Instalace APACHE
- Nejdřív nainstalujeme potřebné package:
apache2
apache-doc
- Vyzkoušíme, jestli funguje
chomsky.ff.cuni.cz
achomsky.korpus.cz
- Nainstalujeme
certbot
:apt install certbot
(
snap install cerbot
instaluje nebezpečnou verzi) - Nainstalujeme plugin pro Apache:
apt-get install python3-certbot-apache
- Vygenerujeme certifikát:
# certbot --apache -d chomsky.ff.cuni.cz -d chomsky.korpus.cz Saving debug log to /var/log/letsencrypt/letsencrypt.log Enter email address (used for urgent renewal and security notices) (Enter 'c' to cancel): hana.skoumalova@ff.cuni.cz - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Please read the Terms of Service at https://letsencrypt.org/documents/LE-SA-v1.4-April-3-2024.pdf. You must agree in order to register with the ACME server. Do you agree? - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - (Y)es/(N)o: Y - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Would you be willing, once your first certificate is successfully issued, to share your email address with the Electronic Frontier Foundation, a founding partner of the Let's Encrypt project and the non-profit organization that develops Certbot? We'd like to send you email about our work encrypting the web, EFF news, campaigns, and ways to support digital freedom. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - (Y)es/(N)o: N Account registered. Requesting a certificate for chomsky.ff.cuni.cz and chomsky.korpus.cz Successfully received certificate. Certificate is saved at: /etc/letsencrypt/live/chomsky.ff.cuni.cz/fullchain.pem Key is saved at: /etc/letsencrypt/live/chomsky.ff.cuni.cz/privkey.pem This certificate expires on 2024-12-12. These files will be updated when the certificate renews. Certbot has set up a scheduled task to automatically renew this certificate in the background. Deploying certificate Successfully deployed certificate for chomsky.ff.cuni.cz to /etc/apache2/sites-available/000-default-le-ssl.conf We were unable to find a vhost with a ServerName or Address of chomsky.korpus.cz. Which virtual host would you like to choose? - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 1: 000-default.conf | | | Enabled 2: 000-default-le-ssl.conf | chomsky.ff.cuni.cz | HTTPS | Enabled - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2 Successfully deployed certificate for chomsky.korpus.cz to /etc/apache2/sites-available/000-default-le-ssl.conf Congratulations! You have successfully enabled HTTPS on https://chomsky.ff.cuni.cz and https://chomsky.korpus.cz - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - If you like Certbot, please consider supporting our work by: * Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate * Donating to EFF: https://eff.org/donate-le - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- Vyzkoušíme, jestli
https
funguje ahttp
je zablokované. - Certifikát by se měl automaticky obnovovat. Kdyby ne, provedeme obnovení příkazem
certbot renew