Lets' Encrypt로 무료로 HTTPS 지원하기

참고 : https://blog.outsider.ne.kr/1178

설치

cd /usr/local/

git clone https://github.com/letsencrypt/letsencrypt

확인

cd /usr/local/letsencrypt

./letsencrypt-auto --help

인증서 발급

./letsencrypt-auto certonly --manual

발급확인

cd /etc/letsencrypt/live

ls

nginx 설정

listen 443 ssl;

ssl_certificate /etc/letsencrypt/live/도메인/fullchain.pem;

ssl_certificate_key /etc/letsencrypt/live/도메인/privkey.pem;

apache 설정

SSLEngine on

SSLCertificateFile    /etc/letsencrypt/live/도메인/cert.pem

SSLCertificateKeyFile /etc/letsencrypt/live/도메인/privkey.pem

SSLCertificateChainFile /etc/letsencrypt/live/도메인/chain.pem

갱신 - 3달전

cd /usr/local/letsencrypt

./letsencrypt-auto renew