1. certbot 설치
$ sudo snap install --classic certbot
2. 인증서 받기
$ sudo certbot --apache -d ww2.woobi.net -d ww3.woobi.net
받고자 하는 도메인을 -d 도메인 식으로 추가하여 입력한다.(ex: -d ww2.woobi.net -d ww3.woobi.net)
3. 항목 입력
Enter email address (used for urgent renewal and security notices)
(Enter 'c' to cancel): 이메일주소입력
Please read the Terms of Service at
https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must
agree in order to register with the ACME server. Do you agree?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: y 입력
Would you be willing, once your first certificate is successfully issued, to
share your email address with the Electronic Frontier Foundation, a founding
partner of the Let's Encrypt project and the non-profit organization that
develops Certbot? We'd like to send you email about our work encrypting the web,
EFF news, campaigns, and ways to support digital freedom.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: n 입력
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2 번 선택
4. 갱신
$ sudo certbot renew --dry-run
인증서 유효기간 90일 이전에 갱신한다.
인증서 자장위치
/etc/letsencrypt/live/(자신의 도메인주소)
5. 인증서 테스트
https://www.ssllabs.com/ssltest/ 에서 자신의 도메인을 입력한다.
www.woobi.net
welcome