{"id":904,"date":"2018-07-28T22:40:56","date_gmt":"2018-07-28T13:40:56","guid":{"rendered":"https:\/\/aoboshi.org\/?p=904"},"modified":"2018-07-29T14:35:03","modified_gmt":"2018-07-29T05:35:03","slug":"%e3%81%a9%e3%81%86%e3%81%ab%e3%81%8b%e5%ae%8c%e4%ba%86lets-encrypt%e5%b0%8e%e5%85%a5%e3%81%ab%e6%82%aa%e6%88%a6%e8%8b%a6%e9%97%98","status":"publish","type":"post","link":"https:\/\/aoboshi.org\/?p=904","title":{"rendered":"[\u3069\u3046\u306b\u304b\u5b8c\u4e86]Let&#8217;s Encrypt\u5c0e\u5165\u306b\u60aa\u6226\u82e6\u95d8"},"content":{"rendered":"<p><a href=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-28-19.52.27.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-28-19.52.27-300x88.png\" alt=\"\" width=\"300\" height=\"88\" class=\"alignnone size-medium wp-image-905\" srcset=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-28-19.52.27-300x88.png 300w, https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-28-19.52.27.png 587w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>\u6700\u8fd1\u30d6\u30ed\u30b0\u3092\u66f4\u65b0\u3057\u3088\u3046\u3068Wordpress\u306b\u30ed\u30b0\u30a4\u30f3\u3057\u3088\u3046\u3068\u3059\u308b\u3068<a href=\"https:\/\/support.apple.com\/ja-jp\/HT208672\">Safari\u306eURL\u8868\u793a\u306e\u3068\u3053\u308d\u306b\u300cWeb\u30b5\u30a4\u30c8\u304c\u5b89\u5168\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u300d\u3068\u8868\u793a\u3055\u308c\u308b<\/a>\u3088\u3046\u306b\u306a\u3063\u3066\u3057\u307e\u3044\u307e\u3057\u305f\u3002<\/p>\n<p>http\u63a5\u7d9a\u306e\u305f\u3081\u3060\u305d\u3046\u3067\u3059\u304c\u3001\u3044\u304f\u3089\u81ea\u5206\u306e\u30b5\u30a4\u30c8\u3060\u304b\u3089\u3068\u3044\u3063\u3066\u6b63\u76f4\u6c17\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<p>\u307e\u305f\u3001\u6700\u8fd1\u306fChrome\u304chttp\u63a5\u7d9a\u306e\u5834\u5408\u306f\u30ed\u30b0\u30a4\u30f3\u6642\u306b\u9650\u3089\u305a\u8b66\u544a\u3092\u8868\u793a\u3059\u308b\u3088\u3046\u306b\u306a\u308b\u306a\u3069\u3001<\/p>\n<p><a href=\"https:\/\/internet.watch.impress.co.jp\/docs\/news\/1134786.html\">\u300cGoogle Chrome 68\u300d\u516c\u958b\u3001HTTP\u30b5\u30a4\u30c8\u306b\u306f\u5bb9\u8d66\u306a\u304f\u8b66\u544a\u3092\u8868\u793a\u3059\u308b\u4ed5\u69d8\u306b &#8211; INTERNET Watch<\/a><\/p>\n<p>https\u304c\u6a19\u6e96\u306b\u306a\u308a\u3064\u3064\u3042\u308b\u6642\u4ee3\u306b\u306a\u3063\u3066\u304d\u305f\u3053\u3068\u3082\u3042\u308a\u3001<\/p>\n<p>\u5f53\u30d6\u30ed\u30b0\u3067\u3082<a href=\"https:\/\/ja.wikipedia.org\/wiki\/Let%27s_Encrypt\">Let&#8217;s Encrypt<\/a>\u3092\u4f7f\u7528\u3057\u3066\u5e38\u6642https\u5316\u3057\u3066\u307f\u307e\u3057\u305f\u3002<\/p>\n<p>Wikipedia\u306b<br \/>\n\u300cLinux\u306eWeb\u30b5\u30fc\u30d0\u30fc\u3067\u306f\u3001HTTPS\u306e\u6697\u53f7\u5316\u306e\u8a2d\u5b9a\u304a\u3088\u3073\u8a3c\u660e\u66f8\u306e\u53d6\u5f97\u30fb\u66f4\u65b0\u304c\u308f\u305a\u304b2\u3064\u306e\u30b3\u30de\u30f3\u30c9\u306b\u3088\u3063\u3066\u53ef\u80fd\u3067\u3042\u308b\u3002\u300d<br \/>\n\u3068\u66f8\u3044\u3066\u3042\u308b\u306a\u3069\u3001\u7d50\u69cb\u7c21\u5358\u306b\u3067\u304d\u308b\u3068\u66f8\u3044\u3066\u3044\u308b\u65b9\u304c\u591a\u304b\u3063\u305f\u3067\u3059\u304c\u3001\u81ea\u5206\u306e\u5834\u5408\u306f\u7d50\u69cb\u624b\u9593\u53d6\u3063\u305f\u306e\u3067\u3001\u4f5c\u696d\u5c65\u6b74\u3092\u66f8\u3044\u3066\u3044\u304d\u305f\u3044\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n<p><strong>1.certbot\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/strong><\/p>\n<p>Let&#8217;s Encrypt\u3067https\u5316\u306b\u5fc5\u8981\u306a\u8a3c\u660e\u66f8\u3092\u53d6\u5f97\u3057\u8a2d\u5b9a\u3059\u308b\u306e\u306bcertbot\u3068\u3044\u3046\u30bd\u30d5\u30c8\u3092\u5165\u308c\u308b\u5fc5\u8981\u304c\u3042\u308b\u306e\u3067\u3001\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3092\u3057\u307e\u3059\u3002<br \/>\n\u57fa\u672c\u7684\u306bdebian\u306fapt-get\u3067\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3067\u304d\u308b\u3089\u3057\u3044\u306e\u3067\u3059\u304c\u3001<br \/>\nDebian 8 (jessie)\u3067\u306f\u3001\u30ea\u30dd\u30b8\u30c8\u30ea\u306e\u8ffd\u52a0\u304c\u5fc5\u8981\u3068\u306e\u60c5\u5831\u304c\u3042\u308a\u3001\u78ba\u8a8d\u3057\u3066\u307f\u305f\u3068\u3053\u308d\u3001<\/p>\n<p>$ cat \/etc\/os-release<br \/>\nPRETTY_NAME=&#8221;Debian GNU\/Linux 8 (jessie)&#8221;<br \/>\nNAME=&#8221;Debian GNU\/Linux&#8221;<br \/>\nVERSION_ID=&#8221;8&#8243;<br \/>\nVERSION=&#8221;8 (jessie)&#8221;<br \/>\nID=debian<br \/>\nHOME_URL=&#8221;http:\/\/www.debian.org\/&#8221;<br \/>\nSUPPORT_URL=&#8221;http:\/\/www.debian.org\/support&#8221;<br \/>\nBUG_REPORT_URL=&#8221;https:\/\/bugs.debian.org\/&#8221;<br \/>\n$ <\/p>\n<p>\u79c1\u304c\u4f7f\u7528\u3057\u3066\u3044\u305f\u306e\u3082Debian 8 (jessie)\u3067\u3057\u305f\u306e\u3067\u3001\u307e\u305a\u30ea\u30dd\u30b8\u30c8\u30ea\u306e\u8ffd\u52a0\u3092\u884c\u3044\u307e\u3057\u305f\u3002<\/p>\n<p>$ cd \/etc\/apt\/sources.list.d\/<br \/>\n$ sudo vi backports.list<\/p>\n<p>\u4e0b\u8a18\u306e1\u884c\u3092\u8ffd\u52a0<\/p>\n<p>deb http:\/\/ftp.debian.org\/debian jessie-backports main<\/p>\n<p>certbot\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/p>\n<p>$ sudo apt-get update<br \/>\n$ sudo apt-get install python-certbot-apache -t jessie-backports<\/p>\n<p><strong>2-1.certbot\u306e\u8d77\u52d5\u30fb\u8a2d\u5b9a(\u5931\u6557)<\/strong><\/p>\n<p>certbot\u3092\u5165\u308c\u305f\u7d42\u308f\u3063\u305f\u3089certbot\u3092\u8d77\u52d5\u3057\u3001\u8a2d\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<p>$ sudo certbot &#8211;apache<br \/>\nSaving debug log to \/var\/log\/letsencrypt\/letsencrypt.log<br \/>\nNo names were found in your configuration files. Please enter in your domain<br \/>\nname(s) (comma and\/or space separated)  (Enter &#8216;c&#8217; to cancel):<strong>aoboshi.org \u2190\u30c9\u30e1\u30a4\u30f3\u540d\u3092\u5165\u308c\u308b<\/strong><br \/>\nEnter email address (used for urgent renewal and security notices) (Enter &#8216;c&#8217; to<br \/>\ncancel):<strong>xxxxxx@gmail.com\u2190\u81ea\u5206\u306e\u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9\u3092\u5165\u308c\u308b<\/strong><br \/>\nStarting new HTTPS connection (1): acme-v01.api.letsencrypt.org<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\nPlease read the Terms of Service at<br \/>\nhttps:\/\/letsencrypt.org\/documents\/LE-SA-v1.2-November-15-2017.pdf. You must<br \/>\nagree in order to register with the ACME server at<br \/>\nhttps:\/\/acme-v01.api.letsencrypt.org\/directory<br \/>\n&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\n(A)gree\/(C)ancel: <\/p>\n<p>(A)gree\/(C)ancel:<strong> A\u2190\u540c\u610f\u3059\u308b<\/strong><br \/>\nObtaining a new certificate<br \/>\nPerforming the following challenges:<br \/>\n<strong>Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA.<br \/>\nClient with the currently selected authenticator does not support any combination of challenges that will satisfy the CA.<\/strong><\/p>\n<p>IMPORTANT NOTES:<br \/>\n &#8211; If you lose your account credentials, you can recover through<br \/>\n   e-mails sent to xxxxxxx@gmail.com.<br \/>\n &#8211; Your account credentials have been saved in your Certbot<br \/>\n   configuration directory at \/etc\/letsencrypt. You should make a<br \/>\n   secure backup of this folder now. This configuration directory will<br \/>\n   also contain certificates and private keys obtained by Certbot so<br \/>\n   making regular backups of this folder is ideal.<br \/>\n$ <\/p>\n<p><strong>\u306a\u305c\u304b\u30a8\u30e9\u30fc\u3092\u5410\u3044\u3066\u843d\u3061\u307e\u3057\u305f\u3002<br \/>\n\u3084\u308a\u76f4\u3057\u3066\u3082\u540c\u3058\u3067\u3057\u305f\u3002<\/strong><\/p>\n<p><strong>2-1.certbot\u306e\u8d77\u52d5\u30fb\u8a2d\u5b9a\u30fb\u5fa9\u65e7<\/strong><\/p>\n<p>\u8abf\u3079\u305f\u3068\u3053\u308d\u5225\u306e\u30b3\u30de\u30f3\u30c9\u3067\u4ee3\u7528\u3067\u304d\u308b\u305d\u3046\u3067\u3057\u305f\u306e\u3067\u3084\u3063\u3066\u307f\u307e\u3057\u305f\u3002<br \/>\napache\u3092\u6b62\u3081\u308b\u5fc5\u8981\u304c\u3042\u308b\u306e\u3067\u3001\u6b62\u3081\u307e\u3059\u3002<\/p>\n<p>$ sudo systemctl stop apache2<\/p>\n<p>standalone\u30e2\u30fc\u30c9\u3067certbot\u3092\u8d77\u52d5\u3002-d \u30aa\u30d7\u30b7\u30e7\u30f3\u306e\u5f8c\u306b\u81ea\u5206\u306e\u30c9\u30e1\u30a4\u30f3\u540d\u3092\u6307\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<p>$ sudo certbot &#8211;authenticator standalone &#8211;installer apache -d aoboshi.org<\/p>\n<p>Saving debug log to \/var\/log\/letsencrypt\/letsencrypt.log<br \/>\nStarting new HTTPS connection (1): acme-v01.api.letsencrypt.org<br \/>\nCert not yet due for renewal<\/p>\n<p>You have an existing certificate that has exactly the same domains or certificate name you requested and isn&#8217;t clos<br \/>\ne to expiry.<br \/>\n(ref: \/etc\/letsencrypt\/renewal\/aoboshi.org.conf)<\/p>\n<p>What would you like to do?<br \/>\n&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\n1: Attempt to reinstall this existing certificate<br \/>\n2: Renew &#038; replace the cert (limit ~5 per 7 days)<br \/>\n&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\nSelect the appropriate number [1-2] then [enter] (press &#8216;c&#8217; to cancel): <strong>1 \u2190\u4e2d\u9014\u534a\u7aef\u306b\u5165\u3063\u3066\u3057\u307e\u3063\u305f\u307f\u305f\u3044\u306a\u306e\u3067\u5165\u308c\u76f4\u3059<\/strong><br \/>\nKeeping the existing certificate<\/p>\n<p>We were unable to find a vhost with a ServerName or Address of aoboshi.org.<br \/>\nWhich virtual host would you like to choose?<br \/>\n(note: conf files with multiple vhosts are not yet supported)<br \/>\n&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\n1: 000-default.conf               |                       |       |<\/p>\n<p>2: default-ssl.conf               |                       | HTTPS |<br \/>\n3: wordpress.conf                 |                       |       | Enabled<br \/>\n&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\nSelect the appropriate number [1-3] then [enter] (press &#8216;c&#8217; to cancel): <strong>2 \u2190https\u7528\u306e\u30d0\u30fc\u30c1\u30e3\u30eb\u30db\u30b9\u30c8\u306e\u8a2d\u5b9a\u3092\u3069\u306e\u30d5\u30a1\u30a4\u30eb\u306b\u5165\u308c\u308b\u306e\u304b\u3092\u6307\u5b9a\u3059\u308b\u3002\u3068\u308a\u3042\u3048\u305a\u305d\u308c\u3063\u307d\u3044\u306e\u3092\u6307\u5b9a<\/strong><br \/>\nEnabled Apache socache_shmcb module<br \/>\nEnabled Apache ssl module<br \/>\nDeploying Certificate to VirtualHost \/etc\/apache2\/sites-available\/default-ssl.conf<br \/>\nEnabling available site: \/etc\/apache2\/sites-available\/default-ssl.conf<\/p>\n<p>Please choose whether HTTPS access is required or optional.<br \/>\n&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\n1: Easy &#8211; Allow both HTTP and HTTPS access to these sites<br \/>\n2: Secure &#8211; Make all requests redirect to secure HTTPS access<br \/>\n&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\nSelect the appropriate number [1-2] then [enter] (press &#8216;c&#8217; to cancel): <strong>2 \u2190http\u3067\u30a2\u30af\u30bb\u30b9\u3057\u3066\u304d\u305f\u3089https\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3055\u305b\u308b<\/strong><br \/>\nCreated redirect file: le-redirect-aoboshi.org.conf<br \/>\nRollback checkpoint is empty (no changes made?)<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\n<strong>Congratulations! You have successfully enabled https:\/\/aoboshi.org<\/strong><\/p>\n<p>You should test your configuration at:<br \/>\nhttps:\/\/www.ssllabs.com\/ssltest\/analyze.html?d=aoboshi.org<br \/>\n&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\n$<\/p>\n<p>apache\u3092\u7acb\u3061\u4e0a\u3052\u3066\u3001\u3055\u3042\u78ba\u8a8d\u3002<\/p>\n<p>$ sudo systemctl start apache2<\/p>\n<p><strong>&#8230;\u30d6\u30ed\u30b0\u306b\u7e4b\u304c\u3089\u306a\u3044\u72b6\u614b\u306b\u306a\u308a\u307e\u3057\u305f\u3002<\/strong>https\u306f\u304a\u308d\u304bhttps\u3067\u3082&#8230;\u3002<\/p>\n<p>\u8a66\u884c\u932f\u8aa4\u3057\u305f\u7d50\u679c\u3001\/etc\/hosts\u306b\u30db\u30b9\u30c8\u540d\u3068IP\u30a2\u30c9\u30ec\u30b9\u3092\u5165\u308c\u305f\u3089\u5fa9\u65e7\u3057\u307e\u3057\u305f\u3002<\/p>\n<p>$ cd \/etc<br \/>\n$ vi hosts<\/p>\n<p>35.185.230.144 aoboshi.org<\/p>\n<p>\u4e00\u5fdcURL\u3092https\u306b\u3057\u3066\u3082\u7e4b\u304c\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u3002<\/p>\n<p><strong>3.\u4ed5\u4e0a\u3052<\/strong><br \/>\n\u3010\u30ea\u30f3\u30af\u306e\u4fee\u6b63\u3011<br \/>\nhttps:\/\/aoboshi.org<\/p>\n<p>\u3067\u7e4b\u304c\u308b\u3088\u3046\u306b\u306a\u3063\u305f\u306e\u306f\u3044\u3044\u306e\u3067\u3059\u304c\u3001Safari\u306eURL\u30d0\u30fc\u306b\u5357\u4eac\u9320\u30a2\u30a4\u30b3\u30f3\u304c\u3064\u304d\u307e\u305b\u3093\u3002<br \/>\nFirefox\u3067\u898b\u3066\u307f\u305f\u3068\u3053\u308d\u3001<\/p>\n<p><a href=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-27-0.16.26.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-27-0.16.26.png\" alt=\"\" width=\"261\" height=\"59\" class=\"alignnone size-full wp-image-906\" \/><\/a><\/p>\n<p>\u3069\u3046\u3084\u3089\u3001\u753b\u50cf\u6307\u5b9a\u304chttp\u3067\u66f8\u3044\u3066\u3044\u308b\u305f\u3081\u3001https\u3068http\u304c\u6df7\u5728\u3057\u3066\u3044\u305f\u3088\u3046\u3067\u3059\u3002<br \/>\n<a href=\"https:\/\/aoboshi.org\/?p=746\">\u4ee5\u524d\u3082\u4f7f\u7528\u3057\u305fSearch Regex<\/a>\u3067\u4e00\u62ec\u7f6e\u63db\u3057\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-26-23.28.16.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-26-23.28.16-300x114.png\" alt=\"\" width=\"300\" height=\"114\" class=\"alignnone size-medium wp-image-907\" srcset=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-26-23.28.16-300x114.png 300w, https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-26-23.28.16-624x236.png 624w, https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-26-23.28.16.png 636w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p><a href=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-26-23.28.56.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-26-23.28.56-300x164.png\" alt=\"\" width=\"300\" height=\"164\" class=\"alignnone size-medium wp-image-908\" srcset=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-26-23.28.56-300x164.png 300w, https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-26-23.28.56-768x419.png 768w, https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-26-23.28.56-624x340.png 624w, https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-26-23.28.56.png 823w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>\u7f6e\u63db\u5f8c\u3001Safari\u3001Firefox\u3068\u3082\u306bhttps\u63a5\u7d9a\u3067\u3042\u308b\u8868\u793a\u304c\u3055\u308c\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u3002<br \/>\n<a href=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-28-22.39.14.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-28-22.39.14-300x82.png\" alt=\"\" width=\"300\" height=\"82\" class=\"alignnone size-medium wp-image-910\" srcset=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-28-22.39.14-300x82.png 300w, https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-28-22.39.14.png 341w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a>\u3000\u3000<a href=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-28-22.38.41.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-28-22.38.41-300x114.png\" alt=\"\" width=\"300\" height=\"114\" class=\"alignnone size-medium wp-image-911\" srcset=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-28-22.38.41-300x114.png 300w, https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-28-22.38.41.png 615w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>WordPress\u306e\u30a2\u30c9\u30ec\u30b9\u8a2d\u5b9a\u3082https\u306b\u5909\u3048\u307e\u3059\u3002<br \/>\n<a href=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-26-23.21.27.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-26-23.21.27-300x169.png\" alt=\"\" width=\"300\" height=\"169\" class=\"alignnone size-medium wp-image-913\" srcset=\"https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-26-23.21.27-300x169.png 300w, https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-26-23.21.27-768x432.png 768w, https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-26-23.21.27-1024x576.png 1024w, https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-26-23.21.27-624x351.png 624w, https:\/\/aoboshi.org\/wp-content\/uploads\/2018\/07\/\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8-2018-07-26-23.21.27.png 1366w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>\u3010http\u3067\u63a5\u7d9a\u3057\u3066\u304d\u305f\u3089https\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3059\u308b\u3088\u3046\u306b\u3059\u308b\u3011<br \/>\n\u4e0a\u8a18\u306b\u3082\u66f8\u3044\u3066\u3044\u307e\u3059\u304ccertbot\u3067\u8a2d\u5b9a\u3057\u305f\u969b\u306b<\/p>\n<blockquote><p>Please choose whether HTTPS access is required or optional.<br \/>\n&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\n1: Easy &#8211; Allow both HTTP and HTTPS access to these sites<br \/>\n2: Secure &#8211; Make all requests redirect to secure HTTPS access<br \/>\n&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\nSelect the appropriate number [1-2] then [enter] (press &#8216;c&#8217; to cancel):2 <\/p><\/blockquote>\n<p>http\u3067\u63a5\u7d9a\u3057\u3066\u304d\u305f\u3089https\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3059\u308b\u3088\u3046\u306b\u3059\u308b\u8a2d\u5b9a\u3092\u3057\u305f\u306f\u305a\u306a\u306e\u306b\u3001http\u3067\u30a2\u30af\u30bb\u30b9\u3057\u3066\u3082https\u306b\u306a\u308a\u307e\u305b\u3093\u3002<br \/>\n\u3044\u308d\u3044\u308d\u8abf\u3079\u305f\u7d50\u679c\u3001\u30d0\u30fc\u30c1\u30e3\u30eb\u30db\u30b9\u30c8\u306e\u8a2d\u5b9a\u304c\u6b63\u5e38\u306b\u5165\u3063\u3066\u3044\u306a\u3044\u306e\u304c\u539f\u56e0\u3067\u3042\u308b\u3088\u3046\u3060\u3068\u308f\u304b\u308a\u307e\u3057\u305f\u3002<br \/>\ncertbot\u3082\u300cWe were unable to find a vhost with a ServerName or Address of aoboshi.org.\u300d\u3068\u8a00\u3063\u3066\u307e\u3057\u305f\u3057\u3002<\/p>\n<p>\/etc\/apache2\/sites-available\/wordpress.conf<br \/>\n\u306b\u306f\u3001<br \/>\n<VirtualHost *:80><br \/>\n\u3068\u3001http\u7528\u306e\u8a2d\u5b9a\u304c\u5165\u3063\u3066\u3044\u308b\u3088\u3046\u306a\u306e\u3067\u3001<\/p>\n<p>\u306b\u4e0b\u8a184\u884c\u3092\u8ffd\u52a0\u3057\u3066apache\u3092\u518d\u8d77\u52d5\u3057\u305f\u3068\u3053\u308d\u3001<\/p>\n<p>ServerName aoboshi.org<br \/>\nRewriteEngine On<br \/>\n    RewriteCond %{HTTPS} off<br \/>\n    RewriteRule ^(.*)$ https:\/\/%{HTTP_HOST}%{REQUEST_URI} [R,L]<\/p>\n<p>http\u3067\u63a5\u7d9a\u3057\u3066\u304d\u305f\u3089https\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3059\u308b\u3088\u3046\u306b\u3059\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u3002<\/p>\n<p>\u3064\u3044\u3067\u306b\u3001<br \/>\n<VirtualHost _default_:443><br \/>\n\u3068https\u7528\u306e\u8a2d\u5b9a\u304c\u5165\u3063\u3066\u3044\u308b<br \/>\n\/etc\/apache2\/sites-available\/default-ssl.conf<br \/>\n\u306b\u3082<br \/>\nServerName aoboshi.org<br \/>\n\u306e1\u884c\u304c\u5165\u3063\u3066\u306a\u304b\u3063\u305f\u306e\u3067\u5165\u308c\u307e\u3057\u305f\u3002<\/p>\n<p>\u9577\u3005\u3068\u66f8\u304d\u307e\u3057\u305f\u304c\u3001\u306a\u3093\u3068\u304bhttps\u5316\u3059\u308b\u3053\u3068\u304c\u51fa\u6765\u307e\u3057\u305f\u3002<\/p>\n<p><strong>4.\u305d\u306e\u4ed6\u3001\u66f4\u65b0\u306b\u3064\u3044\u3066<\/strong><br \/>\nLet&#8217;s encrypt\u3067\u53d6\u5f97\u3057\u305f\u8a3c\u660e\u66f8\u306e\u671f\u9650\u306f90\u65e5\u306a\u306e\u3067\u5b9a\u671f\u7684\u306b\u66f4\u65b0\u304c\u5fc5\u8981\u3067\u3059\u3002<br \/>\ncertbot renew\u30b3\u30de\u30f3\u30c9\u3067\u66f4\u65b0\u3067\u304d\u308b\u3088\u3046\u306a\u306e\u3067\u3001\u3084\u3063\u3066\u307f\u3088\u3046\u3068\u3057\u307e\u3057\u305f\u304c\u3001<\/p>\n<p>$ sudo certbot renew<br \/>\nSaving debug log to \/var\/log\/letsencrypt\/letsencrypt.log<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\nProcessing \/etc\/letsencrypt\/renewal\/aoboshi.org.conf<br \/>\n&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\nCert not yet due for renewal<\/p>\n<p>The following certs are not due for renewal yet:<br \/>\n  \/etc\/letsencrypt\/live\/aoboshi.org\/fullchain.pem (skipped)<br \/>\nNo renewals were attempted.<\/p>\n<p>\u307e\u3060\u671f\u9650\u3058\u3083\u306a\u3044\u304b\u3089\u5fc5\u8981\u306a\u3044\u3067\u3059\u3088\u3068\u30b9\u30ad\u30c3\u30d7\u3055\u308c\u307e\u3059(\u307e\u3060\u5c0e\u5165\u3057\u3066\u6570\u65e5\u3067\u3059\u3057)\u3002<\/p>\n<p>systemd\u306e\u8a2d\u5b9a\u3092\u898b\u308b\u3068\u3001\u5b9a\u671f\u7684\u306b\u66f4\u65b0\u3059\u308b\u8a2d\u5b9a\u304c\u5165\u3063\u3066\u3044\u308b\u3088\u3046\u306a\u306e\u3067\u3001\u9759\u89b3\u3067\u3059\u3002<\/p>\n<p>$ cd \/lib\/systemd\/system\/<br \/>\n$ cat certbot.timer<br \/>\n[Unit]<br \/>\nDescription=Run certbot twice daily<br \/>\n[Timer]<br \/>\nOnCalendar=*-*-* 00,12:00:00<br \/>\nPersistent=true<br \/>\n[Install]<br \/>\nWantedBy=timers.target<\/p>\n<p>$ cat \/lib\/systemd\/system\/certbot.service<br \/>\n[Unit]<br \/>\nDescription=Certbot<br \/>\nDocumentation=file:\/\/\/usr\/share\/doc\/python-certbot-doc\/html\/index.html<br \/>\nDocumentation=https:\/\/letsencrypt.readthedocs.io\/en\/latest\/<br \/>\n[Service]<br \/>\nType=oneshot<br \/>\nExecStartPre=\/usr\/bin\/perl -e &#8216;sleep int(rand(3600))&#8217;<br \/>\nExecStart=\/usr\/bin\/certbot -q renew<br \/>\nPrivateTmp=true<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u6700\u8fd1\u30d6\u30ed\u30b0\u3092\u66f4\u65b0\u3057\u3088\u3046\u3068Wordpress\u306b\u30ed\u30b0\u30a4\u30f3\u3057\u3088\u3046\u3068\u3059\u308b\u3068Safari\u306eURL\u8868\u793a\u306e\u3068\u3053\u308d\u306b\u300cWeb\u30b5\u30a4\u30c8\u304c\u5b89\u5168\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u300d\u3068\u8868\u793a\u3055\u308c\u308b\u3088\u3046\u306b\u306a\u3063\u3066\u3057\u307e\u3044\u307e\u3057\u305f\u3002 http\u63a5\u7d9a\u306e\u305f\u3081\u3060\u305d\u3046\u3067\u3059\u304c\u3001\u3044\u304f\u3089\u81ea\u5206\u306e [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14,4],"tags":[],"class_list":["post-904","post","type-post","status-publish","format-standard","hentry","category-web","category-linux"],"_links":{"self":[{"href":"https:\/\/aoboshi.org\/index.php?rest_route=\/wp\/v2\/posts\/904","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aoboshi.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aoboshi.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aoboshi.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aoboshi.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=904"}],"version-history":[{"count":0,"href":"https:\/\/aoboshi.org\/index.php?rest_route=\/wp\/v2\/posts\/904\/revisions"}],"wp:attachment":[{"href":"https:\/\/aoboshi.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=904"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aoboshi.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=904"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aoboshi.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=904"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}