MalangBaram LAB

ssl 설치하기 본문

네트워크&웹/CentOS

ssl 설치하기

프요 2016. 3. 12. 20:11

git clone https://github.com/letsencrypt/letsencrypt

cd letsencrypt


./letsencrypt-auto certonly --webroot --webroot-path /var/www/html --renew-by-default --email mail@malangbaram.net --text --agree-tos -d dev.malangbaram.net


privkey.pem

Private key for the certificate.

Warning

This must be kept secret at all times! Never share it with anyone, including Let’s Encrypt developers. You cannot put it into a safe, however - your server still needs to access this file in order for SSL/TLS to work.

This is what Apache needs for SSLCertificateKeyFile, and nginx for ssl_certificate_key.

cert.pem

Server certificate only.

This is what Apache < 2.4.8 needs for SSLCertificateFile.

chain.pem

All certificates that need to be served by the browser excluding server certificate, i.e. root and intermediate certificates only.

This is what Apache < 2.4.8 needs for SSLCertificateChainFile, and what nginx >= 1.3.7 needs forssl_trusted_certificate.

fullchain.pem

All certificates, including server certificate. This is concatenation of chain.pem and cert.pem.

This is what Apache >= 2.4.8 needs for SSLCertificateFile, and what nginx needs forssl_certificate.







90일 이후 갱신



'네트워크&웹 > CentOS' 카테고리의 다른 글

ssl 설치하기  (0) 2016.03.12
apm설치  (0) 2016.03.12
권한 일괄 변경  (0) 2016.02.21
[firewall]포트 추가  (0) 2015.10.31
에약작업(cron) 설정하기  (0) 2015.10.31
screen 사용법  (0) 2015.10.31
0 Comments
댓글쓰기 폼