質問編集履歴
3
タグの変更・追加
test
CHANGED
File without changes
|
test
CHANGED
File without changes
|
2
接続情報の追加
test
CHANGED
File without changes
|
test
CHANGED
@@ -104,6 +104,14 @@
|
|
104
104
|
|
105
105
|
|
106
106
|
|
107
|
+
**※2020/03/02追記**
|
108
|
+
|
109
|
+
httpでは接続を確認できました。
|
110
|
+
|
111
|
+
![イメージ説明](74e596071a548d3c1c829ec939475b13.png)
|
112
|
+
|
113
|
+
|
114
|
+
|
107
115
|
証明書の期限切れ前のようにhttps通信で接続できるようにしたいです。
|
108
116
|
|
109
117
|
|
1
情報の追加(他ブラウザでの接続状況、各種設定情報の追加)
test
CHANGED
File without changes
|
test
CHANGED
@@ -14,13 +14,83 @@
|
|
14
14
|
|
15
15
|
```/etc/gitlab/gitlab.rb
|
16
16
|
|
17
|
-
external_url 'https://myDomain.jp'
|
17
|
+
誤:external_url 'https://myDomain.jp'
|
18
|
+
|
19
|
+
正:external_url = 'https://myDomain.jp' //正確には「=」を記述していました。
|
18
20
|
|
19
21
|
nginx['redirect_http_to_https'] = true
|
20
22
|
|
21
23
|
nginx['ssl_certificate'] = "/etc/letsencrypt/live/myDomain.jp-0001/fullchain.pem"
|
22
24
|
|
23
25
|
nginx['ssl_certificate_key'] = "/etc/letsencrypt/live/myDomain.jp-0001/privkey.pem"
|
26
|
+
|
27
|
+
```
|
28
|
+
|
29
|
+
|
30
|
+
|
31
|
+
**※2020/03/02追記**
|
32
|
+
|
33
|
+
/etc/letsencrypt/live内の構造
|
34
|
+
|
35
|
+
![イメージ説明](4d65957161e0636b5da38b38dc6d071b.png)
|
36
|
+
|
37
|
+
|
38
|
+
|
39
|
+
「ll /etc/letsencrypt/live/myDomain.jp-0001」の結果
|
40
|
+
|
41
|
+
```ここに言語を入力
|
42
|
+
|
43
|
+
-rw-r--r-- 1 root root 692 Mar 1 18:34 README
|
44
|
+
|
45
|
+
lrwxrwxrwx 1 root root 45 Mar 1 18:34 cert.pem -> ../../archive/myDomain.jp-0001/cert1.pem
|
46
|
+
|
47
|
+
lrwxrwxrwx 1 root root 46 Mar 1 18:34 chain.pem -> ../../archive/myDomain-0001/chain1.pem
|
48
|
+
|
49
|
+
lrwxrwxrwx 1 root root 50 Mar 1 18:34 fullchain.pem -> ../../archive/myDomain-0001/fullchain1.pem
|
50
|
+
|
51
|
+
lrwxrwxrwx 1 root root 48 Mar 1 18:34 privkey.pem -> ../../archive/myDomain-0001/privkey1.pem
|
52
|
+
|
53
|
+
-r-------- 1 root root 1675 Mar 2 09:23 privkey.pem-staging
|
54
|
+
|
55
|
+
```
|
56
|
+
|
57
|
+
|
58
|
+
|
59
|
+
「/etc/letsencrypt/renewal/myDomain.jp.conf」の中身
|
60
|
+
|
61
|
+
```ここに言語を入力
|
62
|
+
|
63
|
+
# renew_before_expiry = 30 days
|
64
|
+
|
65
|
+
version = 0.40.1
|
66
|
+
|
67
|
+
archive_dir = /etc/letsencrypt/archive/myDomain-0001
|
68
|
+
|
69
|
+
cert = /etc/letsencrypt/live/myDomain-0001/cert.pemprivkey
|
70
|
+
|
71
|
+
privkey = /etc/letsencrypt/live/myDomain-0001/privkey.pem
|
72
|
+
|
73
|
+
chain = /etc/letsencrypt/live/myDomain-0001/chain.pem
|
74
|
+
|
75
|
+
fullchain = /etc/letsencrypt/live/myDomain-0001/fullchain.pem
|
76
|
+
|
77
|
+
|
78
|
+
|
79
|
+
|
80
|
+
|
81
|
+
# Options used in the renewal process
|
82
|
+
|
83
|
+
[renewalparams]
|
84
|
+
|
85
|
+
authenticator = webroot
|
86
|
+
|
87
|
+
account = 0a5273e129c95845d308d6423bc55f7a
|
88
|
+
|
89
|
+
webroot_path = /var/opt/gitlab/nginx/www,
|
90
|
+
|
91
|
+
server = https://acme-v02.api.letsencrypt.org/directory[[webroot_map]]
|
92
|
+
|
93
|
+
muDomain.jp = /var/opt/gitlab/nginx/www
|
24
94
|
|
25
95
|
```
|
26
96
|
|
@@ -39,3 +109,13 @@
|
|
39
109
|
|
40
110
|
|
41
111
|
ご協力お願いいたします。
|
112
|
+
|
113
|
+
|
114
|
+
|
115
|
+
**※2020/03/02追記**
|
116
|
+
|
117
|
+
safariで接続確認を行なったところ、httpではブラウザで表示され、httpsではサーバーに接続できませんでした。
|
118
|
+
|
119
|
+
![イメージ説明](b9750a7c0cf82d3c8060f2bbdc342739.png)
|
120
|
+
|
121
|
+
![イメージ説明](3ab4272f8935d4ee07ef49d07d7e2ede.png)
|