<p class="has-medium-font-size wp-block-paragraph">éåéå¸ï¼é 便çåçè¨ï¼è¥æé¯èª¤è«ä¸åææã</p>



<p class="has-medium-font-size wp-block-paragraph">å°æ¼æ³è®ç¶²ç«æ¯æ´HTTPSä½å»ä¸æ³è±é¢è³¼è²·æèçç«é·ä¾èªªï¼ç³è«Let’s Encryptç¼è¡çå è²»æèæ¯ä¸åä¸é¯ç解決æ¹å¼ã</p>



<p class="has-medium-font-size wp-block-paragraph">使¯å è²»æèçæææåªæä¸åæï¼å°æ¼ä¸æ³è¦ç¹ç£çæåæ´æ°ï¼å¯ä»¥ééCertBotä¾ç°¡ååèªååæèçç³è«ãå°å ¥åæ´æ°å·¥ä½ã</p>



<!--more-->



<p class="has-medium-font-size wp-block-paragraph">é裡æå使ç¨Centos7çApache伺æå¨ä½çºç¯ä¾ã</p>



<p class="has-medium-font-size wp-block-paragraph">å¨éå§ä¹åï¼é¦å ä½ è¦ç¢ºèªä½ ç Apache æ¯å¦æé ç½® VirtualHostï¼æª¢æ¥ /etc/httpd/conf/httpd.conf å IncludeOptional çå ¶é¤æªæ¡ä¸æ¯å¦æé¡ä¼¼é樣çè¨å®ï¼</p>



<pre class="wp-block-code"><code><;VirtualHost *:80>
 ServerName kerker.website
 ServerAlias kerker.website
 DocumentRoot /var/www/kerker.website/html
 ErrorLog /var/www/kerker.website/log/error.log
 CustomLog /var/www/kerker.website/log/requests.log combined
<;/VirtualHost></code></pre>



<p class="has-medium-font-size wp-block-paragraph">å¦ææ²æé¡ä¼¼çè¨å®è«æåå ä¸åä¸å»ï¼è¨å¾æ¿ææä½ èªå·±çç¶²ååLogåæ¾è·¯å¾ï¼ä¿®æ¹å®å¯ä»¥å Reload Apache伺æå¨ï¼</p>



<p class="wp-block-paragraph"><code>$ service httpd reload</code></p>



<p class="has-medium-font-size wp-block-paragraph">å便åå¯ä»¥éå§å®è£CertBotåç¸éå¥ä»¶äº</p>



<pre class="wp-block-preformatted">$ sudo yum install epel-release
$ sudo yum install certbot python2-certbot-apache mod_ssl</pre>



<p class="has-medium-font-size wp-block-paragraph">å®è£å®æå¾ç´æ¥å·è¡CertBotå³å¯ï¼</p>



<p class="wp-block-paragraph"><code>$ sudo certbot --apache -d kerker.website</code></p>



<p class="has-medium-font-size wp-block-paragraph">å®è£æèçéç¨ä¸æåºç¾é¸é è©¢åæ¯å¦å¼·å¶å° http è½å°è³ httpsï¼ééå¯ä»¥ä¾èªå·±çéæ±æ±ºå®å³å¯ã</p>



<p class="has-medium-font-size wp-block-paragraph">å®è£å®æå¾æåºç¾ IMPORTANT NOTES: çæç¤ºï¼ææä¾å®è£çæèè·¯å¾çè³è¨ï¼å°ééç¶²ç«çæèæè©²å·²ç¶ç³è«ãå®è£å®æäºï¼</p>



<p class="has-medium-font-size wp-block-paragraph">æå¾åªè¦å·è¡CertBotçèªåæ´æ°é¸é å°±ä¸ç¨æå¿æèéæäº</p>



<p class="wp-block-paragraph"><code>$ sudo certbot renew --dry-run</code></p>



<p class="has-medium-font-size wp-block-paragraph">以䏿¥é©ä¸»è¦æ¯åèæ¤æç« ï¼<a href="https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-centos-7">https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-centos-7</a></p>



<p class="has-medium-font-size wp-block-paragraph">å¨å¯¦ä½çéç¨ä¸çä¸ä¸æè³æä½çºç´éã</p>

使用CertBot快速幫網站上憑證(https)

