메뉴 건너뛰기

Cloudera, BigData, Semantic IoT, Hadoop, NoSQL

Cloudera CDH/CDP 및 Hadoop EcoSystem, Semantic IoT등의 개발/운영 기술을 정리합니다. gooper@gooper.com로 문의 주세요.


아래와 같이 letsencrypt를 사용해도 되고 sudo certbot를 사용해도됨. 그리고 인증서 갱신후 반드시 sudo service apache2 reload를 수행하여 변경사항을 반영시켜주어야함.



1. 인증서 발급하기

letsencrypt certonly --webroot --webroot-path=/home/gooper/www -d gooper.com -d www.gooper.com

letsencrypt certonly --webroot --webroot-path=/home/gdime/www -d gdime.com -d www.gdime.com


2. 인증서 갱신시 이전 버전인 ACMEv1를 사용하는 경우 오류메세지

gooper@gsda4:~/$ sudo certbot renew

Saving debug log to /var/log/letsencrypt/letsencrypt.log


- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Processing /etc/letsencrypt/renewal/gooper.com.conf

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Cert is due for renewal, auto-renewing...

Plugins selected: Authenticator webroot, Installer None

Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org

Attempting to renew cert (gooper.com) from /etc/letsencrypt/renewal/gooper.com.conf produced an unexpected error: urn:acme:error:serverInternal :: The server experienced an internal error :: ACMEv1 is deprecated and you can no longer get certificates from this endpoint. Please use the ACMEv2 endpoint, you may need to update your ACME client software to do so. Visit https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430/27 for more information.. Skipping.


- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Processing /etc/letsencrypt/renewal/gdime.com.conf

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Cert is due for renewal, auto-renewing...

Plugins selected: Authenticator webroot, Installer None

Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org

Attempting to renew cert (gdime.com) from /etc/letsencrypt/renewal/gdime.com.conf produced an unexpected error: urn:acme:error:serverInternal :: The server experienced an internal error :: ACMEv1 is deprecated and you can no longer get certificates from this endpoint. Please use the ACMEv2 endpoint, you may need to update your ACME client software to do so. Visit https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430/27 for more information.. Skipping.

All renewal attempts failed. The following certs could not be renewed:

  /etc/letsencrypt/live/gooper.com/fullchain.pem (failure)

  /etc/letsencrypt/live/gdime.com/fullchain.pem (failure)


- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -


All renewal attempts failed. The following certs could not be renewed:

  /etc/letsencrypt/live/gooper.com/fullchain.pem (failure)

  /etc/letsencrypt/live/gdime.com/fullchain.pem (failure)

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

2 renew failure(s), 0 parse failure(s)


*버전에 따른 오류가 발생하면 아래 파일의 server = https://acme-v01.api.letsencrypt.org/directory부분을 server = https://acme-v02.api.letsencrypt.org/directory로 바꿔준다. 

(이전 버전의 renewal정보가 설정된 모습

renewal/gooper.com.conf :server = https://acme-v01.api.letsencrypt.org/directory

renewal/gdime.com.conf :server = https://acme-v01.api.letsencrypt.org/directory

)




3. 1개도메인만 버전 정보를 수정후 다시 renew를 수행한 메세지는 아래와 같음(1개는 정상 1개는 실패) 

gooper@gsda4:/etc/letsencrypt$ sudo certbot renew

Saving debug log to /var/log/letsencrypt/letsencrypt.log


- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Processing /etc/letsencrypt/renewal/gooper.com.conf

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Cert is due for renewal, auto-renewing...

Plugins selected: Authenticator webroot, Installer None

Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org

Renewing an existing certificate

Performing the following challenges:

http-01 challenge for gooper.com

http-01 challenge for www.gooper.com

Waiting for verification...

Cleaning up challenges


- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

new certificate deployed without reload, fullchain is

/etc/letsencrypt/live/gooper.com/fullchain.pem

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -


- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Processing /etc/letsencrypt/renewal/gdime.com.conf

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Cert is due for renewal, auto-renewing...

Plugins selected: Authenticator webroot, Installer None

Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org

Attempting to renew cert (gdime.com) from /etc/letsencrypt/renewal/gdime.com.conf produced an unexpected error: urn:acme:error:serverInternal :: The server experienced an internal error :: ACMEv1 is deprecated and you can no longer get certificates from this endpoint. Please use the ACMEv2 endpoint, you may need to update your ACME client software to do so. Visit https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430/27 for more information.. Skipping.

The following certs could not be renewed:

  /etc/letsencrypt/live/gdime.com/fullchain.pem (failure)


- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -


The following certs were successfully renewed:

  /etc/letsencrypt/live/gooper.com/fullchain.pem (success)


The following certs could not be renewed:

  /etc/letsencrypt/live/gdime.com/fullchain.pem (failure)

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

1 renew failure(s), 0 parse failure(s)

번호 제목 날짜 조회 수
» https용 인증서 발급 명령문 예시및 오류 메세지 2018.01.24 4632
269 Hadoop의 Datanode를 Decommission하고 나서 HBase의 regionservers파일에 해당 노드명을 지웠는데 여전히 "Dead regionser"로 표시되는 경우 처리 2018.01.25 3734
268 Could not compute split, block input-0-1517397051800 not found형태의 오류가 발생시 조치방법 2018.02.01 3290
267 spark-submit 실행시 "java.lang.OutOfMemoryError: Java heap space"발생시 조치사항 2018.02.01 3710
266 프로세스를 확인해서 프로세스를 삭제하는 shell script예제(cryptonight) 2018.02.02 3545
265 fuseki의 endpoint를 이용한 insert, delete하는 sparql예시 2018.02.14 2455
264 scala application 샘플소스(SparkSession이용) 2018.03.07 4364
263 Scala를 이용한 Streaming예제 2018.03.08 3809
262 Scala에서 countByWindow를 이용하기(예제) 2018.03.08 4421
261 이미지 관리 오픈소스 목록 2018.03.11 3601
260 update 샘플 2018.03.12 4546
259 에러 추적(Error Tracking) 및 로그 취합(logging aggregation) 시스템인 Sentry 설치 2018.03.14 2778
258 자주쓰는 유용한 프로그램 2018.03.16 4146
257 HA(Namenode, ResourceManager, Kerberos) 및 보안(Zookeeper, Hadoop) 2018.03.16 2707
256 hadoop 클러스터 실행 스크립트 정리 2018.03.20 4814
255 HDFS Balancer설정및 수행 2018.03.21 3165
254 Components of the Impala Server 2018.03.21 3433
253 [CentOS] 네트워크 설정 2018.03.26 3217
252 cloudera-scm-agent 설정파일 위치및 재시작 명령문 2018.03.29 3966
251 Cloudera가 사용하는 서비스별 디렉토리 2018.03.29 3356
위로