letsencrypt_certbot

This is an old revision of the document!


Letsencrypt Certbot

Создание сайта

val@val:~$ mkdir mgtu

val@val:~$ cat mgtu/index.html
<h1>val.mgtu.ru</h1>
root@val:~# cat /etc/apache2/sites-available/val.mgtu.ru.conf
<VirtualHost *:80>
  ServerName val.mgtu.ru
  DocumentRoot /home/val/mgtu
  <Directory /home/val/mgtu>
    Require all granted
  </Directory>
</VirtualHost>
root@val:~# a2ensite val.mgtu.ru

root@val:~# systemctl reload apache2

Запрос сертификата

root@val:~# snap install --classic certbot

root@val:~# certbot certonly --manual
...
Create a file containing just this data:

MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM

And make it available on your web server at this URL:

http://val.mgtu.ru/.well-known/acme-challenge/NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
...
Press Enter to Continue
...
val@val:~$ mkdir -p mgtu/.well-known/acme-challenge/

val@val:~$ cat mgtu/.well-known/acme-challenge/NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM

Настройка SSL для сайта

root@val:~# cat /etc/apache2/sites-available/val.mgtu.ru.conf
...
<IfModule mod_ssl.c>
  <VirtualHost *:443>
    ServerName val.mgtu.ru
    DocumentRoot /home/val/mgtu
    <Directory /home/val/mgtu>
      Require all granted
    </Directory>
    SSLEngine on
    SSLCertificateFile /etc/letsencrypt/live/val.mgtu.ru/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/val.mgtu.ru/privkey.pem
</VirtualHost>

Продление сертификата



letsencrypt_certbot.1714718351.txt.gz · Last modified: 2024/05/03 09:39 by val