{"id":4523,"date":"2017-11-18T19:12:45","date_gmt":"2017-11-18T10:12:45","guid":{"rendered":"https:\/\/ukaapple.selfip.com\/support\/?p=4523"},"modified":"2017-11-18T19:19:04","modified_gmt":"2017-11-18T10:19:04","slug":"original_app_36","status":"publish","type":"post","link":"https:\/\/minnano.app\/support\/2017\/11\/18\/original_app_36\/","title":{"rendered":"\u72ec\u5275\u30a2\u30d7\u30ea\u958b\u767a\u65e5\u8a18 36\u65e5\u76ee \u30b5\u30a4\u30c8\u306eSSL\u5316"},"content":{"rendered":"<p>\u4eca\u65e5\u306f\u30b5\u30a4\u30c8\u3092SSL\u306b\u5bfe\u5fdc\u3055\u305b\u3066\u3044\u307e\u3057\u305f\u3002<\/p>\n<p>SSL\u8a3c\u660e\u66f8\u306fLet&#8217;s encrypt\u3092\u4f7f\u3044\u3001\u81ea\u52d5\u66f4\u65b0\u8a2d\u5b9a\u3092\u3057\u307e\u3057\u305f\u3002Web\u30b5\u30fc\u30d0\u306fOpenLiteSpeed\u3067\u3001\u8a3c\u660e\u66f8\u3092\u9069\u7528\u3057\u305fhttps\u306e\u30ea\u30b9\u30ca\u30fc\u3092\u8ffd\u52a0\u3057\u3001\u65e2\u5b58\u306ehttp\u304b\u3089\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3055\u305b\u308b\u3088\u3046\u306b\u3057\u307e\u3057\u305f\u3002<\/p>\n<p>\u3067\u3001\u3054\u89a7\u306e\u3088\u3046\u306bURL\u3092\u898b\u3066\u3044\u305f\u3060\u304f\u3068\u3001\u3061\u3083\u3093\u3068\u9375\u30de\u30fc\u30af\u304c\u51fa\u3066\u3044\u308b\u304b\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n<p>\u4ee5\u4e0b\u3001\u3084\u3063\u305f\u3053\u3068\u306e\u6bb4\u308a\u66f8\u304d\u3067\u3059\u3002CentOS7\u3067\u3059\u3002HTTP\/2\u3068\u5408\u308f\u305b\u3066\u3001\u8d85\u5feb\u9069\u306a\u30b5\u30a4\u30c8\u306b\u306a\u308a\u307e\u3057\u305f\uff01<\/p>\n<p>rpm -ivh https:\/\/dl.fedoraproject.org\/pub\/epel\/epel-release-latest-7.noarch.rpm<br \/>\nyum install certbot<\/p>\n<p>certbot certonly &#8211;webroot -w \/usr\/local\/lsws\/VirtualHost1\/ -d minnano.app<br \/>\n&#8220;Enter email address (used for urgent renewal and security notices) (Enter &#8216;c&#8217; to<br \/>\ncancel):[\u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9\u3092\u6307\u5b9a]&#8221;<br \/>\n(A)gree\/(C)ancel: A<br \/>\n(Y)es\/(N)o: N<br \/>\nIMPORTANT NOTES:<br \/>\n&#8211; Congratulations! Your certificate and chain have been saved at:<br \/>\n\/etc\/letsencrypt\/live\/minnano.app\/fullchain.pem<br \/>\nYour key file has been saved at:<br \/>\n\/etc\/letsencrypt\/live\/minnano.app\/privkey.pem<br \/>\nYour cert will expire on 2018-02-16. To obtain a new or tweaked<br \/>\nversion of this certificate in the future, simply run certbot<br \/>\nagain. To non-interactively renew *all* of your certificates, run<br \/>\ncertbot renew<br \/>\n&#8211; Your account credentials have been saved in your Certbot<br \/>\nconfiguration directory at \/etc\/letsencrypt. You should make a<br \/>\nsecure backup of this folder now. This configuration directory will<br \/>\nalso contain certificates and private keys obtained by Certbot so<br \/>\nmaking regular backups of this folder is ideal.<br \/>\n&#8211; If you like Certbot, please consider supporting our work by:<\/p>\n<p>Donating to ISRG \/ Let&#8217;s Encrypt:   https:\/\/letsencrypt.org\/donate<br \/>\nDonating to EFF:                    https:\/\/eff.org\/donate-le<\/p>\n<p>OpenLiteSpeed\u306e\u7ba1\u7406\u30b5\u30a4\u30c8\u304b\u3089\u3001HTTPS\u306eListener\u3092\u4f5c\u6210<br \/>\nListener Name : minnano.app<br \/>\nPort : 443<br \/>\nSecure : YES<\/p>\n<p>Listeners \u2013> minnano.app \u2013> General \u2013> Virtual Host Mappings \u2013> Add<br \/>\nVirtual Host : uka.apple<br \/>\nDomains : minnano.app<\/p>\n<p>Listeners \u2013> minnano.app \u2013> SSL<br \/>\nPrivate Key File : \/etc\/letsencrypt\/live\/minnano.app\/privkey.pem<br \/>\nCertificate File : \/etc\/letsencrypt\/live\/minnano.app\/fullchain.pem<br \/>\nChained Certificate : Yes<\/p>\n<p>Listeners \u2013> minnano.app \u2013> SSL \u2013> SSL Protocol.<br \/>\nProtocol Version : \u6b21\u3092\u5168\u3066\u30c1\u30a7\u30c3\u30af SSL v3.0\/TLS v1.0\/TLS v1.1\/TLS v1.2\/TLS v1.3<\/p>\n<p>vi \/etc\/sysconfig\/iptables<br \/>\n-A INPUT -p tcp -m state &#8211;state NEW -m tcp &#8211;dport 443 -j ACCEPT<br \/>\nsystemctl restart iptables<\/p>\n<p>Virtual Host \u2013> uka.apple \u2013> Rewrite \u2013> Rewire Rules<br \/>\n\u5148\u982d\u306b\u4ee5\u4e0b2\u884c\u3092\u8ffd\u52a0<br \/>\nRewriteCond %{HTTPS} off<br \/>\nRewriteRule ^(.*)$ https:\/\/%{HTTP_HOST}%{REQUEST_URI} [R=301,L]<\/p>\n<p>OpenLiteSpeed\u3092\u518d\u8d77\u52d5\u3057\u3001https:\/\/minnano.app\u3078\u30a2\u30af\u30bb\u30b9\u3057\u3066\u78ba\u8a8d<\/p>\n<p>\u8a3c\u660e\u66f8\u306e\u81ea\u52d5\u66f4\u65b0<br \/>\ncertbot renew &#8211;dry-run<\/p>\n<p>\u6b63\u5e38\u306b\u52d5\u4f5c\u3057\u305f\u3053\u3068\u3092\u78ba\u8a8d\u5f8c\u3001cron\u3078\u767b\u9332<br \/>\nvi \/etc\/cron.d\/letsencrypt<br \/>\n18 3 * * 2 root \/usr\/bin\/certbot renew &#8211;post-hook &#8220;systemctl restart lsws&#8221;<br \/>\n\u6bce\u9031\u706b\u66dc\u306e3\u664218\u5206\u306brenew\u304c\u8d77\u52d5\u3059\u308b<\/p>\n<p>WordPress\u306e\u8a2d\u5b9a\u5909\u66f4<br \/>\n\u8a2d\u5b9a -> \u4e00\u822c<br \/>\nWordPress \u30a2\u30c9\u30ec\u30b9 (URL) : https:\/\/minnano.app\/support<br \/>\n\u30b5\u30a4\u30c8\u30a2\u30c9\u30ec\u30b9 (URL) : https:\/\/minnano.app\/support<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4eca\u65e5\u306f\u30b5\u30a4\u30c8\u3092SSL\u306b\u5bfe\u5fdc\u3055\u305b\u3066\u3044\u307e\u3057\u305f\u3002 SSL\u8a3c\u660e\u66f8\u306fLet&#8217;s encrypt\u3092\u4f7f\u3044\u3001\u81ea\u52d5\u66f4\u65b0\u8a2d\u5b9a\u3092\u3057\u307e\u3057\u305f\u3002Web\u30b5\u30fc\u30d0\u306fOpenLiteSpeed\u3067\u3001\u8a3c\u660e\u66f8\u3092\u9069\u7528\u3057\u305fhttps\u306e\u30ea\u30b9\u30ca\u30fc\u3092\u8ffd\u52a0\u3057\u3001\u65e2 &hellip; <a href=\"https:\/\/minnano.app\/support\/2017\/11\/18\/original_app_36\/\" class=\"more-link\">\u7d9a\u304d\u3092\u8aad\u3080 <span class=\"screen-reader-text\">\u72ec\u5275\u30a2\u30d7\u30ea\u958b\u767a\u65e5\u8a18 36\u65e5\u76ee \u30b5\u30a4\u30c8\u306eSSL\u5316<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16],"tags":[],"class_list":["post-4523","post","type-post","status-publish","format-standard","hentry","category-16"],"_links":{"self":[{"href":"https:\/\/minnano.app\/support\/wp-json\/wp\/v2\/posts\/4523","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/minnano.app\/support\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/minnano.app\/support\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/minnano.app\/support\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/minnano.app\/support\/wp-json\/wp\/v2\/comments?post=4523"}],"version-history":[{"count":2,"href":"https:\/\/minnano.app\/support\/wp-json\/wp\/v2\/posts\/4523\/revisions"}],"predecessor-version":[{"id":4528,"href":"https:\/\/minnano.app\/support\/wp-json\/wp\/v2\/posts\/4523\/revisions\/4528"}],"wp:attachment":[{"href":"https:\/\/minnano.app\/support\/wp-json\/wp\/v2\/media?parent=4523"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/minnano.app\/support\/wp-json\/wp\/v2\/categories?post=4523"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/minnano.app\/support\/wp-json\/wp\/v2\/tags?post=4523"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}