注目キーワード
  1. 技術
  2. 広告
  3. IDFA
  4. PHP
  5. WordPress

letsencryptの証明書を更新する方法

  • 2021年1月12日
  • 2021年1月14日
  • 技術
  • 0件

letsencryptから証明書の更新案内メールが来ました

letsencrypt(expiry@letsencrypt.org) から、証明書があと10日で失効するから更新しろとメールが来ました。
件名は、Let’s Encrypt certificate expiration notice for domain “xxxxxxxxxx.com”
と書かれていました。

ーーーーーーーーーーーーーーーーーーーー
Hello,

Your certificate (or certificates) for the names listed below will expire in 10 days (on 23 Jan 21 02:09 +0000). Please make sure to renew your certificate before then, or visitors to your website will encounter errors.

We recommend renewing certificates automatically when they have a third of their
total lifetime left. For Let’s Encrypt’s current 90-day certificates, that means
renewing 30 days before expiration. See
https://letsencrypt.org/docs/integration-guide/ for details.

xxxxxxxxxx.com
yyyyyyyy.com
zzzzzzzzzzzzzz.com

For any questions or support, please visit https://community.letsencrypt.org/. Unfortunately, we can’t provide support by email.

For details about when we send these emails, please visit https://letsencrypt.org/docs/expiration-emails/. In particular, note that this reminder email is still sent if you’ve obtained a slightly different certificate by adding or removing names. If you’ve replaced this certificate with a newer one that covers more or fewer names than the list above, you may be able to ignore this message.

If you are receiving this email in error, unsubscribe at http://xxxxxxxxxxxxxxxxx

Regards,
The Let’s Encrypt Team
ーーーーーーーーーーーーーーーーーーーー

書いてある通りですが、メールに記載されているドメインの証明書は、10日後に期限切れになるので、証明書を更新してください。更新しないと、webサイトに訪問した人はエラーになるよと書いてあります。

letsencryptの証明書を更新する

letsencryptの証明書を更新します。
更新は下記のコマンドを実行します。

# certbot renew

うまくいかない場合は、下記コマンドを実行することで強制的に更新することもできます。

# certbot renew --force-renew

実行すると、正常に進んでいれば、下記のログが流れます。

# certbot renew
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/xxxxxxxxxx.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cert is due for renewal, auto-renewing...
Plugins selected: Authenticator apache, Installer apache
Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for xxxxxxxxxx.com
Waiting for verification...
Cleaning up challenges

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
new certificate deployed with reload of apache server; fullchain is
/etc/letsencrypt/live/xxxxxxxxxx.com/fullchain.pem
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/yyyyyyyy.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cert is due for renewal, auto-renewing...
Plugins selected: Authenticator apache, Installer apache
Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for yyyyyyyy.com
Waiting for verification...
Cleaning up challenges

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
new certificate deployed with reload of apache server; fullchain is
/etc/letsencrypt/live/yyyyyyyy.com/fullchain.pem
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/zzzzzzzzzzzzzz.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cert is due for renewal, auto-renewing...
Plugins selected: Authenticator apache, Installer apache
Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for zzzzzzzzzzzzzz.com
Waiting for verification...
Cleaning up challenges

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
new certificate deployed with reload of apache server; fullchain is
/etc/letsencrypt/live/zzzzzzzzzzzzzz.com/fullchain.pem
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Congratulations, all renewals succeeded. The following certs have been renewed:
  /etc/letsencrypt/live/xxxxxxxxxx.com/fullchain.pem (success)
  /etc/letsencrypt/live/yyyyyyyy.com/fullchain.pem (success)
  /etc/letsencrypt/live/zzzzzzzzzzzzzz.com/fullchain.pem (success)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

(success) と出ていたら完了です。今回は、
・xxxxxxxxxx.com
・yyyyyyyy.com
・zzzzzzzzzzzzzz.com
3つのドメインの向き先が1サーバで管理されていたため、3ドメインまとめて更新されました。