{"id":1018,"date":"2018-09-30T14:16:20","date_gmt":"2018-09-30T05:16:20","guid":{"rendered":"https:\/\/aoboshi.org\/?p=1018"},"modified":"2018-09-30T14:18:26","modified_gmt":"2018-09-30T05:18:26","slug":"ssl%e8%a8%bc%e6%98%8e%e6%9b%b8%e3%81%ae%e6%9b%b4%e6%96%b0%e3%82%92%e3%81%99%e3%82%8b","status":"publish","type":"post","link":"https:\/\/aoboshi.org\/?p=1018","title":{"rendered":"SSL\u8a3c\u660e\u66f8\u306e\u66f4\u65b0\u3092\u3059\u308b"},"content":{"rendered":"

\"\"<\/a><\/p>\n

\u5f53\u30d6\u30ed\u30b0\u306f\u5e38\u6642SSL\u5316<\/a>\u3092\u3057\u3066\u3044\u307e\u3059\u304c\u3001\u671f\u9650\u5207\u308c\u307e\u30671\u30f6\u6708\u3092\u5207\u3063\u305f\u306e\u3067\u30019\/24\u306b\u66f4\u65b0\u3092\u3057\u3066\u307f\u307e\u3057\u305f\u3002<\/p>\n

Let’s Encrypt\u306f\u300ccertbot renew\u300d\u30b3\u30de\u30f3\u30c9\u3067\u66f4\u65b0\u304c\u51fa\u6765\u307e\u3059\u3002
\n\u3068\u308a\u3042\u3048\u305a\u305d\u306e\u307e\u307e\u6253\u3064\u3068\u3001<\/p>\n

$ sudo certbot renew
\nSaving debug log to \/var\/log\/letsencrypt\/letsencrypt.log<\/p>\n

——————————————————————————-
\nProcessing \/etc\/letsencrypt\/renewal\/aoboshi.org.conf
\n——————————————————————————-
\nCert is due for renewal, auto-renewing…
\nStarting new HTTPS connection (1): acme-v01.api.letsencrypt.org
\nRenewing an existing certificate
\nPerforming the following challenges:
\ntls-sni-01 challenge for aoboshi.org<\/p>\n

——————————————————————————-
\nThe program apache2 (process ID 26473) is already listening on TCP port 443.
\nThis will prevent us from binding to that port. Please stop the apache2 program<\/strong>
\ntemporarily and then try again. For automated renewal, you may want to use a
\nscript that stops and starts your webserver. You can find an example at
\nhttps:\/\/certbot.eff.org\/docs\/using.html#renewal . Alternatively you can use the
\nwebroot plugin to renew without needing to stop and start your webserver.
\n——————————————————————————-
\nCleaning up challenges
\nAttempting to renew cert from \/etc\/letsencrypt\/renewal\/aoboshi.org.conf produced an unexpected error: At least one
\nof the required ports is already taken.. Skipping.<\/strong><\/p>\n

——————————————————————————-
\nProcessing \/etc\/letsencrypt\/renewal\/www.aoboshi.org.conf
\n——————————————————————————-
\nCert not yet due for renewal<\/p>\n

The following certs are not due for renewal yet:
\n \/etc\/letsencrypt\/live\/www.aoboshi.org\/fullchain.pem (skipped)
\nAll renewal attempts failed. The following certs could not be renewed:
\n \/etc\/letsencrypt\/live\/aoboshi.org\/fullchain.pem (failure)
\n1 renew failure(s), 0 parse failure(s)
\n$<\/p>\n

apache\u3092\u843d\u3068\u3057\u3066\u304f\u3060\u3055\u3044\u3068\u8868\u793a\u3092\u3055\u308c\u305f\u306e\u3067\u3001\u300csystemctl stop apache2\u300d\u3067\u505c\u6b62\u3001<\/p>\n

\u518d\u5ea6\u5b9f\u65bd\u3059\u308b\u3068\u3001<\/p>\n

$ sudo certbot renew
\nSaving debug log to \/var\/log\/letsencrypt\/letsencrypt.log<\/p>\n

——————————————————————————-
\nProcessing \/etc\/letsencrypt\/renewal\/aoboshi.org.conf
\n——————————————————————————-
\nCert is due for renewal, auto-renewing…
\nStarting new HTTPS connection (1): acme-v01.api.letsencrypt.org
\nRenewing an existing certificate
\nPerforming the following challenges:
\ntls-sni-01 challenge for aoboshi.org
\n\/usr\/lib\/python2.7\/dist-packages\/OpenSSL\/rand.py:58: UserWarning: implicit cast from ‘char *’ to a different pointe
\nr type: will be forbidden in the future (check that the types are as you expect; use an explicit ffi.cast() if they
\n are correct)
\n result_code = _lib.RAND_bytes(result_buffer, num_bytes)
\nWaiting for verification…
\nCleaning up challenges
\nGenerating key (2048 bits): \/etc\/letsencrypt\/keys\/0002_key-certbot.pem
\nCreating CSR: \/etc\/letsencrypt\/csr\/0002_csr-certbot.pem<\/p>\n

——————————————————————————-
\nnew certificate deployed with reload of apache server; fullchain is
\n\/etc\/letsencrypt\/live\/aoboshi.org\/fullchain.pem
\n——————————————————————————-<\/p>\n

——————————————————————————-
\nProcessing \/etc\/letsencrypt\/renewal\/www.aoboshi.org.conf
\n——————————————————————————-
\nCert not yet due for renewal<\/p>\n

The following certs are not due for renewal yet:
\n \/etc\/letsencrypt\/live\/www.aoboshi.org\/fullchain.pem (skipped)
\nCongratulations, all renewals succeeded. The following certs have been renewed:
\n \/etc\/letsencrypt\/live\/aoboshi.org\/fullchain.pem (success)<\/strong>
\n$<\/p>\n

\u300caoboshi.org\u300d\u306e\u8a3c\u660e\u66f8\u66f4\u65b0\u306f\u554f\u984c\u306a\u304f\u3067\u304d\u307e\u3057\u305f\u3002
\n\u300cwww.aoboshi.org\u300d<\/a>\u306b\u95a2\u3057\u307e\u3057\u3066\u306f\u30011\u30f6\u6708\u4ee5\u4e0a\u671f\u9650\u304c\u3042\u308b\u306e\u3067\u66f4\u65b0\u4e0d\u8981\u3068\u30b9\u30ad\u30c3\u30d7\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n

\u305d\u306e\u5f8c\u3001\u843d\u3068\u3057\u305fapache\u3092\u300csystemctl start apache2\u300d\u3067\u7acb\u3061\u4e0a\u3052\u3066\u3082Web\u30b5\u30a4\u30c8\u306b\u63a5\u7d9a\u3067\u304d\u306a\u304f\u306a\u308a\u307e\u3057\u305f\u304c\u3001
\n\u300csystemctl restart apache2\u300d\u3067\u518d\u8d77\u52d5\u3057\u305f\u3089\u7121\u4e8b\u63a5\u7d9a\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u3002<\/p>\n

\"\"<\/a><\/p>\n

\u6570\u65e5\u5f8c\u3001www.aoboshi.org\u306e\u8a3c\u660e\u66f8\u3082\u66f4\u65b0\u3057\u3088\u3046\u3068\u601d\u3044\u3001
\n\u307e\u305a\u300ccertbot certificates\u300d\u3067\u8a3c\u660e\u66f8\u306e\u72b6\u614b\u3092\u78ba\u8a8d\u3057\u305f\u3068\u3053\u308d\u3001<\/p>\n

# certbot certificates
\nSaving debug log to \/var\/log\/letsencrypt\/letsencrypt.log<\/p>\n

——————————————————————————-
\nFound the following certs:
\n Certificate Name: aoboshi.org
\n Domains: aoboshi.org
\n Expiry Date: 2018-12-23 13:12:31+00:00 (VALID: 85 days)
\n Certificate Path: \/etc\/letsencrypt\/live\/aoboshi.org\/fullchain.pem
\n Private Key Path: \/etc\/letsencrypt\/live\/aoboshi.org\/privkey.pem
\n Certificate Name: www.aoboshi.org
\n Domains: www.aoboshi.org
\n Expiry Date: 2018-12-26 11:21:35+00:00 (VALID: 88 days)<\/strong>
\n Certificate Path: \/etc\/letsencrypt\/live\/www.aoboshi.org\/fullchain.pem
\n Private Key Path: \/etc\/letsencrypt\/live\/www.aoboshi.org\/privkey.pem
\n——————————————————————————-
\n#<\/p>\n

www.aoboshi.org\u306b\u3064\u3044\u3066\u3082\u66f4\u65b0\u304c\u3055\u308c\u3066\u3044\u307e\u3057\u305f\u3002
\n\u66f4\u65b0\u3092\u3057\u305f\u899a\u3048\u306f\u306a\u3044\u306e\u3067\u8abf\u3079\u305f\u3068\u3053\u308d\u3001<\/p>\n

$ sudo systemctl list-timers
\nNEXT LEFT LAST PASSED UNIT AC
\nSun 2018-09-30 09:03:46 UTC 4h 5min left Sat 2018-09-29 09:03:46 UTC 19h ago systemd-tmpfiles-clean.timer sy
\nSun 2018-09-30 12:00:00 UTC 7h left Sun 2018-09-30 00:00:01 UTC 4h 57min ago certbot.timer ce<\/strong>
\n2 timers listed.
\nPass –all to see loaded but inactive timers, too.
\n$ <\/p>\n

\u65e5\u6b21\u3067\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u5b9f\u884c\u3059\u308b\u8a2d\u5b9a\u304cLet’s Encrypt\u8a2d\u5b9a\u6642\u306bsystemd\u306b\u7d44\u307f\u8fbc\u307e\u308c\u3066\u3044\u305f\u306e\u3067\u3001\u81ea\u52d5\u3067\u66f4\u65b0\u3055\u308c\u3066\u3044\u305f\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3057\u305f\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

\u5f53\u30d6\u30ed\u30b0\u306f\u5e38\u6642SSL\u5316\u3092\u3057\u3066\u3044\u307e\u3059\u304c\u3001\u671f\u9650\u5207\u308c\u307e\u30671\u30f6\u6708\u3092\u5207\u3063\u305f\u306e\u3067\u30019\/24\u306b\u66f4\u65b0\u3092\u3057\u3066\u307f\u307e\u3057\u305f\u3002 Let’s Encrypt\u306f\u300ccertbot renew\u300d\u30b3\u30de\u30f3\u30c9\u3067\u66f4\u65b0\u304c\u51fa\u6765\u307e\u3059\u3002 \u3068\u308a\u3042\u3048\u305a\u305d\u306e\u307e\u307e\u6253 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14,4],"tags":[],"class_list":["post-1018","post","type-post","status-publish","format-standard","hentry","category-web","category-linux"],"_links":{"self":[{"href":"https:\/\/aoboshi.org\/index.php?rest_route=\/wp\/v2\/posts\/1018","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aoboshi.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aoboshi.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aoboshi.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aoboshi.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1018"}],"version-history":[{"count":0,"href":"https:\/\/aoboshi.org\/index.php?rest_route=\/wp\/v2\/posts\/1018\/revisions"}],"wp:attachment":[{"href":"https:\/\/aoboshi.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1018"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aoboshi.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1018"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aoboshi.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1018"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}