目次
文書の過去の版を表示しています。
Certbot クライアント
Fedora 29 でのインストール
$ sudo -s # cd ~ # dnf install python3-virtualenv # curl -O https://dl.eff.org/certbot-auto # chmod a+x certbot-auto # ./certbot-auto
Bootstrapping dependencies for RedHat-based OSes... (you can skip this with --no-bootstrap) dnf は /usr/bin/dnf です dnf はハッシュされています (/usr/bin/dnf) メタデータの期限切れの最終確認: 1:18:05 時間前の 2019年02月15日 10時47分08秒 に実施しました。 パッケージ gcc-8.2.1-6.fc29.x86_64 は既にインストールされています。 パッケージ augeas-libs-1.10.1-3.fc29.x86_64 は既にインストールされています。 パッケージ openssl-1:1.1.1a-1.fc29.x86_64 は既にインストールされています。 パッケージ openssl-devel-1:1.1.1a-1.fc29.x86_64 は既にインストールされています。 パッケージ libffi-devel-3.1-18.fc29.x86_64 は既にインストールされています。 パッケージ redhat-rpm-config-118-1.fc29.noarch は既にインストールされています。 パッケージ ca-certificates-2018.2.26-2.fc29.noarch は既にインストールされています。 パッケージ python2-libs-2.7.15-11.fc29.x86_64 は既にインストールされています。 パッケージ python2-setuptools-40.4.3-1.fc29.noarch は既にインストールされています。 パッケージ python2-devel-2.7.15-11.fc29.x86_64 は既にインストールされています。 パッケージ python2-virtualenv-16.0.0-5.fc29.noarch は既にインストールされています。 パッケージ python2-tools-2.7.15-11.fc29.x86_64 は既にインストールされています。 パッケージ python2-pip-18.1-1.fc29.noarch は既にインストールされています。 パッケージ mod_ssl-1:2.4.38-2.fc29.x86_64 は既にインストールされています。 依存関係が解決しました。 行うべきことはありません。 完了しました! Creating virtual environment... Installing Python packages... Installation succeeded. Saving debug log to /var/log/letsencrypt/letsencrypt.log Error while running apachectl configtest. AH00526: Syntax error on line 101 of /etc/httpd/conf.d/ssl.conf: SSLCertificateFile: file '/etc/pki/tls/certs/localhost.crt' does not exist or is empty Certbot doesn't know how to automatically configure the web server on this system. However, it can still get a certificate for you. Please run "certbot-auto certonly" to do so. You'll need to manually configure your web server to use the resulting certificate.
インストール
$ sudo dnf install certbot python-certbot-apache
テスト実行
$ sudo certbot Saving debug log to /var/log/letsencrypt/letsencrypt.log Certbot doesn't know how to automatically configure the web server on this system. However, it can still get a certificate for you. Please run "certbot certonly" to do so. You'll need to manually configure your web server to use the resulting certificate. $ sudo less /var/log/letsencrypt/letsencrypt.log
2019-02-15 11:53:24,221:DEBUG:certbot.main:certbot version: 0.30.2 2019-02-15 11:53:24,222:DEBUG:certbot.main:Arguments: [] 2019-02-15 11:53:24,222:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2019-02-15 11:53:24,246:DEBUG:certbot.log:Root logging level set at 20 2019-02-15 11:53:24,247:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log 2019-02-15 11:53:24,248:DEBUG:certbot.plugins.selection:Requested authenticator None and installer None 2019-02-15 11:53:24,248:DEBUG:certbot.plugins.selection:No candidate plugin 2019-02-15 11:53:24,248:DEBUG:certbot.plugins.selection:Selected authenticator None and installer None
証明書取得の実行
$ sudo certbot certonly --agree-tos --webroot -w /var/www/html/ -d tomoyan.net Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator webroot, Installer None Enter email address (used for urgent renewal and security notices) (Enter 'c' to cancel): tomoyan@tomoyan.net - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Would you be willing to share your email address with the Electronic Frontier Foundation, a founding partner of the Let's Encrypt project and the non-profit organization that develops Certbot? We'd like to send you email about our work encrypting the web, EFF news, campaigns, and ways to support digital freedom. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - (Y)es/(N)o: N Obtaining a new certificate Performing the following challenges: http-01 challenge for tomoyan.net Using the webroot path /var/www/html for all unmatched domains. Waiting for verification... Cleaning up challenges Failed authorization procedure. tomoyan.net (http-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://www.tomoyan.net.well-known/acme-challenge/V134KUuu24abYl4WMcicF22FOFrp7AxkOJHBkVzFA4c: Error getting validation data IMPORTANT NOTES: - The following errors were reported by the server: Domain: tomoyan.net Type: connection Detail: Fetching http://www.tomoyan.net.well-known/acme-challenge/V134KUuu24abYl4WMcicF22FOFrp7AxkOJHBkVzFA4c: Error getting validation data To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address. Additionally, please check that your computer has a publicly routable IP address and that no firewalls are preventing the server from communicating with the client. If you're using the webroot plugin, you should also verify that you are serving files from the webroot path you provided. - Your account credentials have been saved in your Certbot configuration directory at /etc/letsencrypt. You should make a secure backup of this folder now. This configuration directory will also contain certificates and private keys obtained by Certbot so making regular backups of this folder is ideal.
$ sudo certbot certonly --agree-tos --webroot -w /var/www/html/ -d monsters-g.com Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator webroot, Installer None Obtaining a new certificate Performing the following challenges: http-01 challenge for monsters-g.com Using the webroot path /var/www/html for all unmatched domains. Waiting for verification... Cleaning up challenges Failed authorization procedure. monsters-g.com (http-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://www.tomoyan.net.well-known/acme-challenge/7aQcZPghit_VT2lp1DvkULSFPC4zPru8fVCPZaF5P8A: Error getting validation data IMPORTANT NOTES: - The following errors were reported by the server: Domain: monsters-g.com Type: connection Detail: Fetching http://www.tomoyan.net.well-known/acme-challenge/7aQcZPghit_VT2lp1DvkULSFPC4zPru8fVCPZaF5P8A: Error getting validation data To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address. Additionally, please check that your computer has a publicly routable IP address and that no firewalls are preventing the server from communicating with the client. If you're using the webroot plugin, you should also verify that you are serving files from the webroot path you provided.