서버 인증서 자동갱신하기(https)(ssl)

인증서 확인

root@cp:~# certbot certificates
Saving debug log to /var/log/letsencrypt/letsencrypt.log

---

Found the following certs:
Certificate Name: cp.mizrino.com
Serial Number:
Key Type: RSA
Domains: cp.mizrino.com
Expiry Date: 2024-04-03 20:08:14+00:00 (VALID: 89 days)
Certificate Path: /etc/letsencrypt/live/cp.mizrino.com/fullchain.pem
Private Key Path: /etc/letsencrypt/live/cp.mizrino.com/privkey.pem
Certificate Name: mizrino.com
Serial Number:
Key Type: RSA
Domains: mizrino.com
Expiry Date: 2024-04-03 20:06:44+00:00 (VALID: 89 days)
Certificate Path: /etc/letsencrypt/live/mizrino.com/fullchain.pem
Private Key Path: /etc/letsencrypt/live/mizrino.com/privkey.pem

---

인증서 삭제
root@cp:~# certbot delete –cert-name {cp.mizrino.com}

인증서 갱신
root@cp:~# certbot renew

인증서 갱신 테스트
root@cp:~# certbot renew –dry-run

자동 갱신

• 자동 갱신을 위해 crontab 명령어 사용
• 조회 crontab -l
• 편집 crontab -e
• 크론식 실행한 로그 확인 view /var/log/syslog

편집 명령어을 이용하여 자동 갱신 하도록 설정하기
0 18 1 * * /usr/bin/certbot renew –renew-hook=”sudo systemctl restart apache2″