Certbot и Let's Encrypt могут автоматизировать получение и поддержку SSL сертификата для сайта. Certbot поможет вам включить и управлять HTTPS с помощью простых команд.
Использование Certbot и Let's Encrypt бесплатно.
Certbot предназначен для запуска непосредственно на вашем веб-сервере в командной строке.
sudo snap install certbot --classic
certbot 3.1.0 from Certbot Project (certbot-eff✓) installedЛист. 1. Установка certbot
В простейшем случае, вы можете получить сертификат (2 файла) и установить его на сервер самостоятельно.
sudo certbot --manual certonly -d adior.ru
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Enter email address (used for urgent renewal and security notices)
(Enter 'c' to cancel): *************
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Please read the Terms of Service at
https://letsencrypt.org/documents/LE-SA-v1.4-April-3-2024.pdf. You must agree in
order to register with the ACME server. Do you agree?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: Y
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Would you be willing, once your first certificate is successfully issued, to
share your email address with the Electronic Frontier Foundation, a founding
partner of the Let's Encrypt project and the non-profit organization that
develops Certbot? We'd like to send you email about our work encrypting the web,
EFF news, campaigns, and ways to support digital freedom.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: Y
Account registered.
Requesting a certificate for adior.ru
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Create a file containing just this data:
kz2DDodA8ouZbPnjsqIKbPNKF-KvXZNcVZ3ooVUqu_E.mVfqJOrJDrz3MZmoypxt9uBQrKm1oOvoh_HEZCkmQgc
And make it available on your web server at this URL:
http://adior.ru/.well-known/acme-challenge/kz2DDodA8ouZbPnjsqIKbPNKF-KvXZNcVZ3ooVUqu_E
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/adior.ru/fullchain.pem
Key is saved at: /etc/letsencrypt/live/adior.ru/privkey.pem
This certificate expires on 2025-04-10.
These files will be updated when the certificate renews.
NEXT STEPS:
- This certificate will not be renewed automatically. Autorenewal of --manual certificates requires the use of an authentication hook script (--manual-auth-hook) but one was not provided. To renew this certificate, repeat this same certbot command before the certificate's expiry date.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
If you like Certbot, please consider supporting our work by:
* Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate
* Donating to EFF: https://eff.org/donate-le
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -Лист. 2. Пример получения сертификата.
Рис. 1. Сертификат, полученный с помощью утилиты certbot.
