Dondariadmin (トーク | 投稿記録) |
Dondariadmin (トーク | 投稿記録) |
||
(同じ利用者による、間の2版が非表示) | |||
1行目: | 1行目: | ||
− | == Let's | + | == Let's Encryptとは == |
* 無償でSSL証明書を取得できるプロジェクト | * 無償でSSL証明書を取得できるプロジェクト | ||
* https://letsencrypt.jp/ | * https://letsencrypt.jp/ |
# yum install git
# git clone https://github.com/letsencrypt/letsencrypt
# cd letsencrypt # ./letsencrypt-auto --debug --help
# /etc/init.d/httpd stop
# ./letsencrypt-auto certonly -a standalone -d dondari.com -d www.dondari.com
IMPORTANT NOTES: - Congratulations! Your certificate and chain have been saved at /etc/letsencrypt/live/dondari.com/fullchain.pem. Your cert will expire on 2016-08-05. To obtain a new version of the certificate in the future, simply run Let's Encrypt again. - If you like Let's Encrypt, please consider supporting our work by: Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate Donating to EFF: https://eff.org/donate-le
証明書ファイルは /etc/letsencrypt/live/dondari.com/fullchain.pem に保存されました。 2016-08-15に失効します。今後証明書を更新するには、コマンド実行してください。
# ls -l /etc/letsencrypt/live/dondari.com/ cert.pem -> ../../archive/dondari.com/cert1.pem chain.pem -> ../../archive/dondari.com/chain1.pem fullchain.pem -> ../../archive/dondari.com/fullchain1.pem privkey.pem -> ../../archive/dondari.com/privkey1.pem
# /etc/init.d/httpd start
# httpd -v Server version: Apache/2.4.18 (Amazon) Server built: Mar 7 2016 22:32:11
SSLCertificateFile /etc/letsencrypt/live/dondari.com/fullchain.pem SSLCertificateKeyFile /etc/letsencrypt/live/dondari.com/privkey.pem
# /etc/init.d/httpd restartTweet