Site icon KerKer 的模組世界

使用CertBot快速幫網站上憑證(https)

&NewLine;<p class&equals;"has-medium-font-size wp-block-paragraph">邊做邊學,順便留個筆記,若有錯誤請不吝指教。<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"has-medium-font-size wp-block-paragraph">對於想讓網站支援HTTPS但卻不想花錢購買憑證的站長來說,申請Let’s Encrypt發行的免費憑證是一個不錯的解決方式。<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"has-medium-font-size wp-block-paragraph">但是免費憑證的有效期只有三個月,對於不想要繁瑣的手動更新,可以透過CertBot來簡化及自動化憑證的申請、導入及更新工作。<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<&excl;--more-->&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"has-medium-font-size wp-block-paragraph">這裡我們使用Centos7的Apache伺服器作為範例。<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"has-medium-font-size wp-block-paragraph">在開始之前,首先你要確認你的 Apache 是否有配置 VirtualHost,檢查 &sol;etc&sol;httpd&sol;conf&sol;httpd&period;conf 及 IncludeOptional 的其餘檔案中是否有類似這樣的設定:<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<pre class&equals;"wp-block-code"><code>&lt&semi;VirtualHost &ast;&colon;80>&NewLine; ServerName kerker&period;website&NewLine; ServerAlias kerker&period;website&NewLine; DocumentRoot &sol;var&sol;www&sol;kerker&period;website&sol;html&NewLine; ErrorLog &sol;var&sol;www&sol;kerker&period;website&sol;log&sol;error&period;log&NewLine; CustomLog &sol;var&sol;www&sol;kerker&period;website&sol;log&sol;requests&period;log combined&NewLine;&lt&semi;&sol;VirtualHost><&sol;code><&sol;pre>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"has-medium-font-size wp-block-paragraph">如果沒有類似的設定請手動加一個上去,記得替換成你自己的網址及Log存放路徑,修改完可以先Reload Apache伺服器:<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph"><code>&dollar; service httpd reload<&sol;code><&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"has-medium-font-size wp-block-paragraph">再來我們可以開始安裝CertBot及相關套件了<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<pre class&equals;"wp-block-preformatted">&dollar; sudo yum install epel-release&NewLine;&dollar; sudo yum install certbot python2-certbot-apache mod&lowbar;ssl<&sol;pre>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"has-medium-font-size wp-block-paragraph">安裝完成後直接執行CertBot即可:<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph"><code>&dollar; sudo certbot --apache -d kerker&period;website<&sol;code><&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"has-medium-font-size wp-block-paragraph">安裝憑證的過程中會出現選項詢問是否強制將 http 轉導至 https,這邊可以依自己的需求決定即可。<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"has-medium-font-size wp-block-paragraph">安裝完成後會出現 IMPORTANT NOTES&colon; 的提示,會提供安裝的憑證路徑等資訊,到這邊網站的憑證應該已經申請、安裝完成了!<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"has-medium-font-size wp-block-paragraph">最後只要執行CertBot的自動更新選項就不用擔心憑證過期了<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph"><code>&dollar; sudo certbot renew --dry-run<&sol;code><&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"has-medium-font-size wp-block-paragraph">以上步驟主要是參考此文章:<a href&equals;"https&colon;&sol;&sol;www&period;digitalocean&period;com&sol;community&sol;tutorials&sol;how-to-secure-apache-with-let-s-encrypt-on-centos-7">https&colon;&sol;&sol;www&period;digitalocean&period;com&sol;community&sol;tutorials&sol;how-to-secure-apache-with-let-s-encrypt-on-centos-7<&sol;a><&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"has-medium-font-size wp-block-paragraph">在實作的過程中留下中文資料作為紀錄。<&sol;p>&NewLine;

Exit mobile version