{"id":606,"date":"2018-09-30T23:22:19","date_gmt":"2018-09-30T15:22:19","guid":{"rendered":"https:\/\/www.chenweikang.top\/?p=606"},"modified":"2018-09-30T23:22:19","modified_gmt":"2018-09-30T15:22:19","slug":"%e8%a7%a3%e5%86%b3letsencrypt%e8%af%81%e4%b9%a6%e5%88%b0%e6%9c%9f%ef%bc%8c%e6%97%a0%e6%b3%95%e7%bb%ad%e6%9c%9f%e7%9a%84%e9%97%ae%e9%a2%98","status":"publish","type":"post","link":"https:\/\/www.chenweikang.top\/?p=606","title":{"rendered":"\u89e3\u51b3letsencrypt\u8bc1\u4e66\u5230\u671f\uff0c\u65e0\u6cd5\u7eed\u671f\u7684\u95ee\u9898"},"content":{"rendered":"

\u7531\u4e8eletsencrypt\u8bc1\u4e66\u5230\u671f\uff0c\u5bfc\u81f4\u535a\u5ba2\u65e0\u6cd5\u8bbf\u95ee\uff0c\u597d\u4e00\u901a\u6298\u817e\uff0c\u7ec8\u4e8e\u8df3\u51fa\u5751\uff01<\/p>\n

\u4e0b\u8f7d\u6700\u65b0\u7684Letsencrypt:<\/h2>\n

git clone\u00a0https:\/\/github.com\/certbot\/certbot.git<\/p><\/blockquote>\n

\u5f00\u59cb\u5b89\u88c5\u8bc1\u4e66<\/h3>\n

.\/letsencrypt-auto<\/p><\/blockquote>\n

\u65e0\u5948python\u51b2\u7a81\u62a5\u9519\uff1a<\/h3>\n

[root@iz2zeeuc8ed3wflgmb7rakz letsencrypt]# .\/letsencrypt-auto
\nBootstrapping dependencies for RedHat-based OSes... (you can skip this with --no-bootstrap)
\nyum is \/usr\/bin\/yum
\nyum is hashed (\/usr\/bin\/yum)
\nLoaded plugins: fastestmirror
\nRepository base is listed more than once in the configuration
\nRepository updates is listed more than once in the configuration
\nRepository extras is listed more than once in the configuration
\nRepository epel is listed more than once in the configuration
\nLoading mirror speeds from cached hostfile
\n* webtatic: uk.repo.webtatic.com
\nPackage gcc-4.8.5-28.el7_5.1.x86_64 already installed and latest version
\nPackage augeas-libs-1.4.0-5.el7_5.1.x86_64 already installed and latest version
\nPackage 1:openssl-1.0.2k-12.el7.x86_64 already installed and latest version
\nPackage 1:openssl-devel-1.0.2k-12.el7.x86_64 already installed and latest version
\nPackage libffi-devel-3.0.13-18.el7.x86_64 already installed and latest version
\nPackage redhat-rpm-config-9.1.0-80.el7.centos.noarch already installed and latest version
\nPackage ca-certificates-2018.2.22-70.0.el7_5.noarch already installed and latest version
\nPackage python-devel-2.7.5-69.el7_5.x86_64 already installed and latest version
\nPackage python-virtualenv-15.1.0-2.el7.noarch already installed and latest version
\nPackage python-tools-2.7.5-69.el7_5.x86_64 already installed and latest version
\nPackage python2-pip-8.1.2-6.el7.noarch already installed and latest version
\nPackage 1:mod_ssl-2.4.6-80.el7.centos.1.x86_64 already installed and latest version
\nNothing to do
\nCreating virtual environment...
\n.\/letsencrypt-auto: line 975: virtualenv: command not found<\/p><\/blockquote>\n

\u770b\u4e86\u4e0b\u7cfb\u7edf\u91cc\u6ca1\u627e\u5230<\/p>\n

[root@iz2zeeuc8ed3wflgmb7rakz letsencrypt]# virt
\nvirtualenv-2 virtualenv-2.7 virtualenv-3 virtualenv-3.4 virt-what virt-what-cpuid-helper<\/p><\/blockquote>\n

\u4e8e\u662f\u7f16\u8f91\u00a0.\/letsencrypt-auto: line 975 \u628a\u00a0virtualenv \u6539\u4e3a\u00a0virtualenv-3\uff0c\u91cd\u65b0\u6267\u884c<\/span><\/p>\n

\u4e2d\u9014\u6309\u63d0\u793a\u9009\u62e9\u9700\u8981\u52a0\u8bc1\u4e66\u7684\u914d\u7f6e<\/h3>\n

How would you like to authenticate and install certificates?\uff08\u8fd9\u91cc\u6211\u7528nginx\u9009\u62e92\uff09
\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
\n1: Apache Web Server plugin - Beta (apache)
\n2: Nginx Web Server plugin (nginx) [Misconfigured]<\/p><\/blockquote>\n

 <\/p>\n

\u586b\u5199\u90ae\u4ef6\u4fe1\u606f\uff0c\u7528\u4e8e\u63a5\u6536\u4fe1\u606f<\/h3>\n

Enter email address (used for urgent renewal and security notices) (Enter 'c' to
\ncancel): chenwk.top@foxmail.com<\/p>\n

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -<\/p><\/blockquote>\n

\u540c\u610f\u534f\u8bae<\/h3>\n

Please read the Terms of Service at
\nhttps:\/\/letsencrypt.org\/documents\/LE-SA-v1.2-November-15-2017.pdf. You must
\nagree in order to register with the ACME server at
\nhttps:\/\/acme-v02.api.letsencrypt.org\/directory
\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
\n(A)gree\/(C)ancel: A<\/p>\n

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
\nWould you be willing to share your email address with the Electronic Frontier
\nFoundation, a founding partner of the Let's Encrypt project and the non-profit
\norganization that develops Certbot? We'd like to send you email about our work
\nencrypting the web, EFF news, campaigns, and ways to support digital freedom.
\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
\n(Y)es\/(N)o: Y<\/p><\/blockquote>\n

\u9009\u62e9\u4f60\u8981\u52a0\u8bc1\u4e66\u7684\u57df\u540d\uff08\u8fd9\u91cc\u9009\u4e86\u4e4b\u540e\u4f1a\u81ea\u52a8\u5e2e\u4f60\u914d\u7f6enginx\uff09<\/h3>\n

Which names would you like to activate HTTPS for?
\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
\n1: aria.92kk.top
\n2: callname.92kk.top
\n3: dubbo.92kk.top
\n4: exam.92kk.top
\n5: lingdong.92kk.top
\n6: lovewall.92kk.top
\n7: mopi.92kk.top
\n8: opi.92kk.top
\n9: scms.92kk.top
\n10: ssm.92kk.top
\n11: web.92kk.top
\n12: chenweikang.top
\n13: cv.chenweikang.top
\n14: www.chenweikang.top
\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
\nSelect the appropriate numbers separated by commas and\/or spaces, or leave input
\nblank to select all options shown (Enter 'c' to cancel): 14
\nObtaining a new certificate
\nPerforming the following challenges:
\nhttp-01 challenge for www.chenweikang.top<\/p><\/blockquote>\n

\u6574\u4e2a\u8fc7\u7a0b\u53ef\u80fd\u4f1a\u62a5\u9519\uff1a<\/span><\/h2>\n

self.configurator.save(\"HTTP Challenge\", True)
\nFile \"\/opt\/eff.org\/certbot\/venv\/lib\/python2.7\/site-packages\/certbot_nginx\/configurator.py\", line 976, in save
\nself.parser.filedump(ext='')
\nFile \"\/opt\/eff.org\/certbot\/venv\/lib\/python2.7\/site-packages\/certbot_nginx\/parser.py\", line 243, in filedump
\nout = nginxparser.dumps(tree)
\nFile \"\/opt\/eff.org\/certbot\/venv\/lib\/python2.7\/site-packages\/certbot_nginx\/nginxparser.py\", line 134, in dumps
\nreturn str(RawNginxDumper(blocks.spaced))
\nFile \"\/opt\/eff.org\/certbot\/venv\/lib\/python2.7\/site-packages\/certbot_nginx\/nginxparser.py\", line 98, in __str__
\nreturn ''.join(self)
\nUnicodeDecodeError: 'ascii' codec can't decode byte 0xe5 in position 1: ordinal not in range(128)<\/p><\/blockquote>\n

\u7f16\u8f91\u00a0\/opt\/eff.org\/certbot\/venv\/lib\/python2.7\/site-packages\/certbot_nginx\/nginxparser.py \u5728\u6587\u4ef6\u5f00\u59cb\u52a0\u5165<\/span><\/h3>\n

import sys<\/p>\n

reload(sys)<\/p>\n

sys.setdefaultencoding('utf8)<\/p><\/blockquote>\n

\u91cd\u65b0\u6267\u884c\u5373\u53ef\uff01<\/p>\n

\u5c0f\u7eff\u9501\u7ec8\u4e8e\u56de\u6765\u5566<\/h2>\n

 <\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

\u8f6c\u8f7d\u8bf7\u6ce8\u660e\uff1a\u5de6\u624b\u4ee3\u7801\u53f3\u624b\u8bd7<\/a> » \u89e3\u51b3letsencrypt\u8bc1\u4e66\u5230\u671f\uff0c\u65e0\u6cd5\u7eed\u671f\u7684\u95ee\u9898<\/a><\/p>

\r\n
\r\n
~\u8c22\u8c22\u6253\u8d4f~<\/div>\r\n
<\/div>
<\/div>
<\/div><\/div>\r\n