nginx certbot muitidomain ssl

운영자 | 기사입력 2024/02/06 [08:30]
>
필자의 다른기사 보기 인쇄하기 메일로 보내기 글자 크게 글자 작게
nginx certbot muitidomain ssl
 
운영자   기사입력  2024/02/06 [08:30]

map $ssl_server_name $ssl_domain_name {

 default $ssl_server_name;

}


 

listen 443 ssl;


    ssl_certificate  "/etc/letsencrypt/live/$ssl_domain_name/fullchain.pem";
    ssl_certificate_key  "/etc/letsencrypt/live/$ssl_domain_name/privkey.pem";
==============================================================

 certbot certonly
Saving debug log to /var/log/letsencrypt/letsencrypt.log

How would you like to authenticate with the ACME CA?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: Spin up a temporary webserver (standalone)
2: Place files in webroot directory (webroot)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
Plugins selected: Authenticator webroot, Installer None
Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
Please enter in your domain name(s) (comma and/or space separated)  (Enter 'c'
to cancel): www.yongin.kr yongin.kr
Requesting a certificate for www.yongin.kr and yongin.kr
Performing the following challenges:
http-01 challenge for www.yongin.kr
http-01 challenge for yongin.kr
Input the webroot for www.yongin.kr: (Enter 'c' to cancel): /home/inswave/aaa

Select the webroot for yongin.kr:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: Enter a new webroot
2: /home/inswave/aaa
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
Waiting for verification...
Cleaning up challenges
Subscribe to the EFF mailing list (email: abc@inswave.net).
Starting new HTTPS connection (1): supporters.eff.org
An unexpected error occurred:
TypeError: __str__ returned non-string (type Error)
Please see the logfiles in /var/log/letsencrypt for more details.

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/www.yongin.kr/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/www.yongin.kr/privkey.pem
   Your certificate will expire on 2024-05-06. To obtain a new or
   tweaked version of this certificate in the future, simply run
   certbot again. To non-interactively renew *all* of your
   certificates, run "certbot renew"
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le

=============================================================

chown nginx:nginx /etc/letsencrypt/live -R
chown nginx:nginx /etc/letsencrypt/archive -R


트위터 트위터 페이스북 페이스북 카카오톡 카카오톡
기사입력: 2024/02/06 [08:30]  최종편집: ⓒ iwav