Let’s Encrypt 무료 SSL 인증서 Nginx

Let’s Encrypt is a new Certificate Authority:

It’s free, automated, and open. In Public Beta

startSSL 을 이용하였으나 모바일 기기에서 https 인증문제로 인하여
Let’s Encrypt로 교체하게 되어 메모를 남김.

. Ubuntu 14.04
. Nginx 1.6.2 (수동설치)

nginx.conf

server{
server_name mynotes.kr
….
}

mkdir /root/tools
apt-get install git
git clone https://github.com/letsencrypt/letsencrypt
cd letsencrypt

/etc/init.d/nginx stop

./letsencrypt-auto certonly -d mynotes.kr
Updating letsencrypt and virtual environment dependencies.......
Running with virtualenv: /root/.local/share/letsencrypt/bin/letsencrypt certonly -d mynotes.kr

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at
   /etc/letsencrypt/live/mynotes.kr/fullchain.pem. Your cert will
   expire on 2016-03-19. To obtain a new version of the certificate in
   the future, simply run Let's Encrypt again.
 - If you like Let's Encrypt, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le

vi nginx.conf

server{
    server_name mynotes.kr

    ssl_certificate /etc/letsencrypt/live/mynotes.kr/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/mynotes.kr/privkey.pem;
 
    ....
}

https://www.ssllabs.com/ssltest/analyze.html?d=mynotes.kr