Tag Archives: https
Letsencrypt — easy way
Now you can install certbot-nginx and it will do everything for you.
|
1 |
sudo yum install certbot-nginx |
And then
|
1 |
sudo certbot --nginx -d example.com -d www.example.com |
If it does not work, try this sudo certbot -d example.com -d www.example.com and then select nginx in a prompt. https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-centos-7
Check ssl certificates on a host
|
1 |
openssl s_client -connect your-host:443 |
If it says something like gethostbyname failure then try following. It needs socat, which can be installed on macOs like this — brew install socat. Then in one terminal open
|
1 |
socat TCP4-LISTEN:10443,fork TCP6:your-host:443 |
and in another terminal:
|
1 |
openssl s_client -crlf -connect 127.0.0.1:10443 |
Https бесплатно
Первоначальный запуск
|
1 |
./certbot-auto certonly --webroot -w /var/www/<my>/htdocs -d <sub.domain.com> --email <your email> --agree-tos |
Удаление сертификата для домена
|
1 |
./certbot-auto delete |
и выбрать домен из списка Обновление сертификатов Делается регулярно, т.к. срок действия — 90 дней. Или внести в крон:
|
1 |
./path/to/certbot-auto renew --quiet |
или руками:
|
1 |
./path/to/certbot-auto renew# --dry-run |
https://letsencrypt.org/how-it-works/ https://certbot.eff.org/#centosrhel6-nginx Если при тестировании обновления с помощью команды ./path/to/certbot-auto renew —dry-run возникает следующая ошибка
|
1 2 3 4 |
.../.local/share/letsencrypt/local/lib/python2.7/site-packages/pip/_vendor/requests/packages/urllib3/util/ssl_.py:120: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning. InsecurePlatformWarning You are using pip version 8.0.3, however version 8.1.2 is available. You should consider upgrading via the 'pip install --upgrade pip' command. |
или
|
1 2 3 4 5 |
Command "python setup.py egg_info" failed with error code -9 in /tmp/pip-build-qRqJ36/zope.interface/ Certbot has problem setting up the virtual environment. We were not be able to guess the right solution from your pip output. |
То возникают они из-за недостатка памяти …