Let's Encrypt

証明書の更新

このやり方はあちこちに記述があるが、極めて簡単。 /etc/crontabに、

 00 05 05  *  * root /opt/certbot/certbot-auto renew

とでも書けばよい（/opt/certbotにインストールした場合）。この例では一月に一度だけrenewするが、やりすぎてはいけないようだ。例えば毎日行うなど。

証明書の期限確認

# /opt/certbot/certbot-auto certificates
....

-------------------------------------------------------------------------------
Found the following certs:
  Certificate Name: www.sample.com
    Domains: www.sample.com
    Expiry Date: 2017-08-29 08:16:00+00:00 (VALID: 40 days)
    Certificate Path: /etc/letsencrypt/live/www.sample.com/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/www.sample.com/privkey.pem

......
-------------------------------------------------------------------------------

参考

• https://letsencrypt.jp/usage/

• http://qiita.com/yasuken/items/e45eb9efd16199512d4e

• https://www.digitalocean.com/community/tutorials/how-to-set-up-let-s-encrypt-certificates-for-multiple-apache-virtual-hosts-on-ubuntu-14-04

• http://serverfault.com/questions/768629/letsencrypt-on-centos-6-with-multiple-virtualhosts

• https://community.letsencrypt.org/t/cant-figure-out-how-to-set-up-multiple-vhosts-to-work-with-certbot-in-centos-6-8/26263

• https://www.digicert.com/ssl-support/apache-multiple-ssl-certificates-using-sni.htm