SSL\u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u306e\u767a\u884c\u306b\u306fACME(Automated Certificate Management Environment) client\u3067\u3042\u308bCertbot<\/a>\u3068\u3044\u3046\u30c4\u30fc\u30eb\u304cLet’s Encrypt\u306b\u3088\u3063\u3066\u85a6\u3081\u3089\u308c\u3066\u3044\u308b\u3088\u3046\u3067\u3042\u308b\u3002<\/p>\n\n\n\n Certbot\u306fGitHub\u304b\u3089\u3082\u53d6\u5f97<\/a>\u3067\u304d\u308b\u3051\u308c\u3069\u3082\u3001Ubuntu Server 18.04.1\u306b\u306fcertbot\u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u7528\u610f\u3055\u308c\u3066\u3044\u308b\u304b\u3089\u6b64\u308c\u3092\u7528\u3044\u308b\u3002<\/p>\n\n\n\n \u591a\u6570\u306epython\u30d1\u30c3\u30b1\u30fc\u30b8\u3092\u5dfb\u304d\u6dfb\u3048\u306bcertbot\u304c\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u308b\u3002\u305d\u3046\u3057\u305f\u3089\u65e9\u901fcertbot\u306e\u5b9f\u884c\u3092\u3059\u308b\u3002\u30b5\u30d6\u30b3\u30de\u30f3\u30c9\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067 \u3042\u3068\u306f \u554f\u984c\u304c\u7121\u3044\u3088\u3046\u3067\u3042\u308c\u3070 \u6b21\u306f\u767b\u9332\u3059\u308b\u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9\u3092Electronic Frontier Foundation<\/a>(EFF\u3001\u96fb\u5b50\u30d5\u30ed\u30f3\u30c6\u30a3\u30a2\u8ca1\u56e3)\u3068\u5206\u304b\u3061\u5408\u3063\u3066\u826f\u3044\u304b\u5c0b\u306d\u3089\u308c\u308b\u3002\u5206\u304b\u3061\u5408\u3048\u3070\u767b\u9332\u3057\u305f\u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9\u5b9b\u306bEFF\u304b\u3089\u306e\u30cb\u30e5\u30fc\u30b9\u3084\u30ad\u30e3\u30f3\u30da\u30fc\u30f3\u306e\u5831\u305b\u304c\u5c4a\u304f\u3068\u3044\u3046\u3002<\/p>\n\n\n\n Let’s Encrypt\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u306e\u5171\u540c\u5275\u8a2d\u8005\u3067\u3042\u308aCertbot\u3092\u958b\u767a\u3059\u308b\u975e\u55b6\u5229\u7d44\u7e54\u305f\u308bEFF\u304b\u3089\u306e\u304a\u8a98\u3044\u3067\u3042\u308b\u3051\u308c\u3069\u3082No\u3068\u8fd4\u7b54\u3057\u305f\u3002\u3053\u308c\u306f \u3059\u308b\u3068\u3053\u3046\u3067\u3042\u308b\u3002\u8a3c\u660e\u66f8\u306e\u767a\u884c\u6570\u5236\u9650\u306b\u62b5\u89e6\u3057\u305f\u6a21\u69d8\u3067\u3042\u3063\u3066\u3053\u3046\u306a\u308b\u3068\u3069\u3046\u3082\u70ba\u3059\u8853\u304c\u306a\u3044\u3002\u30c9\u30e1\u30a4\u30f3\u3042\u305f\u308a\u9031\u306b50\u307e\u3067<\/a>\u3068\u4e91\u3046\u898f\u5236\u304c\u8ab2\u3055\u308c\u3066\u3044\u308b\u304b\u3089\u4eca\u9031\u5206\u306e\u6ce8\u6587\u306b\u3064\u3044\u3066\u306f\u4e00\u8db3\u9045\u304b\u3063\u305f\u3088\u3046\u3067\u3042\u308b\u3002\u306a\u3093\u3066\u65e5\u3060\u3068\u304a\u3082\u3046\u3002<\/p>\n\n\n\n \u7fcc\u9031\u307e\u3067\u3058\u3063\u3068\u582a\u3048\u3066\u304b\u3089\u6539\u3081\u3066\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3059\u308b\u3068\u307e\u3060\u767a\u884c\u6570\u306e\u4e0a\u9650\u306b\u306f\u9054\u3057\u3066\u3044\u306a\u304b\u3063\u305f\u3082\u306e\u3068\u898b\u3089\u308c\u3001\u6059\u7121\u304f\u8a3c\u660e\u66f8\u304c\u767a\u884c\u3055\u308c\u305f\u3002\u8a3c\u660e\u66f8\u3068\u4e2d\u9593\u8a3c\u660e\u66f8\u304c\u4e00\u4f53\u306b\u306a\u3063\u305ffullchain.pem\u3068\u79d8\u5bc6\u9375privkey.pem\u3060\u3051\u3067\u306a\u304f\u8a3c\u660e\u66f8\u5358\u4f53cert.pem\u3068\u4e2d\u9593\u8a3c\u660e\u66f8\u5358\u4f53chain.pem\u3082\u4f75\u305b\u3066 \u8a3c\u660e\u66f8\u306e\u5185\u5bb9\u3092\u8997\u3044\u3066\u307f\u308c\u3070\u3053\u3046\u3067\u3042\u308b\u3002\u6709\u52b9\u671f\u9650\u306f90\u65e5\u9593\u3067\u3042\u308b\u304b\u3089\u671f\u9650\u5207\u308c\u306e\u524d\u306b\u66f4\u65b0\u3059\u308b\u6bb5\u53d6\u308a\u3092\u7acb\u3066\u3066\u304a\u304f\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n\n\n\n \u306a\u304a\u30a2\u30af\u30bb\u30b9\u30ed\u30b0\u3092\u773a\u3081\u3066\u3044\u308b\u3068\u8a3c\u660e\u66f8\u767a\u884c\u306e\u7533\u8acb\u6642\u306bLet’s Encrypt validation server\u304b\u3089\u30a2\u30af\u30bb\u30b9\u304c\u3042\u3063\u3066 Let’s Encrypt validation server\u306b\u306f13.58.30.69\u300134.213.106.112\u300152.29.173.72\u300166.133.109.36\u306e\u5c11\u306a\u304f\u3068\u30824\u3064IP\u30a2\u30c9\u30ec\u30b9\u304c\u3042\u3063\u305f\u3002\u3053\u308c\u3089\u306e\u63a5\u7d9a\u3092\u59a8\u3052\u306a\u3044\u3088\u3046\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u3084Web\u30b5\u30fc\u30d0\u306e\u8a2d\u5b9a\u3092\u3088\u3057\u306a\u306b\u6539\u3081\u308b\u5fc5\u8981\u304c\u3042\u308b\u3051\u308c\u3069\u3082IP\u30a2\u30c9\u30ec\u30b9\u306f\u5909\u66f4\u3055\u308c\u308b\u53ef\u80fd\u6027\u3082\u3042\u308b<\/a>\u304b\u3089\u6cb9\u65ad\u306a\u3089\u306a\u3044\u3002<\/p>\n\n\n\n OS: Ubuntu 18.04.1 LTSApache 2.4.34certbot 0.23.0-1 HTTP\u306b\u3088\u308b\u901a\u4fe1\u306e\u6697\u53f7\u5316\u3092\u305b\u3063\u305b\u3068\u9032\u3081\u3066\u3086\u3053\u3046\u3068\u3044\u3046\u4e16\u8ad6\u306e\u9ad8\u307e\u308a\u306b\u304a\u3055\u308c\u3066Let’s Encrypt\u304c\u767a\u884c\u3059\u308b\u7121\u6599\u306eSSL\u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u306e\u53d6\u5f97\u3092\u8a66\u307f\u308b\u3082\u306e\u3067\u3042\u308b\u3002 SSL\u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u306e\u767a\u884c\u306b\u306fACME(Automated Certificate Management Environm … \u7d9a\u304d\u3092\u8aad\u3080<\/a><\/p>\n","protected":false},"author":1,"featured_media":1176,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[162],"tags":[191,192],"class_list":["post-566","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-162","tag-lets-encrypt","tag-192"],"views":5585,"_links":{"self":[{"href":"https:\/\/www7390uo.sakura.ne.jp\/wordpress\/wp-json\/wp\/v2\/posts\/566","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www7390uo.sakura.ne.jp\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www7390uo.sakura.ne.jp\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www7390uo.sakura.ne.jp\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www7390uo.sakura.ne.jp\/wordpress\/wp-json\/wp\/v2\/comments?post=566"}],"version-history":[{"count":0,"href":"https:\/\/www7390uo.sakura.ne.jp\/wordpress\/wp-json\/wp\/v2\/posts\/566\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www7390uo.sakura.ne.jp\/wordpress\/wp-json\/wp\/v2\/media\/1176"}],"wp:attachment":[{"href":"https:\/\/www7390uo.sakura.ne.jp\/wordpress\/wp-json\/wp\/v2\/media?parent=566"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www7390uo.sakura.ne.jp\/wordpress\/wp-json\/wp\/v2\/categories?post=566"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www7390uo.sakura.ne.jp\/wordpress\/wp-json\/wp\/v2\/tags?post=566"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"\"](\"https:\/\/www7390uo.sakura.ne.jp\/wordpress\/wp-content\/uploads\/2018\/11\/certbot-300x139.png\")
<\/a>$ sudo apt install certbot<\/pre>\n\n\n\n
run<\/code> \u304c\u6307\u5b9a\u3055\u308c\u3066\u3001\u6b64\u308c\u306f\u8a3c\u660e\u66f8\u306e\u53d6\u5f97\u304b\u3089\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u307e\u3067\u3053\u306a\u3057\u3066\u304f\u308c\u308b\u3002\u3051\u308c\u3069\u3082\u4e00\u5148\u305a\u8a3c\u660e\u66f8\u3060\u3051\u53d6\u5f97\u3057\u305f\u3044\u304b\u3089 certonly<\/code> \u3092\u6307\u5b9a\u3057\u305f\u3002<\/p>\n\n\n\n--webroot<\/code>\u3001--webroot-path<\/code>\u306fwebroot\u30d7\u30e9\u30b0\u30a4\u30f3<\/a>\u3067\u4ee5\u3063\u3066\u8a3c\u660e\u66f8\u3092\u767a\u884c\u3059\u308b\u3068\u3044\u3046\u6ce8\u6587\u3067\u3042\u308b\u3002--webroot-path<\/code>\u3067\u6307\u5b9a\u3057\u305f\u30d1\u30b9\u306b\u4e00\u6642\u30d5\u30a1\u30a4\u30eb\u304c\u4f5c\u6210\u3055\u308c\u3001\u6b64\u308c\u3092Let’s Encrypt\u304c\u691c\u8a3c\u306e\u70ba\u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u304b\u3089\u304f\u308a\u306e\u3088\u3046\u3067\u3042\u308b\u3002<\/p>\n\n\n\n--email<\/code>\u3067\u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9\u3092\u3001--domain<\/code>\u3067Common Name\u3092\u6307\u5b9a\u3057\u3066\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3059\u308b\u3070\u304b\u308a\u3067\u3042\u308b\u3051\u308c\u3069\u3082\u6700\u521d\u306f\u5982\u4f55\u306a\u843d\u3061\u5ea6\u304c\u6f5c\u3093\u3067\u3044\u308b\u304b\u77e5\u308c\u306a\u3044\u304b\u3089 --dry-run<\/code>\u3092\u8ffd\u52a0\u3057\u3066\u30c6\u30b9\u30c8\u3092\u3057\u305f\u3002<\/p>\n\n\n\n$ sudo certbot certonly --webroot --webroot-path \/home\/guro\/public_html\/ --email www7390uo@gmail.com --domain www7390uo.sakura.ne.jp --dry-run\n\nIMPORTANT NOTES:\n - The dry run was successful.<\/pre>\n\n\n\n
--dry-run<\/code>\u3092\u5916\u3057\u3066\u5b9f\u884c\u3059\u308b\u3002\u6700\u521d\u306f\u30b5\u30fc\u30d3\u30b9\u306e\u5229\u7528\u898f\u7d04\u306b\u540c\u610f\u3059\u308b\u304b\u5426\u304b\u3092\u554f\u308f\u308c\u308b\u3002\u5e38\u306b\u5408\u610f\u3059\u308b\u5fc3\u6301\u3061\u304c\u3042\u308c\u3070 --agree-tos<\/code> \u30aa\u30d7\u30b7\u30e7\u30f3\u3067\u4ee5\u3063\u3066\u3053\u306e\u554f\u3044\u304b\u3051\u3092\u30b9\u30ad\u30c3\u30d7\u3067\u304d\u308b\u3088\u3046\u3067\u3042\u308b\u3002<\/p>\n\n\n\n$ sudo certbot certonly --webroot --webroot-path \/home\/guro\/public_html\/ --email www7390uo@gmail.com --domian www7390uo.sakura.ne.jp\nSaving debug log to \/var\/log\/letsencrypt\/letsencrypt.log\nPlugins selected: Authenticator webroot, Installer None\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nPlease read the Terms of Service at\nhttps:\/\/letsencrypt.org\/documents\/LE-SA-v1.2-November-15-2017.pdf<\/a>. You must\nagree in order to register with the ACME server at\nhttps:\/\/acme-v02.api.letsencrypt.org\/directory<\/a>\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n(A)gree\/(C)ancel:<\/pre>\n\n\n\n
![\"\"](\"https:\/\/www7390uo.sakura.ne.jp\/wordpress\/wp-content\/uploads\/2018\/11\/eff-logo-300x66.png\"){kind=logo}
<\/a>--no-eff-email<\/code> \u30aa\u30d7\u30b7\u30e7\u30f3\u3067\u4e88\u3081No\u3092\u7a81\u304d\u3064\u3051\u308b\u3053\u3068\u304c\u3067\u304d\u308b\u3057 --eff-email<\/code> \u30aa\u30d7\u30b7\u30e7\u30f3\u3067Yes\u3068\u7b54\u3048\u308b\u624b\u9593\u3092\u7701\u3051\u308b\u3002<\/p>\n\n\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nWould you be willing to share your email address with the Electronic Frontier\nFoundation, a founding partner of the Let's Encrypt project and the non-profit\norganization that develops Certbot? We'd like to send you email about our work\nencrypting the web, EFF news, campaigns, and ways to support digital freedom.\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n(Y)es\/(N)o:<\/pre>\n\n\n\n
Obtaining a new certificate\nPerforming the following challenges:\nhttp-01 challenge for www7390uo.sakura.ne.jp\nUsing the webroot path \/home\/guro\/public_html for all unmatched domains.\nWaiting for verification...\nCleaning up challenges\nAn unexpected error occurred:\nThere were too many requests of a given type :: Error finalizing order :: too many certificates already issued for: sakura.ne.jp: see<\/strong> https:\/\/letsencrypt.org\/docs\/rate-limits\/<\/a>\nPlease see the logfiles in \/var\/log\/letsencrypt for more details.<\/pre>\n\n\n\n
\/etc\/letsencrypt\/archive\/www7390uo.sakura.ne.jp<\/code>\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u4f5c\u6210\u3055\u308c\u308b\u304b\u3089\u30b5\u30fc\u30d0\u306e\u74b0\u5883\u306b\u5408\u308f\u305b\u3066\u7528\u3044\u308b\u3068\u826f\u3055\u305d\u3046\u306a\u98a8\u60c5\u3067\u3042\u308b\u3002<\/p>\n\n\n\n$ sudo certbot certonly --webroot --webroot-path \/home\/guro\/public_html\/ --email www7390uo@gmail.com --domian www7390uo.sakura.ne.jp\n(snip)\nIMPORTANT NOTES:\n - Congratulations! Your certificate and chain have been saved at:\n \/etc\/letsencrypt\/live\/www7390uo.sakura.ne.jp\/fullchain.pem<\/strong>\n Your key file has been saved at:\n \/etc\/letsencrypt\/live\/www7390uo.sakura.ne.jp\/privkey.pem<\/strong>\n Your cert will expire on 2019-01-11. To obtain a new or tweaked\n version of this certificate in the future, simply run certbot\n again. To non-interactively renew *all* of your certificates, run\n \"certbot renew\" <\/pre>\n\n\n\n
# openssl x509 -text -in \/etc\/letsencrypt\/live\/www7390uo.sakura.ne.jp\/cert.pem\nCertificate:\n(snip)\n Issuer: C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3\n Validity\n Not Before: Oct 15 16:41:16 2018 GMT\n Not After : Jan 13 16:41:16 2019 GMT\n Subject: CN=www7390uo.sakura.ne.jp\n(snip)<\/pre>\n\n\n\n
\/.well-known\/acme-challenge\/<\/code> \u5185\u306b\u751f\u6210\u3055\u308c\u305f\u4e00\u6642\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u3063\u3066\u3044\u308b\u6a21\u69d8\u3067\u3042\u308b\u3002<\/p>\n\n\n\n$ tail -f \/usr\/local\/apache2\/logs\/access_log.guro\n66.133.109.36 - - [13\/Oct\/2018:15:23:28 +0900] \"GET \/.well-known\/acme-challenge\/ab4cOkLSd034tdoxftVHDpgrLVsC4oz5N_8H5ySX7_3 HTTP\/1.1\" 200 87 \"-\" \"Mozilla\/5.0 (compatible; Let's Encrypt validation server; +https:\/\/www.letsencrypt.org)\" 267 361<\/pre>\n","protected":false},"excerpt":{"rendered":"