目次
文書の過去の版を表示しています。
Certbot クライアント
インストール
$ sudo dnf install certbot python-certbot-apache
テスト実行
$ sudo certbot Saving debug log to /var/log/letsencrypt/letsencrypt.log Certbot doesn't know how to automatically configure the web server on this system. However, it can still get a certificate for you. Please run "certbot certonly" to do so. You'll need to manually configure your web server to use the resulting certificate. $ sudo less /var/log/letsencrypt/letsencrypt.log
2019-02-14 14:08:59,139:DEBUG:certbot.main:certbot version: 0.30.2 2019-02-14 14:08:59,139:DEBUG:certbot.main:Arguments: [] 2019-02-14 14:08:59,139:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2019-02-14 14:08:59,159:DEBUG:certbot.log:Root logging level set at 20 2019-02-14 14:08:59,159:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log 2019-02-14 14:08:59,160:DEBUG:certbot.plugins.selection:Requested authenticator None and installer None 2019-02-14 14:08:59,160:DEBUG:certbot.plugins.selection:No candidate plugin 2019-02-14 14:08:59,160:DEBUG:certbot.plugins.selection:Selected authenticator None and installer None
証明書取得の実行
$ sudo certbot certonly --agree-tos --webroot -w /var/www/html/ -d tomoyan.net Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator webroot, Installer None Enter email address (used for urgent renewal and security notices) (Enter 'c' to cancel): tomoyan@tomoyan.net - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Would you be willing to share your email address with the Electronic Frontier Foundation, a founding partner of the Let's Encrypt project and the non-profit organization that develops Certbot? We'd like to send you email about our work encrypting the web, EFF news, campaigns, and ways to support digital freedom. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - (Y)es/(N)o: N Obtaining a new certificate Performing the following challenges: http-01 challenge for tomoyan.net Using the webroot path /var/www/html for all unmatched domains. Waiting for verification... Cleaning up challenges Failed authorization procedure. tomoyan.net (http-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://www.tomoyan.net.well-known/acme-challenge/V134KUuu24abYl4WMcicF22FOFrp7AxkOJHBkVzFA4c: Error getting validation data IMPORTANT NOTES: - The following errors were reported by the server: Domain: tomoyan.net Type: connection Detail: Fetching http://www.tomoyan.net.well-known/acme-challenge/V134KUuu24abYl4WMcicF22FOFrp7AxkOJHBkVzFA4c: Error getting validation data To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address. Additionally, please check that your computer has a publicly routable IP address and that no firewalls are preventing the server from communicating with the client. If you're using the webroot plugin, you should also verify that you are serving files from the webroot path you provided. - Your account credentials have been saved in your Certbot configuration directory at /etc/letsencrypt. You should make a secure backup of this folder now. This configuration directory will also contain certificates and private keys obtained by Certbot so making regular backups of this folder is ideal.
$ sudo certbot certonly --agree-tos --webroot -w /var/www/html/ -d monsters-g.com Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator webroot, Installer None Obtaining a new certificate Performing the following challenges: http-01 challenge for monsters-g.com Using the webroot path /var/www/html for all unmatched domains. Waiting for verification... Cleaning up challenges Failed authorization procedure. monsters-g.com (http-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://www.tomoyan.net.well-known/acme-challenge/7aQcZPghit_VT2lp1DvkULSFPC4zPru8fVCPZaF5P8A: Error getting validation data IMPORTANT NOTES: - The following errors were reported by the server: Domain: monsters-g.com Type: connection Detail: Fetching http://www.tomoyan.net.well-known/acme-challenge/7aQcZPghit_VT2lp1DvkULSFPC4zPru8fVCPZaF5P8A: Error getting validation data To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address. Additionally, please check that your computer has a publicly routable IP address and that no firewalls are preventing the server from communicating with the client. If you're using the webroot plugin, you should also verify that you are serving files from the webroot path you provided.