo Soini

# [NOTES](#NOTES)

1\.

Rishabh

https://github.com/Rishabh04-02/

08/30/2026 Libreswan v5.4-HEAD

---

Document: ipsec-letsencrypt(8) from libreswan 5.4-r2 (Chainguard OS)
Source: https://github.com/libreswan/libreswan