nginx

certbot 更新 letsencrypt SSL 失敗

蝸牛

certbot renew 出現下面的錯誤
Cert is due for renewal, auto-renewing…
Could not choose appropriate plugin: The manual plugin is not working; there may be problems with your existing configuration.
The error was: PluginError(‘An authentication script must be provided with –manual-auth-hook when using the manual plugin non-interactively.’)
Attempting to renew cert (def.com-0001) from /etc/letsencrypt/renewal/def.com-0001.conf produced an unexpected error: The manual plugin is not working; there may be problems with your existing configuration.
The error was: PluginError(‘An authentication script must be provided with –manual-auth-hook when using the manual plugin non-interactively.’). Skipping.
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/abc.com-0003/fullchain.pem (failure)
/etc/letsencrypt/live/def.com-0001/fullchain.pem (failure)

Read more →

使用 certbot 取得 免費 SSL Wildcard 憑證

蝸牛

假設我有一個網域，上面有很多個子域名，在現在沒有SSL無法受到google關愛的眼神。
certbot就是一個很好用的工具
搭配Let’s Encrypt 免費的SSL
其實，可以買足90%以上的需求
Certbot自動模式可以一次滿足所有的子域名需求
100個域名之內，可以使用一張憑證處理
但是所有的簽署域名都是在憑證上出現
這個看起來好像不是這麼的「專業」

系統需求
1.DNS Service
我用的是CloudFlare
2.Linux Server
3.Apache / NGINX 服務 Read more →

不用 .htaccess apache nginx rewrite 5分鐘完成301/302轉址

蝸牛

www.aaa.com 因為公司策略調整，要把現在的服務改成www.bbb.com
傳統做法是使用 .htaccess 或是在 apache / nginx 做 301 / 302 轉址
.htaccess的寫法如下
RewriteEngine on
RewriteCond %{HTTP_HOST} ^www.aaa.com.tw$[OR]
RewriteCond %{HTTP_HOST} ^aaa.com.tw$
RewriteRule ^(.*)$ http://www.bbb.com/$1 [R=301,L]

Read more →