Let’s Encrypt is a new Certificate Authority:
It’s free, automated, and open. In Public Beta
startSSL 을 이용하였으나 모바일 기기에서 https 인증문제로 인하여
Let’s Encrypt로 교체하게 되어 메모를 남김.
. Ubuntu 14.04
. Nginx 1.6.2 (수동설치)
nginx.conf
server{
server_name mynotes.kr
….
}
|
1 2 3 4 5 6 |
mkdir /root/tools apt-get install git git clone https://github.com/letsencrypt/letsencrypt cd letsencrypt /etc/init.d/nginx stop |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 |
./letsencrypt-auto certonly -d mynotes.kr Updating letsencrypt and virtual environment dependencies....... Running with virtualenv: /root/.local/share/letsencrypt/bin/letsencrypt certonly -d mynotes.kr IMPORTANT NOTES: - Congratulations! Your certificate and chain have been saved at /etc/letsencrypt/live/mynotes.kr/fullchain.pem. Your cert will expire on 2016-03-19. To obtain a new version of the certificate in the future, simply run Let's Encrypt again. - If you like Let's Encrypt, please consider supporting our work by: Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate Donating to EFF: https://eff.org/donate-le |
|
1 2 3 4 5 6 7 8 9 10 |
vi nginx.conf server{ server_name mynotes.kr ssl_certificate /etc/letsencrypt/live/mynotes.kr/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/mynotes.kr/privkey.pem; .... } |
https://www.ssllabs.com/ssltest/analyze.html?d=mynotes.kr
