{"id":1345,"date":"2017-11-30T22:56:44","date_gmt":"2017-11-30T14:56:44","guid":{"rendered":"http:\/\/pjq.me\/?p=1345"},"modified":"2019-12-02T14:21:46","modified_gmt":"2019-12-02T06:21:46","slug":"time-enable-https-letsencrypt","status":"publish","type":"post","link":"https:\/\/pjq.me\/?p=1345","title":{"rendered":"Time to enable https–letsencrypt"},"content":{"rendered":"

It’s almost at the end of Year 2017, now it’s time to enable https for my website, after some search, I choose to use letsencrypt, it’s free and community support widely. So it’s easy for me to find the tutorials<\/a>.<\/p>\n

<\/p>\n

So now you can visit my wiki, and it will be force redirect to the https link<\/a><\/p>\n

How to install<\/strong><\/p>\n

Solution #1<\/strong><\/p>\n

sudo apt-get install letsencrypt\nsudo service nginx stop\nsudo letsencrypt certonly --standalone\nsudo service nginx restart\n<\/pre>\n
Solution #2<\/strong><\/p>\n
sudo apt-get update\nsudo apt-get install software-properties-common\nsudo add-apt-repository ppa:certbot\/certbot\nsudo apt-get update\nsudo apt-get install python-certbot-nginx\n<\/pre>\n
Refer<\/strong>
https:\/\/bitmingw.com\/2017\/02\/02\/letsencrypt-tutorial\/
https:\/\/github.com\/certbot\/certbot
https:\/\/certbot.eff.org\/#ubuntuxenial-nginx<\/p>\n
nginx config<\/strong><\/p>\n
server {\nlisten 80;\nserver_name ef.pjq.me;\nreturn 301 https:\/\/$server_name$request_uri;\n}\n\nserver {\nlisten 80;\nserver_name wiki.pjq.me;\nreturn 301 https:\/\/$server_name$request_uri;\n}\nserver {\nlisten 443;\nserver_name ef.pjq.me;\nssl on;\nssl_certificate \/etc\/letsencrypt\/live\/ef.pjq.me\/fullchain.pem;\nssl_certificate_key \/etc\/letsencrypt\/live\/ef.pjq.me\/privkey.pem;\nssl_session_timeout 5m;\nroot \/var\/www\/ef\/;\nindex index.html index.htm index.php;\nlocation \/ {\ntry_files $uri $uri\/ =404;\nautoindex on;\n}\nlocation ~ \\.php$ {\ntry_files $uri =404;\nfastcgi_pass unix:\/run\/php\/php7.0-fpm.sock;\nfastcgi_index index.php;\nfastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;\ninclude fastcgi_params;\n\n}\nlocation ~ \\.php$ {\nfastcgi_split_path_info ^(.+\\.php)(\/.+)$;\nfastcgi_pass unix:\/var\/run\/php5-fpm.sock;\nfastcgi_index index.php;\ninclude fastcgi_params;\n}\n}\nserver {\nlisten 443;\nroot \/var\/www\/dokuwiki\/wiki\/;\nindex index.html index.htm index.php;\nserver_name wiki.pjq.me;\nssl on;\nssl_certificate \/etc\/letsencrypt\/live\/ef.pjq.me\/fullchain.pem;\nssl_certificate_key \/etc\/letsencrypt\/live\/ef.pjq.me\/privkey.pem;\nssl_session_timeout 5m;\nlocation \/ {\ntry_files $uri $uri\/ =404;\n}\nlocation ~ \/(data|conf|bin|inc)\/ {\ndeny all;\n}\nlocation ~ \\.php$ {\nfastcgi_pass unix:\/run\/php\/php7.0-fpm.sock;\nfastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;\nfastcgi_index index.php;\ninclude fastcgi_params;\n}\nlocation ~ \/\\.ht {\ndeny all;\n}\n}

<\/pre>\n\n\n
Wildcard support <\/strong>\nLetsencypt already support wildcard, reference https:\/\/www.jianshu.com\/p\/c5c9d071e395<\/a><\/pre>\n\n\n\n
sudo certbot certonly -d *.pjq.me -d pjq.me --manual  --server https:\/\/www.jianshu.com\/p\/c5c9d071e395https:\/\/acme-v02.api.letsencrypt.org\/directory<\/code><\/pre>\n\n\n\n
pjq@pjqmes1vcpu1gbsfo2-s-1vcpu-1gb-sfo2-01:~$ sudo certbot certonly -d *.pjq.me --manual  --server https:\/\/acme-v02.api.letsencrypt.org\/directory\nSaving debug log to \/var\/log\/letsencrypt\/letsencrypt.log\nPlugins selected: Authenticator manual, Installer None\nObtaining a new certificate\nPerforming the following challenges:\ndns-01 challenge for pjq.me\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nNOTE: The IP of this machine will be publicly logged as having requested this\ncertificate. If you're running certbot in manual mode on a machine that is not\nyour server, please ensure you're okay with that.\n\nAre you OK with your IP being logged?\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n(Y)es\/(N)o: Y\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nPlease deploy a DNS TXT record under the name\n_acme-challenge.pjq.me with the following value:\n\nQuTEKz6IaSk6xc_AAiTp47cNXXTps9wJZp1jViV9jTY\n\nBefore continuing, verify the record is deployed.\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nPress Enter to Continue\nWaiting for verification...\nCleaning up challenges\n\nIMPORTANT NOTES:\n - Congratulations! Your certificate and chain have been saved at:\n   \/etc\/letsencrypt\/live\/pjq.me\/fullchain.pem\n   Your key file has been saved at:\n   \/etc\/letsencrypt\/live\/pjq.me\/privkey.pem\n   Your cert will expire on 2020-03-01. To obtain a new or tweaked\n   version of this certificate in the future, simply run certbot\n   again. To non-interactively renew *all* of your certificates, run\n   \"certbot renew\"\n - If you like Certbot, please consider supporting our work by:\n\n   Donating to ISRG \/ Let's Encrypt:   https:\/\/letsencrypt.org\/donate\n   Donating to EFF:                    https:\/\/eff.org\/donate-le<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
It’s almost at the end of Year 2017, now it’s time to enable https for my website, after some search, I choose to use letsencrypt, it’s free and community support widely. So it’s easy for me to find the tutorials.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[80,108],"class_list":["post-1345","post","type-post","status-publish","format-standard","hentry","category-linux","tag-https","tag-ssl"],"yoast_head":"\nTime to enable https-letsencrypt - Jianqing's Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/pjq.me\/?p=1345\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Time to enable https-letsencrypt - Jianqing's Blog\" \/>\n<meta property=\"og:description\" content=\"It’s almost at the end of Year 2017, now it’s time to enable https for my website, after some search, I choose to use letsencrypt, it’s free and community support widely. So it’s easy for me to find the tutorials.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/pjq.me\/?p=1345\" \/>\n<meta property=\"og:site_name\" content=\"Jianqing's Blog\" \/>\n<meta property=\"article:published_time\" content=\"2017-11-30T14:56:44+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-12-02T06:21:46+00:00\" \/>\n<meta name=\"author\" content=\"pengjianqing\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"pengjianqing\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/pjq.me\/?p=1345#article\",\"isPartOf\":{\"@id\":\"https:\/\/pjq.me\/?p=1345\"},\"author\":{\"name\":\"pengjianqing\",\"@id\":\"https:\/\/pjq.me\/#\/schema\/person\/0eb1e72d1e69fbbd9b5c0bfd8e2aae60\"},\"headline\":\"Time to enable https–letsencrypt\",\"datePublished\":\"2017-11-30T14:56:44+00:00\",\"dateModified\":\"2019-12-02T06:21:46+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/pjq.me\/?p=1345\"},\"wordCount\":85,\"commentCount\":2,\"publisher\":{\"@id\":\"https:\/\/pjq.me\/#\/schema\/person\/0eb1e72d1e69fbbd9b5c0bfd8e2aae60\"},\"keywords\":[\"https\",\"ssl\"],\"articleSection\":[\"Linux\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/pjq.me\/?p=1345#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/pjq.me\/?p=1345\",\"url\":\"https:\/\/pjq.me\/?p=1345\",\"name\":\"Time to enable https-letsencrypt - Jianqing's Blog\",\"isPartOf\":{\"@id\":\"https:\/\/pjq.me\/#website\"},\"datePublished\":\"2017-11-30T14:56:44+00:00\",\"dateModified\":\"2019-12-02T06:21:46+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/pjq.me\/?p=1345#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/pjq.me\/?p=1345\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/pjq.me\/?p=1345#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/pjq.me\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Time to enable https–letsencrypt\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/pjq.me\/#website\",\"url\":\"https:\/\/pjq.me\/\",\"name\":\"Jianqing's Blog\",\"description\":\"Thoughts and Future\",\"publisher\":{\"@id\":\"https:\/\/pjq.me\/#\/schema\/person\/0eb1e72d1e69fbbd9b5c0bfd8e2aae60\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/pjq.me\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/pjq.me\/#\/schema\/person\/0eb1e72d1e69fbbd9b5c0bfd8e2aae60\",\"name\":\"pengjianqing\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/pjq.me\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/pjq.me\/wp-content\/uploads\/2021\/12\/Screen-Shot-2021-12-02-at-6.10.58-PM.png\",\"contentUrl\":\"https:\/\/pjq.me\/wp-content\/uploads\/2021\/12\/Screen-Shot-2021-12-02-at-6.10.58-PM.png\",\"width\":460,\"height\":752,\"caption\":\"pengjianqing\"},\"logo\":{\"@id\":\"https:\/\/pjq.me\/#\/schema\/person\/image\/\"},\"url\":\"https:\/\/pjq.me\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Time to enable https-letsencrypt - Jianqing's Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/pjq.me\/?p=1345","og_locale":"en_US","og_type":"article","og_title":"Time to enable https-letsencrypt - Jianqing's Blog","og_description":"It’s almost at the end of Year 2017, now it’s time to enable https for my website, after some search, I choose to use letsencrypt, it’s free and community support widely. So it’s easy for me to find the tutorials.","og_url":"https:\/\/pjq.me\/?p=1345","og_site_name":"Jianqing's Blog","article_published_time":"2017-11-30T14:56:44+00:00","article_modified_time":"2019-12-02T06:21:46+00:00","author":"pengjianqing","twitter_card":"summary_large_image","twitter_misc":{"Written by":"pengjianqing","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/pjq.me\/?p=1345#article","isPartOf":{"@id":"https:\/\/pjq.me\/?p=1345"},"author":{"name":"pengjianqing","@id":"https:\/\/pjq.me\/#\/schema\/person\/0eb1e72d1e69fbbd9b5c0bfd8e2aae60"},"headline":"Time to enable https–letsencrypt","datePublished":"2017-11-30T14:56:44+00:00","dateModified":"2019-12-02T06:21:46+00:00","mainEntityOfPage":{"@id":"https:\/\/pjq.me\/?p=1345"},"wordCount":85,"commentCount":2,"publisher":{"@id":"https:\/\/pjq.me\/#\/schema\/person\/0eb1e72d1e69fbbd9b5c0bfd8e2aae60"},"keywords":["https","ssl"],"articleSection":["Linux"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/pjq.me\/?p=1345#respond"]}]},{"@type":"WebPage","@id":"https:\/\/pjq.me\/?p=1345","url":"https:\/\/pjq.me\/?p=1345","name":"Time to enable https-letsencrypt - Jianqing's Blog","isPartOf":{"@id":"https:\/\/pjq.me\/#website"},"datePublished":"2017-11-30T14:56:44+00:00","dateModified":"2019-12-02T06:21:46+00:00","breadcrumb":{"@id":"https:\/\/pjq.me\/?p=1345#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/pjq.me\/?p=1345"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/pjq.me\/?p=1345#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/pjq.me\/"},{"@type":"ListItem","position":2,"name":"Time to enable https–letsencrypt"}]},{"@type":"WebSite","@id":"https:\/\/pjq.me\/#website","url":"https:\/\/pjq.me\/","name":"Jianqing's Blog","description":"Thoughts and Future","publisher":{"@id":"https:\/\/pjq.me\/#\/schema\/person\/0eb1e72d1e69fbbd9b5c0bfd8e2aae60"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/pjq.me\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/pjq.me\/#\/schema\/person\/0eb1e72d1e69fbbd9b5c0bfd8e2aae60","name":"pengjianqing","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/pjq.me\/#\/schema\/person\/image\/","url":"https:\/\/pjq.me\/wp-content\/uploads\/2021\/12\/Screen-Shot-2021-12-02-at-6.10.58-PM.png","contentUrl":"https:\/\/pjq.me\/wp-content\/uploads\/2021\/12\/Screen-Shot-2021-12-02-at-6.10.58-PM.png","width":460,"height":752,"caption":"pengjianqing"},"logo":{"@id":"https:\/\/pjq.me\/#\/schema\/person\/image\/"},"url":"https:\/\/pjq.me\/?author=1"}]}},"views":4201,"_links":{"self":[{"href":"https:\/\/pjq.me\/index.php?rest_route=\/wp\/v2\/posts\/1345","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pjq.me\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pjq.me\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pjq.me\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pjq.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1345"}],"version-history":[{"count":3,"href":"https:\/\/pjq.me\/index.php?rest_route=\/wp\/v2\/posts\/1345\/revisions"}],"predecessor-version":[{"id":1521,"href":"https:\/\/pjq.me\/index.php?rest_route=\/wp\/v2\/posts\/1345\/revisions\/1521"}],"wp:attachment":[{"href":"https:\/\/pjq.me\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1345"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pjq.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1345"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pjq.me\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1345"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}