무료 공인 인증 받기

Ubuntu 16.04 / Let’s Encrypt 무료 SSL 인증서 발급 받기

   

 

우분투(Ubuntu) 16.04에서 Let’s Encrypt 인증서를 발급 받고 관리하는 방법을 정리합니다. 클라이언트 프로그램은 Let’s Encrypt에서 추천하는 Certbot을 사용합니다.

환경

Ubuntu 16.04

Apache Web Server

저장소 추가

add-apt-repository ppa:certbot/certbot

add-apt-repository 설치를 위해, apt-get install software-properties-common 설치 한다.

업데이트

apt update

설치

apt install python-certbot-apache

인증서 발급

접속 가능한 도메인이어야 발급 가능합니다.

인증서 발급하고, Apache 설정 파일도 자동으로 만듭니다.

abc.com 인증서 발급

certbot --apache -d abc.com

abc.com과 www.abc.com 인증서 동시 발급

certbot --apache -d abc.com -d www.abc.com

인증서 갱신

certbot renew

인증서 삭제

abc.com 인증서 삭제

certbot delete --cert-name abc.com

root@404ec1900f08:/etc/init.d# certbot certonly --webroot -w /var/www/html -d phpdoumi.mooo.com

Saving debug log to /var/log/letsencrypt/letsencrypt.log

Plugins selected: Authenticator webroot, Installer None

Enter email address (used for urgent renewal and security notices) (Enter 'c' to

cancel): phpdoumi@gmail.com

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Please read the Terms of Service at

https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must

agree in order to register with the ACME server at

https://acme-v02.api.letsencrypt.org/directory

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

(A)gree/(C)ancel: a

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Would you be willing to share your email address with the Electronic Frontier

Foundation, a founding partner of the Let's Encrypt project and the non-profit

organization that develops Certbot? We'd like to send you email about our work

encrypting the web, EFF news, campaigns, and ways to support digital freedom.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

(Y)es/(N)o: n

Obtaining a new certificate

Performing the following challenges:

http-01 challenge for phpdoumi.mooo.com

Using the webroot path /var/www/html for all unmatched domains.

Waiting for verification...

Cleaning up challenges

IMPORTANT NOTES:

 - Congratulations! Your certificate and chain have been saved at:

   /etc/letsencrypt/live/phpdoumi.mooo.com/fullchain.pem

   Your key file has been saved at:

   /etc/letsencrypt/live/phpdoumi.mooo.com/privkey.pem

   Your cert will expire on 2018-11-10. To obtain a new or tweaked

   version of this certificate in the future, simply run certbot

   again. To non-interactively renew *all* of your certificates, run

   "certbot renew"

 - Your account credentials have been saved in your Certbot

   configuration directory at /etc/letsencrypt. You should make a

   secure backup of this folder now. This configuration directory will

   also contain certificates and private keys obtained by Certbot so

   making regular backups of this folder is ideal.

 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate

   Donating to EFF:                    https://eff.org/donate-le