{"id":4716,"date":"2024-03-20T15:49:17","date_gmt":"2024-03-20T07:49:17","guid":{"rendered":"http:\/\/101.37.83.176\/?p=4716"},"modified":"2024-03-20T15:49:17","modified_gmt":"2024-03-20T07:49:17","slug":"lets-encrypt-on-oracle-linux","status":"publish","type":"post","link":"http:\/\/101.37.83.176\/?p=4716","title":{"rendered":"Let&#8217;s Encrypt &#8211; Free Certificates on Oracle Linux"},"content":{"rendered":"<p><strong>SSL\u76f8\u5173\u914d\u7f6e<\/strong><br \/>\n\u524d\u7f6e\u6761\u4ef6\u5df2\u89e3\u6790\u57df\u540d\u81f3\u670d\u52a1\u5668<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\n#\u67e5\u770b\/etc\/httpd\/modules\u4e0b\u662f\u5426\u6709mod_ssl.so\u6a21\u5757\uff0c\u82e5\u65e0\u5219\u5b89\u88c5\r\nsudo yum install mod_ssl\r\n\r\n#\u67e5\u770b\u5728 \/etc\/httpd\/conf.modules.d \u76ee\u5f55\u4e0b\u7684 00-ssl.conf \u914d\u7f6e\u6587\u4ef6\u627e\u5230\r\nLoadModule ssl_module modules\/mod_ssl.so\r\n\r\n#\u7528\u4e8e\u52a0\u8f7d SSL \u6a21\u5757\u7684\u914d\u7f6e\u8bed\u53e5\uff0c\u82e5\u5df2\u6ce8\u91ca\uff0c\u8bf7\u53bb\u6389\u9996\u884c\u7684\u6ce8\u91ca\u7b26\u53f7\u3002\r\n\r\n#\u5728\/etc\/httpd\/conf.modules.d\u4e2d\u65b0\u5efa\u4e00\u4e2a 00-rewrite.conf\u3002\u5728\u65b0\u5efa\u6587\u4ef6\u4e2d\u6dfb\u52a0\u4ee5\u4e0b\u5185\u5bb9\r\nLoadModule rewrite_module modules\/mod_rewrite.so\r\n\r\n#\u5728 httpd.conf \u914d\u7f6e\u6587\u4ef6\u4e2d\u6dfb\u52a0\u5982\u4e0b\u5185\u5bb9\uff1a\r\nDirectory &quot;\/var\/www\/html&quot;\r\n##\u81ea\u52a8http\u91cd\u5b9a\u5411\u81f3https\r\nRewriteEngine on\r\nRewriteCond %{SERVER_PORT} !^443$\r\nRewriteRule ^(.*)?$ https:\/\/%{SERVER_NAME}%{REQUEST_URI} &#x5B;L,R]\r\n\/Directory\r\n<\/pre>\n<hr \/>\n<p><strong>\u5b89\u88c5Let&#8217;s Encrypt\u5e76\u8bbe\u7f6ecertbot\u81ea\u52a8\u66f4\u65b0<\/strong><br \/>\n#\u53ef\u53c2\u8003<a href=\"https:\/\/certbot.eff.org\/\" target=\"_blank\" rel=\"noopener\">cetbot.eff.org<\/a><\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\n#\u5b89\u88c5official EPEL release\r\nsudo dnf install https:\/\/dl.fedoraproject.org\/pub\/epel\/epel-release-latest-9.noarch.rpm\r\n\r\n#\u5b89\u88c5snap\r\nsudo dnf install -y snapd\r\nsudo systemctl enable --now snapd.socket\r\nsudo systemctl start snapd\r\nsudo ln -s \/var\/lib\/snapd\/snap \/snap\r\n\r\n#\u5b89\u88c5\u5e76\u66f4\u65b0core\r\nsudo snap install core\r\nsudo snap refresh core\r\n\r\n#\u5b89\u88c5certbot\r\nsudo snap install --classic certbot\r\nsudo ln -s \/snap\/bin\/certbot \/usr\/bin\/certbot\r\n\r\n#\u751f\u6210\u65b0\u8bc1\u4e66\r\n#For Apache:\r\n\/usr\/bin\/certbot certonly --webroot -w \/var\/www\/html --email example@example.com -d example.com -d www.example.com\r\n\r\n#\u914d\u7f6eapache\uff0c\u82e5\u53ea\u6709\u4e00\u4e2a\u7f51\u7ad9\u4e5f\u53ef\u4ee5\u76f4\u63a5\u914d\u7f6e\/etc\/httpd\/httpd.conf\u548c\/etc\/httpd\/conf.d\/ssl.conf\r\nServerName example.com\r\nServeralias www.example.com\r\nDocumentRoot \/var\/www\/html\r\nErrorLog \/var\/log\/httpd\/example.com-error_log\r\nCustomLog \/var\/log\/httpd\/example.com-access_log combined\r\n\r\nSSLEngine On\r\nSSLCertificateFile \/etc\/letsencrypt\/live\/example.com\/cert.pem\r\nSSLCertificateKeyFile \/etc\/letsencrypt\/live\/example.com\/privkey.pem\r\nSSLCertificateChainFile \/etc\/letsencrypt\/live\/example.com\/chain.pem\r\nSSLCACertificateFile \/etc\/letsencrypt\/live\/example.com\/chain.pem\r\n\r\n#\u8bbe\u7f6e\u81ea\u52a8\u66f4\u65b0\u8bc1\u4e66\r\nsudo certbot renew --dry-run\r\n<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Let&#8217;s Encrypt &#8211; Free Certificates on Oracle Linux<\/p>\n","protected":false},"author":1,"featured_media":4717,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[71],"tags":[331,332,333],"class_list":["post-4716","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-lamp","tag-free-certificates","tag-lets-encrypt","tag-oracle-linux"],"_links":{"self":[{"href":"http:\/\/101.37.83.176\/index.php?rest_route=\/wp\/v2\/posts\/4716","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/101.37.83.176\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/101.37.83.176\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/101.37.83.176\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/101.37.83.176\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4716"}],"version-history":[{"count":1,"href":"http:\/\/101.37.83.176\/index.php?rest_route=\/wp\/v2\/posts\/4716\/revisions"}],"predecessor-version":[{"id":4718,"href":"http:\/\/101.37.83.176\/index.php?rest_route=\/wp\/v2\/posts\/4716\/revisions\/4718"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/101.37.83.176\/index.php?rest_route=\/wp\/v2\/media\/4717"}],"wp:attachment":[{"href":"http:\/\/101.37.83.176\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4716"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/101.37.83.176\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4716"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/101.37.83.176\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4716"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}