{"id":19688,"date":"2017-09-01T06:13:47","date_gmt":"2017-08-31T22:13:47","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2017\/09\/01\/debian-ubuntu-%e5%ae%89%e8%a3%9d-lets-encrypt-%e5%88%b0-apache\/"},"modified":"2021-03-18T17:25:08","modified_gmt":"2021-03-18T09:25:08","slug":"debian-ubuntu-%e5%ae%89%e8%a3%9d-lets-encrypt-%e5%88%b0-apache","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2017\/09\/01\/debian-ubuntu-%e5%ae%89%e8%a3%9d-lets-encrypt-%e5%88%b0-apache\/","title":{"rendered":"Debian \/ Ubuntu \u5b89\u88dd Let\u2019s Encrypt \u5230 Apache"},"content":{"rendered":"

\u53c3\u8003\u7db2\u7ad9\uff1a
Debian \/ Ubuntu \u5b89\u88dd Let\u2019s Encrypt \u5230 Apache \u2013 Linux \u6280\u8853\u624b\u672d<\/a><\/p>\n

1. \u5b89\u88dd Apache Web Server
# apt-get install apache2<\/span><\/p>\n

2. \u555f\u7528 SSL \u6a21\u7d44\u4e26\u91cd\u65b0\u555f\u52d5 Apache Web Server
# a2enmod ssl<\/span>
Considering dependency setenvif for ssl:
Module setenvif already enabled
Considering dependency mime for ssl:
Module mime already enabled
Considering dependency socache_shmcb for ssl:
Enabling module socache_shmcb.
Enabling module ssl.
See \/usr\/share\/doc\/apache2\/README.Debian.gz on how to configure SSL and create self-signed certificates.
To activate the new configuration, you need to run:
\u00a0 service apache2 restart<\/p>\n

# a2ensite default-ssl.conf<\/span>
Enabling site default-ssl.
To activate the new configuration, you need to run:
\u00a0 service apache2 reload<\/p>\n

# \/etc\/init.d\/apache2 restart<\/span>
or
# systemctl restart apache2.service<\/span>[@more@]3. \u5b89\u88dd git \u5957\u4ef6
# apt-get install git<\/span><\/p>\n

4. \u4e0b\u8f09 Let\u2019s Encrypt \u7684\u76ee\u9304
# cd \/usr\/local<\/span>
# git clone https:\/\/github.com\/letsencrypt\/letsencrypt<\/span>
Cloning into ‘letsencrypt’…
remote: Counting objects: 43808, done.
remote: Compressing objects: 100% (76\/76), done.
remote: Total 43808 (delta 40), reused 0 (delta 0), pack-reused 43732
Receiving objects: 100% (43808\/43808), 12.74 MiB | 2.16 MiB\/s, done.
Resolving deltas: 100% (31283\/31283), done.
Checking connectivity… done.<\/p>\n

5. \u7522\u751f\u6191\u8b49
# .\/letsencrypt-auto –apache -d test.ilc.edu.tw -d www.test.ilc.edu.tw<\/p>\n

Enter email address (used for urgent renewal and security notices) (Enter ‘c’ to
cancel):<\/p>\n

——————————————————————————-
Please read the Terms of Service at
https:\/\/letsencrypt.org\/documents\/LE-SA-v1.1.1-August-1-2016.pdf. You must agree
in order to register with the ACME server at
https:\/\/acme-v01.api.letsencrypt.org\/directory
——————————————————————————-
(A)gree\/(C)ancel: A<\/p>\n

——————————————————————————-
Would you be willing to share your email address with the Electronic Frontier
Foundation, a founding partner of the Let’s Encrypt project and the non-profit
organization that develops Certbot? We’d like to send you email about EFF and
our work to encrypt the web, protect its users and defend digital rights.
——————————————————————————-
(Y)es\/(N)o: Y
Obtaining a new certificate
Performing the following challenges:
tls-sni-01 challenge for test.ilc.edu.tw
tls-sni-01 challenge for www.test.ilc.edu.tw
Waiting for verification…
Cleaning up challenges
Failed authorization procedure. nxi.tces.ilc.edu.tw (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Failed to connect to 192.168.1.1:443 for TLS-SNI-01 challenge<\/p>\n

IMPORTANT NOTES:
\u00a0– If you lose your account credentials, you can recover through
\u00a0\u00a0 e-mails sent to t850008@gmail.com.
\u00a0– The following errors were reported by the server:<\/p>\n

\u00a0\u00a0 Domain: www.test.ilc.edu.tw
\u00a0\u00a0 Type:\u00a0\u00a0 connection
\u00a0\u00a0 Detail: Failed to connect to 192.168.1.1:443 for TLS-SNI-01
\u00a0\u00a0 challenge<\/p>\n

\u00a0\u00a0 To fix these errors, please make sure that your domain name was
\u00a0\u00a0 entered correctly and the DNS A record(s) for that domain
\u00a0\u00a0 contain(s) the right IP address. Additionally, please check that
\u00a0\u00a0 your computer has a publicly routable IP address and that no
\u00a0\u00a0 firewalls are preventing the server from communicating with the
\u00a0\u00a0 client. If you’re using the webroot plugin, you should also verify
\u00a0\u00a0 that you are serving files from the webroot path you provided.
\u00a0– Your account credentials have been saved in your Certbot
\u00a0\u00a0 configuration directory at \/etc\/letsencrypt. You should make a
\u00a0\u00a0 secure backup of this folder now. This configuration directory will
\u00a0\u00a0 also contain certificates and private keys obtained by Certbot so
\u00a0\u00a0 making regular backups of this folder is ideal.<\/p>\n","protected":false},"excerpt":{"rendered":"

\u53c3\u8003\u7db2\u7ad9\uff1aDebian \/ Ubuntu \u5b89\u88dd Let\u2019s Encrypt \u5230 Apache \u2013 Linux … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008Debian \/ Ubuntu \u5b89\u88dd Let\u2019s Encrypt \u5230 Apache\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[179,119,137],"tags":[],"class_list":["post-19688","post","type-post","status-publish","format-standard","hentry","category-c-87877","category-c-78464","category-c-78482"],"meta_key":{"_pingme":["1"],"_encloseme":["1"],"lt_post_id":["686876"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19688"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=19688"}],"version-history":[{"count":1,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19688\/revisions"}],"predecessor-version":[{"id":21184,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19688\/revisions\/21184"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=19688"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=19688"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=19688"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}