본문 바로가기
카테고리 없음

ssl / certbot / https

by 하하IT 2021. 4. 7.

 

 

=================================================

 

yum install epel-release

yum install snapd

 

# ln -s /var/lib/snapd/snap /snap
# systemctl enable --now snapd.socket
Created symlink from /etc/systemd/system/sockets.target.wants/snapd.socket to /usr/lib/systemd/system/snapd.socket.
# systemctl enable --now snapd.socket
#

# snap install core

# snap install snap-store

# snap install --classic certbot

# ln -s /snap/bin/certbot /usr/bin/certbot

# certbot --version

certbot 1.15.0

※ ※ ※ ※  tomcat 종료후 진행 
netstat -anp | grep 80  포트사용여부 확인가능  

certbot certonly --standalone  -d  도메인 -m  이메일주소 

 

인증서 확인

[root@SSL live]# certbot certificates
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Found the following certs:
  Certificate Name: SSL1.TEST.COM
    Serial Number: 48b8c12ff91824
    Key Type: RSA
    Domains: SSL1.TEST.COM SSL2.TEST.COM SSL3.TEST.COM
    Expiry Date: 2021-01-22 12:57:28+00:00 (VALID: 80 days)
    Certificate Path: /etc/letsencrypt/live/SSL1.TEST.COM/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/SSL1.TEST.COM/privkey.pem
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
[root@SSL live]#

 

 

=================================================================

=================================================================

=================================================================

=================================================================

 

https://medium.com/@mashrur123/a-step-by-step-guide-to-securing-a-tomcat-server-with-letsencrypt-ssl-certificate-65cd26290b70

 

 

 

sudo yum install epel-release

 

sudo yum install certbot

 

yum list installed certbot

yum remove certbot.noarch

 

certbot certonly --standalone -d  dev.www.EXAMPLE.or.kr -d  dev.EXAMPLE.or.kr  --preferred-challenges http --agree-tos -n -m $EMAIL_ALERTS --keep-until-expiring

 

 

 

Problem binding to port 80: Could not bind to IPv4 or IPv6

 

==> WAS 서버 종료후 진행 

※ ※ ※ ※  tomcat 종료후 진행 
netstat -anp | grep 80  포트사용여부 확인가능 

 

 

 

cd /etc/letsencrypt/live/example.com