Diese Seite (Version-12) wurde zuletzt am 13-Aug.-2022 17:00 von Administrator geändert.

Diese Seite wurde am 15-Mai-2020 16:01 von Administrator erstellt.

Du bist nicht autorisiert, diese Seite umzubenennen.

Du bist nicht autorisiert, diese Seite zu löschen.

Versionsgeschichte der Seite

Version Zuletzt geändert Größe Autor Änderungen Kommentar
12 13-Aug.-2022 17:00 9 KB Administrator zur vorherigen
11 13-Aug.-2022 16:04 9 KB Administrator zur vorherigen | zur neuesten
10 04-Dez.-2021 12:17 9 KB Administrator zur vorherigen | zur neuesten
9 04-Dez.-2021 12:17 9 KB Administrator zur vorherigen | zur neuesten
8 06-Feb.-2021 16:52 9 KB Administrator zur vorherigen | zur neuesten
7 06-Feb.-2021 16:51 9 KB Administrator zur vorherigen | zur neuesten
6 06-Feb.-2021 16:46 5 KB Administrator zur vorherigen | zur neuesten
5 06-Feb.-2021 16:45 5 KB Administrator zur vorherigen | zur neuesten
4 06-Feb.-2021 16:44 5 KB Administrator zur vorherigen | zur neuesten
3 06-Feb.-2021 16:42 5 KB Administrator zur vorherigen | zur neuesten
2 06-Feb.-2021 16:39 5 KB Administrator zur vorherigen | zur neuesten
1 15-Mai-2020 16:01 5 KB Administrator zur neuesten

Links

Eingehende Links Ausgehende Links
Apache HTTP SSL
Apache HTTP SSL

Versionsunterschiede

Unterschiede zwischen Version und .

Zeile 5: 2 Zeilen geändert.
!Identify linux distribution
with {{{lsb_release -a}}} > Debian GNU/Linux 9.12 (stretch) / Debian GNU/Linux 10 (buster)
[{TableOfContents }]
Zeile 7: 10 Zeilen hinzugefügt.
!Validate & Test
with {{{lsb_release -a}}} > Debian GNU/Linux 9.12 (stretch) / Debian GNU/Linux 10 (buster)\\
Test SSL: [https://www.whynopadlock.com] | [https://crt.sh/?q=www.inetone.de]
! Disable TLS 1
Edit config files twice and modify "SSLProtocol" parameter
/etc/apache2/mods-enabled/ssl.conf and
/etc/letsencrypt/options-ssl-apache.conf
{{{SSLProtocol TLSv1.2}}}
Zeile 32: Eine Zeile geändert.
29.12.2018
%%collapsebox-closed
! (29.12.2018) Install
Zeile 51: Eine Zeile gelöscht.
Zeile 64: Eine Zeile hinzugefügt.
/%
Zeile 66: 6 Zeilen hinzugefügt.
!(06.02.2021) Install
{{{
apt-get update
apt-get install python-certbot-apache
}}}
This will install "python-certbot-apache (0.31.0-1)"
Zeile 57: 2 Zeilen gelöscht.
update 06.02.2021
{{{ 06.02.2021 => Debian GNU/Linux 10 (buster) }}}
Zeile 60: Eine Zeile gelöscht.
Zeile 81: 23 Zeilen hinzugefügt.
!Certificate folder
/etc/letsencrypt/live/
README:
{{{
This directory contains your keys and certificates.
`[cert name]/privkey.pem` : the private key for your certificate.
`[cert name]/fullchain.pem`: the certificate file used in most server software.
`[cert name]/chain.pem` : used for OCSP stapling in Nginx >=1.3.7.
`[cert name]/cert.pem` : will break many server configurations, and should not be used
without reading further documentation (see link below).
WARNING: DO NOT MOVE OR RENAME THESE FILES!
Certbot expects these files to remain in this location in order
to function properly!
We recommend not moving these files. For more information, see the Certbot
}}}
[User Guide|https://certbot.eff.org/docs/using.html#where-are-my-certificates]
Zeile 110: Eine Zeile hinzugefügt.
! Create certificates
Zeile 166: Eine Zeile geändert.
! Add certificates
If you changed you virtual hosts you can run {{{certbot}}} any time like this:
{{{
> certbot
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator apache, Installer apache
Which names would you like to activate HTTPS for?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: www.andreas-ebel.de
2: www.ebel-computing.de
3: www.ferienwohnung-ebel.de
4: feueronadmin.de
5: www.feueronadmin.de
6: inetone.de
7: www.inetone.de
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter 'c' to cancel): 7
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for www.inetone.de
Waiting for verification...
Cleaning up challenges
Deploying Certificate to VirtualHost /etc/apache2/sites-enabled/000-default-le-ssl.conf
Please choose whether or not to redirect HTTP traffic to HTTPS, removing HTTP access.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: No redirect - Make no further changes to the webserver configuration.
2: Redirect - Make all requests redirect to secure HTTPS access. Choose this for
new sites, or if you're confident your site works on HTTPS. You can undo this
change by editing your web server's configuration.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
Failed redirect for www.inetone.de
Unable to set enhancement redirect for www.inetone.de
Unable to find corresponding HTTP vhost; Unable to create one as intended addresses conflict; Current configuration does not support automated redirection
IMPORTANT NOTES:
- We were unable to set up enhancement redirect for your server,
however, we successfully installed your certificate.
- Congratulations! Your certificate and chain have been saved at:
/etc/letsencrypt/live/www.inetone.de/fullchain.pem
Your key file has been saved at:
/etc/letsencrypt/live/www.inetone.de/privkey.pem
Your cert will expire on 2021-05-07. To obtain a new or tweaked
version of this certificate in the future, simply run certbot again
with the "certonly" option. To non-interactively renew *all* of
your certificates, run "certbot renew"
}}}
!Delete/Revoke certificate
Expired certificates cannot be revoked, just deleted:
{{{
certbot delete --cert-path /etc/letsencrypt/archive/${YOUR_DOMAIN}/cert1.pem
... choose certificate ...
}}}
{{{
certbot revoke --cert-path /etc/letsencrypt/archive/${YOUR_DOMAIN}/cert1.pem
... choose certificate ...
}}}
Check
{{{
certbot certificates
}}}
Diese Seite (Version-12) wurde zuletzt am 13-Aug.-2022 17:00 von Administrator geändert.Top