## page was renamed from DNS/テストサイト/brau.jp/証明書
== DNS/テストサイト/brau.jp/証明書 ==

について、ここに記述してください。

== Let's Encrypt ==
standaloneモードでの取得

manualモードでのテスト
{{{
root@f:/usr/home/publicfile # certbot certonly --manual --preferred-challenges http-01 -d brau.jp
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator manual, Installer None
Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for brau.jp

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
NOTE: The IP of this machine will be publicly logged as having requested this
certificate. If you're running certbot in manual mode on a machine that is not
your server, please ensure you're okay with that.

Are you OK with your IP being logged?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: y

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Create a file containing just this data:

seplfLWHc62ZjB_m4lWOXqNJ8I6yMOiWyoGL6kV-10c.Uuosmu0iUAn9aKvlg_ETM_1l6E6L3DXvu-XQJtCA_Ko

And make it available on your web server at this URL:

http://brau.jp/.well-known/acme-challenge/seplfLWHc62ZjB_m4lWOXqNJ8I6yMOiWyoGL6kV-10c

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press Enter to Continue
Waiting for verification...
Cleaning up challenges
Failed authorization procedure. brau.jp (http-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://brau.jp/.well-known/acme-challenge/seplfLWHc62ZjB_m4lWOXqNJ8I6yMOiWyoGL6kV-10c: Connection refused

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: brau.jp
   Type:   connection
   Detail: Fetching
   http://brau.jp/.well-known/acme-challenge/seplfLWHc62ZjB_m4lWOXqNJ8I6yMOiWyoGL6kV-10c:
   Connection refused

   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A/AAAA record(s) for that domain
   contain(s) the right IP address. Additionally, please check that
   your computer has a publicly routable IP address and that no
   firewalls are preventing the server from communicating with the
   client. If you're using the webroot plugin, you should also verify
   that you are serving files from the webroot path you provided.
}}}

== certbotでの取得 ==
root@f:/usr/home/publicfile # certbot certonly --preferred-challenges http-01 -d brau.jp
{{{
Saving debug log to /var/log/letsencrypt/letsencrypt.log

How would you like to authenticate with the ACME CA?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: Spin up a temporary webserver (standalone)
2: Place files in webroot directory (webroot)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 1
Plugins selected: Authenticator standalone, Installer None
Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for brau.jp
Waiting for verification...
Cleaning up challenges

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:
   /usr/local/etc/letsencrypt/live/brau.jp/fullchain.pem
   Your key file has been saved at:
   /usr/local/etc/letsencrypt/live/brau.jp/privkey.pem
   Your cert will expire on 2020-03-17. To obtain a new or tweaked
   version of this certificate in the future, simply run certbot
   again. To non-interactively renew *all* of your certificates, run
   "certbot renew"
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le
}}}