1. DNS/テストサイト/brau.jp/証明書
について、ここに記述してください。
2. Let's Encrypt
standaloneモードでの取得
manualモードでのテスト
root@f:/usr/home/publicfile # certbot certonly --manual --preferred-challenges http-01 -d brau.jp Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator manual, Installer None Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org Obtaining a new certificate Performing the following challenges: http-01 challenge for brau.jp - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - NOTE: The IP of this machine will be publicly logged as having requested this certificate. If you're running certbot in manual mode on a machine that is not your server, please ensure you're okay with that. Are you OK with your IP being logged? - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - (Y)es/(N)o: y - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Create a file containing just this data: seplfLWHc62ZjB_m4lWOXqNJ8I6yMOiWyoGL6kV-10c.Uuosmu0iUAn9aKvlg_ETM_1l6E6L3DXvu-XQJtCA_Ko And make it available on your web server at this URL: http://brau.jp/.well-known/acme-challenge/seplfLWHc62ZjB_m4lWOXqNJ8I6yMOiWyoGL6kV-10c - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press Enter to Continue Waiting for verification... Cleaning up challenges Failed authorization procedure. brau.jp (http-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://brau.jp/.well-known/acme-challenge/seplfLWHc62ZjB_m4lWOXqNJ8I6yMOiWyoGL6kV-10c: Connection refused IMPORTANT NOTES: - The following errors were reported by the server: Domain: brau.jp Type: connection Detail: Fetching http://brau.jp/.well-known/acme-challenge/seplfLWHc62ZjB_m4lWOXqNJ8I6yMOiWyoGL6kV-10c: Connection refused To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address. Additionally, please check that your computer has a publicly routable IP address and that no firewalls are preventing the server from communicating with the client. If you're using the webroot plugin, you should also verify that you are serving files from the webroot path you provided.
3. certbotでの取得
root@f:/usr/home/publicfile # certbot certonly --preferred-challenges http-01 -d brau.jp
Saving debug log to /var/log/letsencrypt/letsencrypt.log How would you like to authenticate with the ACME CA? - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 1: Spin up a temporary webserver (standalone) 2: Place files in webroot directory (webroot) - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 1 Plugins selected: Authenticator standalone, Installer None Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org Obtaining a new certificate Performing the following challenges: http-01 challenge for brau.jp Waiting for verification... Cleaning up challenges IMPORTANT NOTES: - Congratulations! Your certificate and chain have been saved at: /usr/local/etc/letsencrypt/live/brau.jp/fullchain.pem Your key file has been saved at: /usr/local/etc/letsencrypt/live/brau.jp/privkey.pem Your cert will expire on 2020-03-17. To obtain a new or tweaked version of this certificate in the future, simply run certbot again. To non-interactively renew *all* of your certificates, run "certbot renew" - If you like Certbot, please consider supporting our work by: Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate Donating to EFF: https://eff.org/donate-le