成功08-使用certbot向Let's Encrypt取得SSL憑證成功

憑證即將到期，需要重新申請SSL憑證

先進入到certbot的資料夾裡面

PS C:\Users\Administrator> cd..
PS C:\Users> cd..
PS C:\> cd "Program Files (x86)"
PS C:\Program Files (x86)> cd certbot
PS C:\Program Files (x86)\certbot>

第一個步驟：先申請SSL憑證通關

手動申請

PS C:\Program Files (x86)\certbot>certbot certonly --manual -m citerptw@gmail.com -d buy.citerp.com.tw

上面字串請自行修改為自己的Mail跟網域名稱

1.顯示偵錯紀錄檔的路徑與要你輸入 y 同意服務使用條款
Saving debug log to C:\Certbot\log\letsencrypt.log

2.準備發出憑證請求
Renewing an existing certificate for buy.citerp.com.tw

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Create a file containing just this data:

4J9qvW5uiy7gIHgs_Ohryk903Px7WSBbedC5gafGV7Q.kkbbaaQS0ivmyG14bBFtxcPaT1prl4Ml58TaURzHedqKFE

And make it available on your web server at this URL:

http://buy.citerp.com.tw/.well-known/acme-challenge/4J9qvW5uiy7gIHgs_Ohryk903Px7WSBbedC5gafGV7Q

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press Enter to Continue

上述訊息很清楚的跟你說有挑戰要完成(http-01)，通過挑戰才能「證明」你真的擁有該域名！

挑戰：http-01

這個挑戰要你在官網建立一個特殊網址路徑的文字檔案，而且必須可以讓 Let’s Encrypt 網站能夠公開存取該網址，

而且一定只能走 Port 80 進行 HTTP 連線，不能使用任何其他埠號，如此一來才能驗證你就是該網站的擁有者！

C:\wamp\www\kkk\.well-known\acme-challenge
於此實體電腦路徑下建立一個檔案，名稱為 EdgIt-DDbDbji4K5v0XT74-39b9QjfQE8UQMPcJn0Ag

使用瀏覽器可以連接，http://buy.citerp.com.tw/.well-known/acme-challenge/EdgIt-DDbDbji4K5v0XT74-39b9QjfQE8UQMPcJn0Ag，網路可以直接連接的到!!!

網址路徑：/.well-known/acme-challenge/EdgIt-DDbDbji4K5v0XT74-39b9QjfQE8UQMPcJn0Ag

檔案內容： NH_kg1m53jYw5DizEOXJHO4beDyxt8EdgIt-DDbDbji4K5v0XT74-39b9QjfQE8UQMPcJn0Ag.kbaQS0ivmyG14bBFtxcPaT1prl4Ml58TaURzHedqKFE

免費憑證申請成功，並顯示憑證檔路徑

http-01 挑戰都能驗證成功，Certbot 會先幫你訂閱一個 EFF mailing list 郵件清單，並提示你憑證 PEM 檔案所在路徑與

Successfully received certificate.
Certificate is saved at: C:\Certbot\live\buy.citerp.com.tw\fullchain.pem
Key is saved at:         C:\Certbot\live\buy.citerp.com.tw\privkey.pem
This certificate expires on 2024-04-17.
These files will be updated when the certificate renews.
[1m
NEXT STEPS:[0m
- This certificate will not be renewed automatically. Autorenewal of --manual certificates requires the use of an authen
tication hook script (--manual-auth-hook) but one was not provided. To renew this certificate, repeat this same certbot
command before the certificate's expiry date.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
If you like Certbot, please consider supporting our work by:
 * Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
 * Donating to EFF:                    https://eff.org/donate-le
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
PS C:\Program Files (x86)\certbot>

如下圖是 C:\Certbot\live\www.citerp.com.tw 目錄產生的檔案清單：