{"id":1225,"date":"2017-11-08T23:29:29","date_gmt":"2017-11-08T14:29:29","guid":{"rendered":"https:\/\/pandanote.info\/?p=1225"},"modified":"2021-02-12T08:36:27","modified_gmt":"2021-02-11T23:36:27","slug":"lets-encrypt%e3%81%ae%e8%a8%bc%e6%98%8e%e6%9b%b8%e3%81%ae%e6%9b%b4%e6%96%b0%e3%81%8c%e3%81%86%e3%81%be%e3%81%8f%e3%81%84%e3%81%8b%e3%81%aa%e3%81%84%e3%81%a8%e6%80%9d%e3%81%a3%e3%81%9f%e3%82%89","status":"publish","type":"post","link":"https:\/\/pandanote.info\/?p=1225","title":{"rendered":"Let’s encrypt\u306e\u8a3c\u660e\u66f8\u306e\u66f4\u65b0\u304c\u3046\u307e\u304f\u3044\u304b\u306a\u3044\u3068\u601d\u3063\u305f\u3089\u3001Python3\u5bfe\u5fdc\u306eApache plugin\u304c\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u3066\u3044\u306a\u304b\u3063\u305f\u4ef6"},"content":{"rendered":"

\u306f\u3058\u3081\u306b<\/h2>\n

\u672cWeb\u30b5\u30a4\u30c8\u306e\u7ba1\u7406\u4eba\u305f\u308bpanda\u304c\u7ba1\u7406\u3057\u3066\u3044\u308b\u30b5\u30a4\u30c8\u3067\u306f\u672c\u30b5\u30a4\u30c8\u3082\u542b\u3081\u3066Let’s encrypt\u3092\u7d76\u8cdb\u4f7f\u7528\u4e2d\u3067\u3042\u308a\u307e\u3059\u3002<\/p>\n

\u305f\u3060\u3001Fedora 26\u3060\u3051\u306e\u73fe\u8c61\u306a\u306e\u304b\u3069\u3046\u304b\u306f\u308f\u304b\u308a\u307e\u305b\u3093\u304c\u3001\u6642\u3005\u8a3c\u660e\u66f8\u306e\u66f4\u65b0\u304c\u3046\u307e\u304f\u3044\u304b\u306a\u3044\u3053\u3068\u304c\u3042\u3063\u305f\u306e\u3067\u3001\u30e1\u30e2\u3063\u3066\u304a\u304d\u307e\u3059\u3002<\/p>\n

\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u306e\u7d4c\u904e<\/h2>\n

\u3068\u308a\u3042\u3048\u305a\u3001\u30b3\u30de\u30f3\u30c9\u3067\u66f4\u65b0\u3092\u8a66\u307f\u307e\u3059\u3002<\/h3>\n

Let’s encrypt\u304b\u3089\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u30bf\u30a4\u30c8\u30eb\u306e\u30e1\u30fc\u30eb\u304c\u5c4a\u304f\u3068\u3001\u305d\u308d\u305d\u308d\u8a3c\u660e\u66f8\u306e\u66f4\u65b0\u306e\u30bf\u30a4\u30df\u30f3\u30b0\u3067\u3059\u3002<\/p>\n

\"\"<\/a><\/p>\n

\u307e\u305a\u306f\u3001renew\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3057\u307e\u3059\u3002<\/p>\n

[root@pnr panda]# certbot renew
\nSaving debug log to \/var\/log\/letsencrypt\/letsencrypt.log<\/p>\n

——————————————————————————-
\nProcessing \/etc\/letsencrypt\/renewal\/pandanote.info.conf
\n——————————————————————————-
\nCert is due for renewal, auto-renewing…
\nCould not choose appropriate plugin: The requested apache plugin does not appear to be installed
\nAttempting to renew cert from \/etc\/letsencrypt\/renewal\/pandanote.info.conf produced an unexpected error: The requested apache plugin does not appear to be installed. Skipping.<\/p>\n

All renewal attempts failed. The following certs could not be renewed:
\n \/etc\/letsencrypt\/live\/pandanote.info\/fullchain.pem (failure)
\n1 renew failure(s), 0 parse failure(s)<\/p><\/div>\n

 <\/p>\n

\u306a\u3093\u304b\u3001\u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u306e\u66f4\u65b0\u306b\u5931\u6557\u3057\u3066\u3044\u308b\u3088\u3046\u3067\u3059(\u00b4\u30fb\u03c9\u30fb\uff40)<\/p>\n

\u30b3\u30de\u30f3\u30c9\u4e00\u767a\u3067\u3067\u304d\u308b\u4e88\u5b9a\u306e\u4f5c\u696d(\u305d\u308c\u3082\u3001\u4eca\u6642\u306eWeb\u30b5\u30fc\u30d0\u3092\u904b\u7528\u3059\u308b\u4e0a\u3067\u306f\u6700\u3082\u91cd\u8981\u3068\u8a00\u3048\u306a\u304f\u3082\u306a\u3044\u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u306e\u66f4\u65b0)\u304c\u3067\u304d\u306a\u3044\u3068\u306a\u308b\u3068\u3001\u304b\u306a\u308a\u7126\u308a\u307e\u3059\u3002<\/p>\n

\u3053\u3053\u306f\u3001\u843d\u3061\u7740\u3044\u3066\u3050\u3050\u308a\u307e\u3059\u3002<\/h3>\n

\u3053\u3046\u3044\u3046\u3068\u304d\u306b\u7126\u3063\u3066\u3082\u30ed\u30af\u306a\u3053\u3068\u306b\u306a\u3089\u306a\u3044\u306e\u3067\u3001\u3068\u308a\u3042\u3048\u305a\u3001\u304a\u8336\u3067\u3082\u98f2\u3093\u3067\u843d\u3061\u7740\u304d\u307e\u3059\u3002\ud83c\udf75<\/p>\n

\u305d\u3057\u3066\u30a8\u30e9\u30fc\u30e1\u30c3\u30bb\u30fc\u30b8\u306a\u3069\u3092\u78ba\u8a8d\u3057\u3066\u307f\u307e\u3059\u3002<\/p>\n

\u809d\u5fc3\u306e\u30a8\u30e9\u30fc\u30e1\u30c3\u30bb\u30fc\u30b8\u3092\u4fdd\u5b58\u3057\u3066\u3044\u306a\u304b\u3063\u305f\u306e\u3067\u672c\u8a18\u4e8b\u306b\u63b2\u8f09\u3059\u308b\u3053\u3068\u306f\u3067\u304d\u307e\u305b\u3093\u304c\u3001\u30a8\u30e9\u30fc\u30e1\u30c3\u30bb\u30fc\u30b8\u3092\u78ba\u8a8d\u3057\u305f\u3068\u3053\u308d\u3001certbot\u304c\u4f9d\u5b58\u3057\u3066\u3044\u308b\u30b3\u30fc\u30c9\u304cPython2\u304b\u3089\u306f\u4f7f\u7528\u3067\u304d\u306a\u3044\u3053\u3068\u304c\u539f\u56e0\u3067certbot\u306b\u3088\u308b\u8a3c\u660e\u66f8\u306e\u66f4\u65b0\u306b\u5931\u6557\u3057\u3066\u3044\u308b\u3089\u3057\u3044\u3068\u3044\u3046\u3068\u3053\u308d\u307e\u3067\u306f\u3001\u898b\u5f53\u304c\u3064\u304d\u307e\u3057\u305f\u3002<\/p>\n

Python3\u5bfe\u5fdc\u306ecertbot\u30d1\u30c3\u30b1\u30fc\u30b8\u3078\u306e\u66f4\u65b0\u3002<\/h3>\n

\u305d\u3053\u3067\u3001Python3\u306b\u5bfe\u5fdc\u3059\u308b\u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u306a\u3044\u304b\u3069\u3046\u304b\u63a2\u3057\u3066\u307f\u305f\u3068\u3053\u308d\u3001python3-certbot-apache\u3068\u3044\u3046Apache plugin\u304c\u3042\u308b\u3089\u3057\u3044\u3053\u3068\u304c\u308f\u304b\u3063\u305f\u306e\u3067\u3001dnf\u30b3\u30de\u30f3\u30c9\u3067\u65e9\u901f\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u307e\u3059\u3002<\/p>\n

\u203b\u306a\u304a\u3001nginx\u7528\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u3082\u3042\u308a\u307e\u3059\u3002Python3\u5bfe\u5fdc\u3067\u3059\u3002\u3053\u3061\u3089\u306e\u8a18\u4e8b<\/a>\u3067\u3061\u3087\u3063\u3068\u3060\u3051\u66f8\u3044\u3066\u3044\u307e\u3059\u3002<\/p>\n

[root@pnr panda]# dnf install python3-certbot-apache\r\n\u30e1\u30bf\u30c7\u30fc\u30bf\u306e\u671f\u9650\u5207\u308c\u306e\u78ba\u8a8d\u306f\u30011:26:12 \u6642\u9593\u524d\u306e 2017\u5e7411\u670804\u65e5 07\u664222\u520621\u79d2 \u306b\u5b9f\u65bd\u3057\u307e\u3057\u305f\u3002\r\n\u4f9d\u5b58\u6027\u304c\u89e3\u6c7a\u3055\u308c\u307e\u3057\u305f\u3002\r\n================================================================================\r\n \u30d1\u30c3\u30b1\u30fc\u30b8                  \u30a2\u30fc\u30ad\u30c6\u30af\u30c1\u30e3\r\n                                         \u30d0\u30fc\u30b8\u30e7\u30f3          \u30ea\u30dd\u30b8\u30c8\u30ea   \u30b5\u30a4\u30ba\r\n================================================================================\r\n\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb:\r\n python3-certbot-apache      noarch      0.19.0-1.fc26       updates      157 k\r\n\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9:\r\n certbot                     noarch      0.19.0-1.fc26       updates       23 k\r\n python3-acme                noarch      0.19.0-1.fc26       updates      183 k\r\n python3-certbot             noarch      0.19.0-1.fc26       updates      480 k\r\n\r\n\u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3\u306e\u8981\u7d04\r\n================================================================================\r\n\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb    1 \u30d1\u30c3\u30b1\u30fc\u30b8\r\n\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9  3 \u30d1\u30c3\u30b1\u30fc\u30b8\r\n\r\n\u7dcf\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u30b5\u30a4\u30ba: 843 k\r\n\u3053\u308c\u3067\u3044\u3044\u3067\u3059\u304b? [y\/N]: y\r\n\u30d1\u30c3\u30b1\u30fc\u30b8\u3092\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u3066\u3044\u307e\u3059:\r\n(1\/4): python3-acme-0.19.0-1.fc26.noarch.rpm    1.0 MB\/s | 183 kB     00:00\r\n(2\/4): python3-certbot-apache-0.19.0-1.fc26.noa 757 kB\/s | 157 kB     00:00\r\n(3\/4): python3-certbot-0.19.0-1.fc26.noarch.rpm 1.8 MB\/s | 480 kB     00:00\r\n(4\/4): certbot-0.19.0-1.fc26.noarch.rpm         260 kB\/s |  23 kB     00:00\r\n--------------------------------------------------------------------------------\r\n\u5408\u8a08                                            388 kB\/s | 843 kB     00:02\r\n\u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3\u306e\u78ba\u8a8d\u3092\u5b9f\u884c\u4e2d...\r\n\u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3\u306e\u78ba\u8a8d\u306b\u6210\u529f\u3057\u307e\u3057\u305f\u3002\r\n\u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3\u306e\u30c6\u30b9\u30c8\u3092\u5b9f\u884c\u4e2d...\r\n\u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3\u306e\u30c6\u30b9\u30c8\u306b\u6210\u529f\u3057\u307e\u3057\u305f\u3002\r\n\u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3\u3092\u5b9f\u884c\u4e2d...\r\n  Running scriptlet: None                                                   1\/1\r\n  \u6e96\u5099\u4e2d           :                                                        1\/1\r\n  \u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9   : python3-acme-0.19.0-1.fc26.noarch                      1\/7\r\n  \u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9   : python3-certbot-0.19.0-1.fc26.noarch                   2\/7\r\n  \u30a4\u30f3\u30b9\u30c8\u30fc\u30eb     : python3-certbot-apache-0.19.0-1.fc26.noarch            3\/7\r\n  \u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9   : certbot-0.19.0-1.fc26.noarch                           4\/7\r\n  Running scriptlet: certbot-0.19.0-1.fc26.noarch                           4\/7\r\nValueError: File context for \/etc\/(letsencrypt|certbot)\/(live|archive)(\/.*)? already defined\r\n  \u6574\u7406\u4e2d           : certbot-0.14.1-3.fc26.noarch                           5\/7\r\n  Running scriptlet: certbot-0.14.1-3.fc26.noarch                           5\/7\r\n  \u6574\u7406\u4e2d           : python3-certbot-0.14.1-3.fc26.noarch                   6\/7\r\n  \u6574\u7406\u4e2d           : python3-acme-0.14.1-1.fc26.noarch                      7\/7\r\n  Running scriptlet: python3-acme-0.14.1-1.fc26.noarch                      7\/7\r\n  \u691c\u8a3c\u4e2d           : python3-certbot-apache-0.19.0-1.fc26.noarch            1\/7\r\n  \u691c\u8a3c\u4e2d           : python3-certbot-0.19.0-1.fc26.noarch                   2\/7\r\n  \u691c\u8a3c\u4e2d           : python3-acme-0.19.0-1.fc26.noarch                      3\/7\r\n  \u691c\u8a3c\u4e2d           : certbot-0.19.0-1.fc26.noarch                           4\/7\r\n  \u691c\u8a3c\u4e2d           : certbot-0.14.1-3.fc26.noarch                           5\/7\r\n  \u691c\u8a3c\u4e2d           : python3-certbot-0.14.1-3.fc26.noarch                   6\/7\r\n  \u691c\u8a3c\u4e2d           : python3-acme-0.14.1-1.fc26.noarch                      7\/7\r\n\r\n\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u6e08\u307f:\r\n  python3-certbot-apache.noarch 0.19.0-1.fc26\r\n\r\n\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u6e08\u307f:\r\n  certbot.noarch 0.19.0-1.fc26             python3-acme.noarch 0.19.0-1.fc26\r\n  python3-certbot.noarch 0.19.0-1.fc26\r\n\r\n\u5b8c\u4e86\u3057\u307e\u3057\u305f!<\/pre>\n
\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u306f\u6210\u529f\u3057\u305f\u3088\u3046\u3067\u3059\u3002<\/p>\n
\u3082\u3046\u4e00\u56de\u3001\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3057\u307e\u3059\u3002<\/h3>\n
\u3082\u3046\u4e00\u56de\u3001certbot renew\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3057\u307e\u3059\u3002\u3059\u308b\u3068\u2026\u3001<\/p>\n
[root@pnr panda]# certbot renew
\nSaving debug log to \/var\/log\/letsencrypt\/letsencrypt.log<\/p>\n
——————————————————————————-
\nProcessing \/etc\/letsencrypt\/renewal\/pandanote.info.conf
\n——————————————————————————-
\nCert is due for renewal, auto-renewing…
\nPlugins selected: Authenticator apache, Installer apache
\nRenewing an existing certificate
\nPerforming the following challenges:
\ntls-sni-01 challenge for pandanote.info
\nWaiting for verification…
\nCleaning up challenges<\/p>\n
——————————————————————————-
\nnew certificate deployed with reload of apache server; fullchain is
\n\/etc\/letsencrypt\/live\/pandanote.info\/fullchain.pem
\n——————————————————————————-<\/p>\n
——————————————————————————-
\nCongratulations, all renewals succeeded. The following certs have been renewed:
\n  \/etc\/letsencrypt\/live\/pandanote.info\/fullchain.pem (success)
\n——————————————————————————-
\n[root@pnr panda]#\n<\/p><\/div>\n
 
\n\u4eca\u5ea6\u306f\u8a3c\u660e\u66f8\u306e\u66f4\u65b0\u306b\u6210\u529f\u3057\u307e\u3057\u305f!!<\/p>\n