![[PukiWiki]](image/pukiwiki.png "[PukiWiki]")
|
Sakura ドメイン名取得、Let's Encrypt ワイルドカード証明書 |
$ sudo apt install python3-certbot-dns-sakuracloud
# Sakura Cloud API credentials used by Certbot dns_sakuracloud_api_token = 00000000-0000-0000-0000-000000000000 dns_sakuracloud_api_secret = MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw
# sudo -s; cd /root/ $ certbot certonly --dns-sakuracloud -d *.at-sushi.com IMPORTANT NOTES: - Congratulations! Your certificate and chain have been saved at: /etc/letsencrypt/live/at-sushi.com/fullchain.pem ...
Unable to determine zone identifier for *.at-sushi.com using zone names: ['at-sushi.com', 'com']というエラーが出てうまく行かなかった
# certbot renewで更新する
`[cert name]/privkey.pem` : the private key for your certificate.
`[cert name]/fullchain.pem`: the certificate file used in most server software.
`[cert name]/chain.pem` : used for OCSP stapling in Nginx >=1.3.7.
`[cert name]/cert.pem` : will break many server configurations, and should not be used
without reading further documentation (see link below).# openssl x509 -text -noout -in /etc/letsencrypt/live/at-sushi.com/cert.pem
Certificate:
Data:
Version: 3 (0x2)
Issuer: C = US, O = Let's Encrypt, CN = R3
Validity
Not Before: May 10 12:43:51 2021 GMT
Not After : Aug 8 12:43:51 2021 GMT
Subject: CN = *.at-sushi.com
$ sudo certbot certonly --manual \ --preferred-challenges dns \ -d *.at-sushi.com \ -m webmaster@at-sushi.com \ --agree-tos \ --manual-public-ip-logging-ok ... Please deploy a DNS TXT record under the name _acme-challenge.at-sushi.com with the following value: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx（ランダムな文字列） Before continuing, verify the record is deployed.
$ nslookup -q=TXT _acme-challenge.at-sushi.com Server: 100.115.92.193 Address: 100.115.92.193#53 Non-authoritative answer: _acme-challenge.at-sushi.com text = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
