{"id":19206,"date":"2016-02-28T12:06:32","date_gmt":"2016-02-28T03:06:32","guid":{"rendered":"https:\/\/freenps.net\/blog\/?p=803"},"modified":"2016-02-28T12:06:32","modified_gmt":"2016-02-28T03:06:32","slug":"post-803","status":"publish","type":"post","link":"https:\/\/kahy.info\/?p=19206","title":{"rendered":"Let's Encrypt \u3067\u7121\u6599\u306e\u30b5\u30fc\u30d0\u30fc\u8a3c\u660e\u66f8\u3092\u53d6\u5f97"},"content":{"rendered":"

\u7121\u6599\u3067\u30b5\u30a4\u30c8\u3092HTTPS\u5316\u3067\u304d\u308b\u3001Let’s Encrypt<\/a> \u3092\u4f7f\u3063\u3066\u307f\u307e\u3057\u305f\u3002<\/p>\n

Centos\u4e0a\u3067apache\u3068\u3044\u3046\u3088\u3046\u306a\u74b0\u5883\u306broot\u30a2\u30ab\u30a6\u30f3\u30c8\u3067\u30ed\u30b0\u30a4\u30f3\u3067\u304d\u308c\u3070\u4ee5\u4e0b\u306e\u624b\u9806\u3067\u5927\u4e08\u592b\u3068\u601d\u3044\u307e\u3059\u3002
\n\u8a73\u7d30\u306a\u6280\u8853\u8aac\u660e\u306f\u4ed6\u306e\u30b5\u30a4\u30c8\u306b\u8b72\u308a\u307e\u3059\u3002<\/p>\n

<\/p>\n

\u307e\u305a\u306f\u4ee5\u4e0b\u306e\u30b3\u30de\u30f3\u30c9\u3067letsencrypt\u306e\u5b9f\u884c\u30d5\u30a1\u30a4\u30eb\u3092\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u307e\u3059\u3002
\n\u4ee5\u4e0b\u306f”\/user\/local”\u306b\u3057\u3066\u3044\u307e\u3059\u304c\u3001\u5834\u6240\u306f\u57fa\u672c\u7684\u306b\u3069\u3053\u3067\u3082\u304b\u307e\u3044\u307e\u305b\u3093\u3002\uff08\/root\u3068\u304b\uff09<\/p>\n

cd \/usr\/local\/
\ngit clone https:\/\/github.com\/letsencrypt\/letsencrypt<\/p><\/blockquote>\n

\u6b21\u306b\u3001\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u305fletsencrypt \u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u79fb\u52d5\u3057\u3066\u3001\u3044\u304d\u306a\u308a\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u30eb\u30fc\u30c8\u3068\u30c9\u30e1\u30a4\u30f3\u540d\u767b\u9332\u3057\u3066\u3057\u307e\u3044\u307e\u3059\u3002
\napache\u7528\u306e\u30b3\u30de\u30f3\u30c9\u3082\u7528\u610f\u3055\u308c\u3066\u3044\u307e\u3059\u304c\u672a\u691c\u8a3c\u3067\u3059\u3002\uff08Debian\u7cfb\u7528\u3068\u306e\u8a18\u8ff0\u304c\u3042\u3063\u305f\u306e\u3067\u3002\u3002\u3002\uff09<\/p>\n

cd \/usr\/local\/letsencrypt
\n.\/letsencrypt-auto certonly –webroot -w \/var\/www\/example -d example.com -m sample@example.com –agree-tos<\/p><\/blockquote>\n

\u30aa\u30d7\u30b7\u30e7\u30f3\u306e\u8aac\u660e<\/strong><\/p>\n

–webroot\u3000\u3068\u00a0 –standalone \u306e\u4f7f\u3044\u5206\u3051<\/strong>
\nLet’s Encrypt<\/a> \u306e\u30b5\u30fc\u30d0\u30fc\u304b\u3089\u30c9\u30e1\u30a4\u30f3\u5b58\u5728\u78ba\u8a8d\u306e\u305f\u3081\u306b\u30a2\u30af\u30bb\u30b9\u304c\u3042\u308a\u307e\u3059\u3002
\nWEB\u30b5\u30fc\u30d0\u30fc\u304c\u7acb\u3061\u4e0a\u304c\u3063\u3066\u3044\u308c\u3070\u3001–webroot\u30aa\u30d7\u30b7\u30e7\u30f3\u3092\u4f7f\u3046\u3068\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u30eb\u30fc\u30c8\u306b\u30d5\u30a1\u30a4\u30eb\u3092\u4f5c\u6210\u3057\u3066\u78ba\u8a8d\u304c\u884c\u308f\u308c\u308b\u306e\u3067\u3001WEB\u30b5\u30fc\u30d0\u30fc\u3092\u7acb\u3061\u4e0a\u3052\u305f\u307e\u307e\u3067\u5b8c\u4e86\u3057\u307e\u3059\u3002WEB\u30b5\u30fc\u30d0\u30fc\u3092\u7528\u610f\u3067\u304d\u306a\u3044\u5834\u5408\u306f–standalone\u3092\u4f7f\u3046\u3068\u3001\u4e00\u6642\u7684\u306bletsencrypt\u30b3\u30de\u30f3\u30c9\u304cWEB\u30b5\u30fc\u30d0\u30fc\u3068\u306a\u3063\u3066\u78ba\u8a8d\u3092\u5b8c\u4e86\u3067\u304d\u307e\u3059\u3002\u306a\u3093\u3089\u304b\u306e\u7406\u7531\u3067WEB\u30b5\u30fc\u30d0\u30fc\u3092\u7acb\u3061\u4e0a\u3052\u3066\u3044\u308b\u74b0\u5883\u3067 –standalone\u3092\u4f7f\u3046\u5fc5\u8981\u304c\u3042\u308b\u5834\u5408\u306f\u4e00\u6642\u306bWEB\u30b5\u30fc\u30d0\u30fc\u3092\u505c\u6b62\u3057\u3066\u304a\u304f\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

-w
\n<\/strong>\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u30eb\u30fc\u30c8\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u6307\u5b9a\u3057\u307e\u3059\u3002
\n-d<\/strong>
\n\u30c9\u30e1\u30a4\u30f3\u540d\u3092\u6307\u5b9a\u3057\u307e\u3059\u3002
\n\u30d0\u30fc\u30c1\u30e3\u30eb\u30db\u30b9\u30c8\u3092\u4f7f\u3063\u3066\u8907\u6570\u306e\u30c9\u30e1\u30a4\u30f3\u540d\u3067\u904b\u7528\u3059\u308b\u5834\u5408\u306b\u306f -w\u3001-d\u3092\u8907\u6570\u6307\u5b9a\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n

-m
\n<\/strong>\u81ea\u5206\u306e\u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9\u3092\u6307\u5b9a\u3057\u307e\u3059\u3002
\n<\/strong>\u30c8\u30e9\u30d6\u30eb\u767a\u751f\u6642\u306b Let’s Encrypt \u3068\u306e\u9023\u7d61\u306b\u4f7f\u3046\u3088\u3046\u3067\u3059\u3002<\/p>\n

–agree-tos<\/strong>
\n\u3053\u306e\u30aa\u30d7\u30b7\u30e7\u30f3\u3092\u3064\u3051\u308b\u3053\u3068\u3067\u3001Let’s Encrypt \u306e\u5229\u7528\u898f\u7d04\u306b\u540c\u610f\u3059\u308b\u3053\u3068\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n

\u8a3c\u660e\u66f8\u306e\u53d6\u5f97\u306b\u6210\u529f\u3057\u305f\u3089\u3001\/etc\/letsencrypt\/live\/<\u30c9\u30e1\u30a4\u30f3\u540d> \/\u306b\u4ee5\u4e0b\u306e\u30d5\u30a1\u30a4\u30eb\u304c\u4f5c\u6210\u3055\u308c\u307e\u3059\u3002<\/p>\n

\u8a3c\u660e\u66f8\uff1a cert.pem
\n\u4e2d\u9593CA\u8a3c\u660e\u66f8\uff1a chain.pem
\n\u8a3c\u660e\u66f8\uff0b\u4e2d\u9593CA\u8a3c\u660e\u66f8\uff1a fullchain.pem
\n\u79d8\u5bc6\u9375\uff1a privkey.pem<\/p><\/blockquote>\n

\u8a3c\u660e\u66f8\u53d6\u5f97\u306e\u5b9f\u9a13\u3092\u7e70\u308a\u8fd4\u3057\u3066\u3044\u305f\u3089\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u30a8\u30e9\u30fc\u304c\u767a\u751f\u3059\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u3002
\n\u5229\u7528\u5236\u9650<\/a>\uff08\uff11\u30c9\u30e1\u30a4\u30f3\u3042\u305f\u308a\uff11\u9031\u9593\u306b\uff15\u56de\u307e\u3067\uff09\u306b\u5f15\u3063\u304b\u304b\u3063\u305f\u3053\u3068\u304c\u7406\u7531\u3067\u3059\u304c\u3001\u8a3c\u660e\u66f8\u3092\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u305b\u305a\u306b\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3054\u3068\u6d88\u3057\u3066\u304b\u3089\u518d\u53d6\u5f97\u3057\u3066\u3044\u305f\u306e\u3067\u56f0\u308a\u307e\u3057\u305f\u3002\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306f\u5fd8\u308c\u305a\u306b\u3002\u3002\u3002<\/p>\n

[root@example ~]# cd \/usr\/local\/letsencrypt\/
\n[root@example letsencrypt]# .\/letsencrypt-auto certonly –webroot -w \/var\/www\/html\/example -d example.com -m hoge@example.com –agree-tos
\nChecking for new version…
\nCreating virtual environment…
\nInstalling Python packages…
\nRequesting root privileges to run letsencrypt…
\n\/root\/.local\/share\/letsencrypt\/bin\/letsencrypt –no-self-upgrade certonly –webroot -w \/var\/www\/html\/example -d example .com -m hoge@example.com –agree-tos
\n\/root\/.local\/share\/letsencrypt\/lib\/python2.6\/site-packages\/cryptography\/__init__.py:25: DeprecationWarning: Python 2.6 is no longer supported by the Python core team, please upgrade your Python.
\nDeprecationWarning
\nVersion: 1.1-20080819
\nVersion: 1.1-20080819
\nAn unexpected error occurred:
\nThere were too many requests of a given type :: Error creating new cert :: Too many certificates already issued for: example.com
\nPlease see the logfiles in \/var\/log\/letsencrypt for more details.<\/p><\/blockquote>\n

Let’s Encrypt\u306e\u8a3c\u660e\u66f8\u306e\u6709\u52b9\u671f\u9650\u306f\u77ed\u304f\u3001\uff19\uff10\u65e5\u3068\u306a\u3063\u3066\u3044\u307e\u3059\u3002
\n\u516c\u5f0f\u30b5\u30a4\u30c8\u3067\u3082Cron\u3084systemd<\/code>\u3067\u5b9a\u671f\u7684\u306b\u81ea\u52d5\u66f4\u65b0\u3059\u308b\u3053\u3068\u304c\u52e7\u3081\u3089\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n

Getting Started
\nhttps:\/\/letsencrypt.org\/getting-started\/<\/a><\/p>\n

\u3053\u306e\u8a18\u4e8b\u306f\u516c\u958b\u5f8c1\u5e74\u4ee5\u4e0a\u7d4c\u904e\u3057\u3066\u3044\u307e\u3059\u3002\u73fe\u5728\u306f\u72b6\u6cc1\u304c\u7570\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u306e\u3067\u3054\u6ce8\u610f\u304f\u3060\u3055\u3044\u3002<\/div>","protected":false},"excerpt":{"rendered":"

\u7121\u6599\u3067\u30b5\u30a4\u30c8\u3092HTTPS\u5316\u3067\u304d\u308b\u3001Let’s Encrypt \u3092\u4f7f\u3063\u3066\u307f\u307e\u3057\u305f\u3002 Centos\u4e0a\u3067apache\u3068\u3044\u3046\u3088\u3046\u306a\u74b0\u5883\u306broot\u30a2\u30ab\u30a6\u30f3\u30c8\u3067\u30ed\u30b0\u30a4\u30f3\u3067\u304d\u308c\u3070\u4ee5\u4e0b\u306e\u624b\u9806\u3067\u5927\u4e08\u592b\u3068\u601d\u3044\u307e\u3059\u3002 \u8a73\u7d30 … <\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5617,3],"tags":[],"class_list":["post-19206","post","type-post","status-publish","format-standard","hentry","category-freenps","category-3"],"_links":{"self":[{"href":"https:\/\/kahy.info\/index.php?rest_route=\/wp\/v2\/posts\/19206","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kahy.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kahy.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kahy.info\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/kahy.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=19206"}],"version-history":[{"count":0,"href":"https:\/\/kahy.info\/index.php?rest_route=\/wp\/v2\/posts\/19206\/revisions"}],"wp:attachment":[{"href":"https:\/\/kahy.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=19206"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kahy.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=19206"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kahy.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=19206"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}