{"id":2429,"date":"2024-10-31T18:03:32","date_gmt":"2024-10-31T09:03:32","guid":{"rendered":"http:\/\/blog.moramcnt.com\/?p=2429"},"modified":"2024-10-31T18:03:32","modified_gmt":"2024-10-31T09:03:32","slug":"%ed%81%ac%eb%a1%a0%ec%9d%84-%ec%9d%b4%ec%9a%a9%ed%95%98%ec%97%ac-%eb%ac%b4%eb%a3%8c-ssl-%ec%9d%b8%ec%a6%9d%ec%84%9c-%ec%9e%90%eb%8f%99%ea%b0%b1%ec%8b%a0","status":"publish","type":"post","link":"http:\/\/blog.moramcnt.com\/?p=2429","title":{"rendered":"\ud06c\ub860\uc744 \uc774\uc6a9\ud558\uc5ec \ubb34\ub8cc SSL \uc778\uc99d\uc11c \uc790\ub3d9\uac31\uc2e0"},"content":{"rendered":"

I. \ubaa9\ud45c<\/b><\/p>\n

Let’s Encrypt\uc5d0\uc11c \uc81c\uacf5\ud558\uace0 \uc788\ub294 \ubb34\ub8cc SSL \uc778\uc99d\uc11c\ub97c 3\uac1c\uc6d4\uc5d0 \ud55c\ubc88\uc529 \uc790\ub3d9\uc73c\ub85c \uac31\uc2e0\ud560\uc218 \uc788\ub294 \ubc29\ubc95\uc744 \uc5f0\uad6c\ud55c\ub2e4.<\/p>\n

II. \uc5f0\uad6c<\/b> \ubc0f<\/b> \uac1c\ubc1c\ub0b4\uc6a9<\/b><\/p>\n

1. \ud06c\ub860\uc744<\/b> \uc774\uc6a9\ud55c<\/b> \uc778\uc99d\uc11c <\/b>\uc790\ub3d9\uac31\uc2e0<\/b><\/p>\n

1) \uc778\uc99d\uc11c \ub9cc\ub8cc\uc77c \ud655\uc778\ubc29\ubc95<\/p>\n

\u00a0certbot certificates<\/p>\n

Saving debug log to \/var\/log\/letsencrypt\/letsencrypt.log<\/p>\n

\n

– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –<\/p>\n

Found the following certs:<\/p>\n

\u00a0 Certificate Name: odc.mbizok.com<\/p>\n

\u00a0\u00a0\u00a0 Domains: odc.mbizok.com<\/p>\n

\u00a0\u00a0\u00a0 Expiry Date: 2021-03-19 06:01:45+00:00 (VALID: 88 days)<\/p>\n

\u00a0\u00a0\u00a0 Certificate Path: \/etc\/letsencrypt\/live\/odc.mbizok.com\/fullchain.pem<\/p>\n

\u00a0\u00a0\u00a0 Private Key Path: \/etc\/letsencrypt\/live\/odc.mbizok.com\/privkey.pem<\/p>\n

– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –<\/p>\n

 <\/p>\n

2) \ud06c\ub860\uc5d0 \ub4f1\ub85d : \ub9e4\uc6d4 19\uc77c \ub9c8\ub2e4 01\uc2dc\uc5d0 \uac31\uc2e0 \ucc98\ub9ac\ud558\uace0 \uc544\ud30c\uce58\ub97c \uc7ac\uc2dc\uc791<\/p>\n

crontab -e<\/p>\n

0 1 19 * * \/usr\/bin\/certbot renew –renew-hook=”sudo service apache2 restart”<\/p>\n

 <\/p>\n

 <\/p>\n

2. \ud06c\ub860\uc744 \uc774\uc6a9\ud558\uc5ec \uc11c\ubc84\uc778\uc99d\uc11c \uc0dd\uc131<\/b><\/p>\n

\uc704\uc5d0\uc11c \uc0dd\uc131\ub41c \uc778\uc99d\uc11c\ub97c \uc774\uc6a9\ud558\uc5ec \uc2a4\ud504\ub9c1\ubd80\ud2b8\uc5d0\uc11c \uc0ac\uc6a9\ub420 \uc11c\ubc84\uc778\uc99d\uc11c\ub97c \uc8fc\uae30\uc801\uc73c\ub85c\uc0dd\uc131\ud574\ub193\ub294\ub2e4.<\/p>\n

0 1 19 * * \/etc\/letsencrypt\/live\/odc.mbizok.com\/makeKeyStore.sh<\/p>\n

\n

\uc544\ub798\ub294 makeKeyStore.sh\uc73c \ub0b4\uc6a9\uc73c\ub85c \uc11c\ubc84\uc778\uc99d\uc11c\ub97c \/home\/cinema\/Service\/Keystore \ud3f4\ub354\uc5d0 \uc0dd\uc131\ud55c\ub2e4.<\/p>\n\n\n\n
\u00a0#!\/bin\/bash<\/p>\n

# \uc790\ubc14\uc5d0\uc11c \uc4f8\uc218 \uc788\ub3c4\ub85d keysore.p12\ub85c \ubcc0\ud654<\/p>\n

openssl pkcs12 -export -in fullchain.pem -inkey privkey.pem -out cinema.pkcs12 -name cinema -CAfile chain.pem -caname root -password pass:odckorea<\/p>\n

mv cinema.pkcs12 \/home\/cinema\/Service\/Keystore<\/p>\n

chown cinema:cinema \/home\/cinema\/Service\/Keystore\/cinema.pkcs12<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

3. \uc2a4\ud504\ub9c1\ubd80\ud2b8\uc758 \uac8c\uc774\ud2b8\uc6e8\uc774\uc11c\ubc84\uc5d0 application.yml\uc5d0\uc11c\ub294 \uc544\ub798\uc640 \uac19\uc774 \ucc38\uc870\ud560\uc218 \uc788\uac8c \ud558\uc600\ub2e4.<\/p>\n\n\n\n
server:<\/p>\n

port: 7001<\/p>\n

ssl:<\/p>\n

key-store : “file:\/home\/cinema\/Service\/Keystore\/cinema.pkcs12”<\/p>\n

key-store-type: PKCS12<\/p>\n

key-store-password : “odckorea”<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

III. \uacb0\ub860<\/strong><\/p>\n

3\ub2ec\uc5d0 \ud55c\ubc88\uc529 \uc778\uc99d\uc11c\ub97c \uc218\ub3d9\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8 \ud574\uc57c \ub418\ubbc0\ub85c, \ubd88\ud3b8\ud55c\uc810\uc774 \ub9ce\uc558\ub294\ub370 \uc790\ub3d9\uc73c\ub85c \ud560\uc218 \uc788\uc5b4 \ud55c\uacb0 \ub9c8\uc74c\uc774 \ud3b8\ud574\uc84c\ub2e4.<\/p>\n","protected":false},"excerpt":{"rendered":"

I. \ubaa9\ud45c Let’s Encrypt\uc5d0\uc11c \uc81c\uacf5\ud558\uace0 \uc788\ub294 \ubb34\ub8cc SSL \uc778\uc99d\uc11c\ub97c 3\uac1c\uc6d4\uc5d0 \ud55c\ubc88\uc529 \uc790\ub3d9\uc73c\ub85c \uac31\uc2e0\ud560\uc218 \uc788\ub294 \ubc29\ubc95\uc744 \uc5f0\uad6c\ud55c\ub2e4. II. \uc5f0\uad6c \ubc0f \uac1c\ubc1c\ub0b4\uc6a9 1. \ud06c\ub860\uc744 \uc774\uc6a9\ud55c \uc778\uc99d\uc11c \uc790\ub3d9\uac31\uc2e0 1) \uc778\uc99d\uc11c \ub9cc\ub8cc\uc77c \ud655\uc778\ubc29\ubc95 \u00a0certbot certificates Saving debug log to \/var\/log\/letsencrypt\/letsencrypt.log – – – – – – – – – – – – – – – – – – – […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[31,49],"tags":[304,306,305],"class_list":["post-2429","post","type-post","status-publish","format-standard","hentry","category-31","category-unix","tag--ssl-","tag-306","tag-305"],"_links":{"self":[{"href":"http:\/\/blog.moramcnt.com\/index.php?rest_route=\/wp\/v2\/posts\/2429","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/blog.moramcnt.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/blog.moramcnt.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/blog.moramcnt.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/blog.moramcnt.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2429"}],"version-history":[{"count":1,"href":"http:\/\/blog.moramcnt.com\/index.php?rest_route=\/wp\/v2\/posts\/2429\/revisions"}],"predecessor-version":[{"id":2430,"href":"http:\/\/blog.moramcnt.com\/index.php?rest_route=\/wp\/v2\/posts\/2429\/revisions\/2430"}],"wp:attachment":[{"href":"http:\/\/blog.moramcnt.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2429"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/blog.moramcnt.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2429"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/blog.moramcnt.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2429"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}