環境(KVM)

 ホストOS:Debian GNU/Linux 10.7
 ゲストOS:FreeBSD 12.2-RELEASE r366954 GENERIC amd64

Let's Encrypt(レッツ・エンクリプト)は、非営利団体のInternet Security Research Group(英語版)(ISRG)により運営されている証明書認証局で、TLSのX.509証明書を無料で発行している。Wikipediaより引用

 

証明書の有効期間は90日、Apacheを停止した状態で実行する必要があるため現在は手動で更新作業を行っている。

 

 ▼Apache停止

# service apache24 stop
Stopping apache24.
Waiting for PIDS: 20117.

 

 ▼更新

# certbot renew --force-renew
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /usr/local/etc/letsencrypt/renewal/www.server-bff.net.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Plugins selected: Authenticator standalone, Installer None
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for www.server-bff.net
Waiting for verification...
Cleaning up challenges

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
new certificate deployed without reload, fullchain is
/usr/local/etc/letsencrypt/live/www.server-bff.net/fullchain.pem
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Congratulations, all renewals succeeded. The following certs have been renewed:
  /usr/local/etc/letsencrypt/live/www.server-bff.net/fullchain.pem (success)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

 

▼Apache起動

# service apache24 start
Performing sanity check on apache24 configuration:
Syntax OK
Starting apache24.

 

▼ブラウザで確認

 

以上