메뉴 건너뛰기

Cloudera, BigData, Semantic IoT, Hadoop, NoSQL

Cloudera CDH/CDP 및 Hadoop EcoSystem, Semantic IoT등의 개발/운영 기술을 정리합니다. gooper@gooper.com로 문의 주세요.


아래와 같이 letsencrypt를 사용해도 되고 sudo certbot를 사용해도됨. 그리고 인증서 갱신후 반드시 sudo service apache2 reload를 수행하여 변경사항을 반영시켜주어야함.



1. 인증서 발급하기

letsencrypt certonly --webroot --webroot-path=/home/gooper/www -d gooper.com -d www.gooper.com

letsencrypt certonly --webroot --webroot-path=/home/gdime/www -d gdime.com -d www.gdime.com


2. 인증서 갱신시 이전 버전인 ACMEv1를 사용하는 경우 오류메세지

gooper@gsda4:~/$ sudo certbot renew

Saving debug log to /var/log/letsencrypt/letsencrypt.log


- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Processing /etc/letsencrypt/renewal/gooper.com.conf

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Cert is due for renewal, auto-renewing...

Plugins selected: Authenticator webroot, Installer None

Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org

Attempting to renew cert (gooper.com) from /etc/letsencrypt/renewal/gooper.com.conf produced an unexpected error: urn:acme:error:serverInternal :: The server experienced an internal error :: ACMEv1 is deprecated and you can no longer get certificates from this endpoint. Please use the ACMEv2 endpoint, you may need to update your ACME client software to do so. Visit https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430/27 for more information.. Skipping.


- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Processing /etc/letsencrypt/renewal/gdime.com.conf

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Cert is due for renewal, auto-renewing...

Plugins selected: Authenticator webroot, Installer None

Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org

Attempting to renew cert (gdime.com) from /etc/letsencrypt/renewal/gdime.com.conf produced an unexpected error: urn:acme:error:serverInternal :: The server experienced an internal error :: ACMEv1 is deprecated and you can no longer get certificates from this endpoint. Please use the ACMEv2 endpoint, you may need to update your ACME client software to do so. Visit https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430/27 for more information.. Skipping.

All renewal attempts failed. The following certs could not be renewed:

  /etc/letsencrypt/live/gooper.com/fullchain.pem (failure)

  /etc/letsencrypt/live/gdime.com/fullchain.pem (failure)


- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -


All renewal attempts failed. The following certs could not be renewed:

  /etc/letsencrypt/live/gooper.com/fullchain.pem (failure)

  /etc/letsencrypt/live/gdime.com/fullchain.pem (failure)

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

2 renew failure(s), 0 parse failure(s)


*버전에 따른 오류가 발생하면 아래 파일의 server = https://acme-v01.api.letsencrypt.org/directory부분을 server = https://acme-v02.api.letsencrypt.org/directory로 바꿔준다. 

(이전 버전의 renewal정보가 설정된 모습

renewal/gooper.com.conf :server = https://acme-v01.api.letsencrypt.org/directory

renewal/gdime.com.conf :server = https://acme-v01.api.letsencrypt.org/directory

)




3. 1개도메인만 버전 정보를 수정후 다시 renew를 수행한 메세지는 아래와 같음(1개는 정상 1개는 실패) 

gooper@gsda4:/etc/letsencrypt$ sudo certbot renew

Saving debug log to /var/log/letsencrypt/letsencrypt.log


- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Processing /etc/letsencrypt/renewal/gooper.com.conf

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Cert is due for renewal, auto-renewing...

Plugins selected: Authenticator webroot, Installer None

Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org

Renewing an existing certificate

Performing the following challenges:

http-01 challenge for gooper.com

http-01 challenge for www.gooper.com

Waiting for verification...

Cleaning up challenges


- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

new certificate deployed without reload, fullchain is

/etc/letsencrypt/live/gooper.com/fullchain.pem

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -


- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Processing /etc/letsencrypt/renewal/gdime.com.conf

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Cert is due for renewal, auto-renewing...

Plugins selected: Authenticator webroot, Installer None

Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org

Attempting to renew cert (gdime.com) from /etc/letsencrypt/renewal/gdime.com.conf produced an unexpected error: urn:acme:error:serverInternal :: The server experienced an internal error :: ACMEv1 is deprecated and you can no longer get certificates from this endpoint. Please use the ACMEv2 endpoint, you may need to update your ACME client software to do so. Visit https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430/27 for more information.. Skipping.

The following certs could not be renewed:

  /etc/letsencrypt/live/gdime.com/fullchain.pem (failure)


- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -


The following certs were successfully renewed:

  /etc/letsencrypt/live/gooper.com/fullchain.pem (success)


The following certs could not be renewed:

  /etc/letsencrypt/live/gdime.com/fullchain.pem (failure)

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

1 renew failure(s), 0 parse failure(s)

번호 제목 날짜 조회 수
59 eclipse 3.1 단축키 정리파일 2017.01.02 2058
58 [vi] test.nq파일에서 특정문자열(예, <>)을 찾아서 포함되는 라인을 삭제한 동일한 이름의 파일을 만드는 방법 2017.01.25 2079
57 LAGOM 1.4 AND KUBERNETES ORCHESTRATION 2019.07.19 2443
56 [u-Auctions]목록이 1개만 나오는 문제 2017.05.29 2489
55 [PHP7.0]로그파일 위치 2017.05.07 2578
54 windows 혹은 mac에서 docker설치하기 위한 파일 2017.10.13 2646
53 Runtime.getRuntime().exec(cmd) sample 소스 2015.11.19 2648
52 [MemoryLeak분석]다수의 MongoCleaner 쓰레드가 Sleep상태에 있으면서 Full GC가 계속 발생되는 문제 해결방법 file 2017.01.11 2674
51 magento2 설치후 초기화면이 깨지는 문제 file 2017.01.31 2774
50 에러 추적(Error Tracking) 및 로그 취합(logging aggregation) 시스템인 Sentry 설치 2018.03.14 2778
49 webid에서 google처럼 검색할 수 있도록 하는 프로그램 2017.05.16 2782
48 "암은 평범한 병, 심호흡만 잘해도 암세포 분열 저지” 2016.06.02 2812
47 anaconda3(v5.4)를 이용하여 tensorflow설치후 ipython프로그램을 실행하여 import할때 오류발생시 조치 2018.07.27 2879
46 천문학적, 기후학적, 기상학적, 생물학적, 농사계절 구분 2015.12.16 2931
45 magento2 2.1.3을 수동으로 설치하는 방법 2017.02.01 2974
44 magento2 샘플데이타 설치 2017.01.31 3070
43 바나나 파이의 /tmp폴더를 외장하드로 변경하기 2015.07.24 3072
42 대표 오픈소스 라이선스, 한 눈에 보기! 2015.12.10 3078
41 외부 기기(usb, 하드)등 mount(연결)하기 2014.08.03 3208
40 hadoop 기반 문서 검색 2014.09.25 3279
위로