nginx certbot muitidomain ssl

운영자

| 기사입력 2024/02/06 [08:30]

nginx certbot muitidomain ssl

운영자

ㅣ 기사입력

2024/02/06 [08:30]

map $ssl_server_name $ssl_domain_name {

default $ssl_server_name;

}

listen 443 ssl;

ssl_certificate "/etc/letsencrypt/live/$ssl_domain_name/fullchain.pem";

ssl_certificate_key "/etc/letsencrypt/live/$ssl_domain_name/privkey.pem";

==============================================================

certbot certonly

Saving debug log to /var/log/letsencrypt/letsencrypt.log

How would you like to authenticate with the ACME CA?

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

1: Spin up a temporary webserver (standalone)

2: Place files in webroot directory (webroot)

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2

Plugins selected: Authenticator webroot, Installer None

Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org

Please enter in your domain name(s) (comma and/or space separated) (Enter 'c'

to cancel): www.yongin.kr yongin.kr

Requesting a certificate for www.yongin.kr and yongin.kr

Performing the following challenges:

http-01 challenge for www.yongin.kr

http-01 challenge for yongin.kr

Input the webroot for www.yongin.kr: (Enter 'c' to cancel): /home/inswave/aaa

Select the webroot for yongin.kr:

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

1: Enter a new webroot

2: /home/inswave/aaa

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2

Waiting for verification...

Cleaning up challenges

Subscribe to the EFF mailing list (email: [email protected]).

Starting new HTTPS connection (1): supporters.eff.org

An unexpected error occurred:

TypeError: __str__ returned non-string (type Error)

Please see the logfiles in /var/log/letsencrypt for more details.

IMPORTANT NOTES:

- Congratulations! Your certificate and chain have been saved at:

/etc/letsencrypt/live/www.yongin.kr/fullchain.pem

Your key file has been saved at:

/etc/letsencrypt/live/www.yongin.kr/privkey.pem

Your certificate will expire on 2024-05-06. To obtain a new or

tweaked version of this certificate in the future, simply run

certbot again. To non-interactively renew *all* of your

certificates, run "certbot renew"

- If you like Certbot, please consider supporting our work by:

Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate

Donating to EFF: https://eff.org/donate-le

=============================================================

chown nginx:nginx /etc/letsencrypt/live -R

chown nginx:nginx /etc/letsencrypt/archive -R

트위터

페이스북

카카오톡