差分
このページの2つのバージョン間の差分を表示します。
両方とも前のリビジョン 前のリビジョン 次のリビジョン | 前のリビジョン 次のリビジョン両方とも次のリビジョン | ||
linux:certbot_client [2023/03/01 11:49] – [証明書取得の実行] ともやん | linux:certbot_client [2023/04/04 07:18] – [既に取得済みの証明書にサブドメインを追加] ともやん | ||
---|---|---|---|
行 190: | 行 190: | ||
</ | </ | ||
</ | </ | ||
+ | |||
+ | ===== 既に取得済みの証明書にサブドメインを追加 ===== | ||
+ | **redmine.monsters-g.com** サブドメインを追加する場合、既存ドメインに **monsters-g.com**、**www.monsters-g.com** のあとに追記する🤔\\ | ||
+ | コマンドラインでは、< | ||
+ | <WRAP color_term> | ||
+ | <WRAP color_command>< | ||
+ | <b class=GRN> | ||
+ | </ | ||
+ | <WRAP color_result>< | ||
+ | Saving debug log to / | ||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | An RSA certificate named monsters-g.com already exists. Do you want to update | ||
+ | its key type to ECDSA? | ||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | (U)pdate key type/(K)eep existing key type: u | ||
+ | Renewing an existing certificate for monsters-g.com and 2 more domains | ||
+ | |||
+ | Successfully received certificate. | ||
+ | Certificate is saved at: / | ||
+ | Key is saved at: / | ||
+ | This certificate expires on 2023-07-02. | ||
+ | These files will be updated when the certificate renews. | ||
+ | Certbot has set up a scheduled task to automatically renew this certificate in the background. | ||
+ | |||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | If you like Certbot, please consider supporting our work by: | ||
+ | * Donating to ISRG / Let's Encrypt: | ||
+ | * Donating to EFF: https:// | ||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | </ | ||
+ | </ | ||
+ | |||
+ | Apache の場合は、新しく取得した証明書を有効化する為にリロードする🤔\\ | ||
+ | <WRAP color_term> | ||
+ | <WRAP color_command>< | ||
+ | <b class=GRN> | ||
+ | </ | ||
+ | </ | ||
+ | |||
+ | ===== 証明書更新テストの実行 ===== | ||
+ | <WRAP color_term> | ||
+ | <WRAP color_command>< | ||
+ | $ sudo certbot renew --dry-run | ||
+ | </ | ||
+ | <WRAP color_result>< | ||
+ | Saving debug log to / | ||
+ | |||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | Processing / | ||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | Simulating renewal of an existing certificate for monsters-g.com and www.monsters-g.com | ||
+ | |||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | Processing / | ||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | Simulating renewal of an existing certificate for tomoyan.net and 3 more domains | ||
+ | |||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | Congratulations, | ||
+ | / | ||
+ | / | ||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | </ | ||
+ | </ | ||
+ | |||
+ | ===== 証明書更新の実行 ===== | ||
+ | <WRAP color_term> | ||
+ | <WRAP color_command>< | ||
+ | $ sudo certbot renew | ||
+ | </ | ||
+ | <WRAP color_result_long>< | ||
+ | Saving debug log to / | ||
+ | |||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | Processing / | ||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | Cert is due for renewal, auto-renewing... | ||
+ | Plugins selected: Authenticator webroot, Installer None | ||
+ | Renewing an existing certificate | ||
+ | Performing the following challenges: | ||
+ | http-01 challenge for monsters-g.com | ||
+ | http-01 challenge for www.monsters-g.com | ||
+ | Waiting for verification... | ||
+ | Cleaning up challenges | ||
+ | |||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | new certificate deployed without reload, fullchain is | ||
+ | / | ||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | |||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | Processing / | ||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | Cert is due for renewal, auto-renewing... | ||
+ | Plugins selected: Authenticator webroot, Installer None | ||
+ | Renewing an existing certificate | ||
+ | Performing the following challenges: | ||
+ | http-01 challenge for redmine.tomoyan.net | ||
+ | http-01 challenge for repos.tomoyan.net | ||
+ | http-01 challenge for tomoyan.net | ||
+ | http-01 challenge for www.tomoyan.net | ||
+ | Waiting for verification... | ||
+ | Cleaning up challenges | ||
+ | |||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | new certificate deployed without reload, fullchain is | ||
+ | / | ||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | |||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | |||
+ | Congratulations, | ||
+ | / | ||
+ | / | ||
+ | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | ||
+ | </ | ||
+ | </ | ||
+ | |||
+ | 新しい証明書を反映させるために、Apache をリロードする😉\\ | ||
+ | <WRAP color_term> | ||
+ | <WRAP color_command>< | ||
+ | $ sudo systemctl reload httpd | ||
+ | </ | ||
+ | </ | ||
+ | |||