Monday, 13 December 2021

Install Let’s Encrypt SSL di Debian Server Wordpres

 root@debianweb:~# apt install certbot python3-certbot-nginx
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following additional packages will be installed:
  python-pyicu python3-acme python3-asn1crypto python3-certbot python3-cffi-backend python3-configargparse python3-configobj python3-cryptography
  python3-distutils python3-future python3-josepy python3-lib2to3 python3-mock python3-openssl python3-parsedatetime python3-pbr python3-pyparsing
  python3-requests-toolbelt python3-rfc3339 python3-setuptools python3-tz python3-zope.component python3-zope.event python3-zope.hookable
  python3-zope.interface
Suggested packages:
  python3-certbot-apache python-certbot-doc python-acme-doc python-certbot-nginx-doc python-configobj-doc python-cryptography-doc
  python3-cryptography-vectors python-future-doc python-mock-doc python-openssl-doc python3-openssl-dbg python-pyparsing-doc python-setuptools-doc
The following NEW packages will be installed:
  certbot python-pyicu python3-acme python3-asn1crypto python3-certbot python3-certbot-nginx python3-cffi-backend python3-configargparse
  python3-configobj python3-cryptography python3-distutils python3-future python3-josepy python3-lib2to3 python3-mock python3-openssl
  python3-parsedatetime python3-pbr python3-pyparsing python3-requests-toolbelt python3-rfc3339 python3-setuptools python3-tz python3-zope.component
  python3-zope.event python3-zope.hookable python3-zope.interface
0 upgraded, 27 newly installed, 0 to remove and 9 not upgraded.
Need to get 2454 kB of archives.
After this operation, 12.4 MB of additional disk space will be used.
Do you want to continue? [Y/n] y
Get:1 http://deb.debian.org/debian buster/main amd64 python3-asn1crypto all 0.24.0-1 [78.2 kB]
Get:2 http://deb.debian.org/debian buster/main amd64 python3-cffi-backend amd64 1.12.2-1 [79.7 kB]
Get:3 http://deb.debian.org/debian buster/main amd64 python3-cryptography amd64 2.6.1-3+deb10u2 [219 kB]
Get:4 http://deb.debian.org/debian buster/main amd64 python3-openssl all 19.0.0-1 [52.1 kB]
Get:5 http://deb.debian.org/debian buster/main amd64 python3-josepy all 1.1.0-2 [27.7 kB]
Get:6 http://deb.debian.org/debian buster/main amd64 python3-lib2to3 all 3.7.3-1 [76.7 kB]
Get:7 http://deb.debian.org/debian buster/main amd64 python3-distutils all 3.7.3-1 [142 kB]
Get:8 http://deb.debian.org/debian buster/main amd64 python3-setuptools all 40.8.0-1 [306 kB]
Get:9 http://deb.debian.org/debian buster/main amd64 python3-pbr all 4.2.0-5 [56.5 kB]
Get:10 http://deb.debian.org/debian buster/main amd64 python3-mock all 2.0.0-4 [60.3 kB]
Get:11 http://deb.debian.org/debian buster/main amd64 python3-requests-toolbelt all 0.8.0-1 [38.2 kB]
Get:12 http://deb.debian.org/debian buster/main amd64 python3-tz all 2019.1-1 [27.1 kB]
Get:13 http://deb.debian.org/debian buster/main amd64 python3-rfc3339 all 1.1-1 [6644 B]
Get:14 http://deb.debian.org/debian buster/main amd64 python3-acme all 0.31.0-2 [50.5 kB]
Get:15 http://deb.debian.org/debian buster/main amd64 python3-configargparse all 0.13.0-1 [22.5 kB]
Get:16 http://deb.debian.org/debian buster/main amd64 python3-configobj all 5.0.6-3 [35.7 kB]
Get:17 http://deb.debian.org/debian buster/main amd64 python3-future all 0.16.0-1 [346 kB]
Get:18 http://deb.debian.org/debian buster/main amd64 python3-parsedatetime all 2.4-2 [39.7 kB]
Get:19 http://deb.debian.org/debian buster/main amd64 python3-zope.hookable amd64 4.0.4-4+b4 [10.6 kB]
Get:20 http://deb.debian.org/debian buster/main amd64 python3-zope.interface amd64 4.3.2-1+b2 [90.1 kB]
Get:21 http://deb.debian.org/debian buster/main amd64 python3-zope.event all 4.2.0-1 [8412 B]
Get:22 http://deb.debian.org/debian buster/main amd64 python3-zope.component all 4.3.0-1 [43.0 kB]
Get:23 http://deb.debian.org/debian buster/main amd64 python3-certbot all 0.31.0-1+deb10u1 [226 kB]
Get:24 http://deb.debian.org/debian buster/main amd64 certbot all 0.31.0-1+deb10u1 [38.8 kB]
Get:25 http://deb.debian.org/debian buster/main amd64 python-pyicu amd64 2.2-2 [234 kB]
Get:26 http://deb.debian.org/debian buster/main amd64 python3-pyparsing all 2.2.0+dfsg1-2 [89.6 kB]
Get:27 http://deb.debian.org/debian buster/main amd64 python3-certbot-nginx all 0.31.0-1 [50.0 kB]
Fetched 2454 kB in 0s (4984 kB/s)                 
apt-listchanges: Can't set locale; make sure $LC_* and $LANG are correct!
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
    LANGUAGE = "en_US:en",
    LC_ALL = (unset),
    LC_TIME = "id_ID.UTF-8",
    LC_MONETARY = "id_ID.UTF-8",
    LC_ADDRESS = "id_ID.UTF-8",
    LC_TELEPHONE = "id_ID.UTF-8",
    LC_NAME = "id_ID.UTF-8",
    LC_MEASUREMENT = "id_ID.UTF-8",
    LC_IDENTIFICATION = "id_ID.UTF-8",
    LC_NUMERIC = "id_ID.UTF-8",
    LC_PAPER = "id_ID.UTF-8",
    LANG = "en_US.UTF-8"
    are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
locale: Cannot set LC_ALL to default locale: No such file or directory
Selecting previously unselected package python3-asn1crypto.
(Reading database ... 127778 files and directories currently installed.)
Preparing to unpack .../00-python3-asn1crypto_0.24.0-1_all.deb ...
Unpacking python3-asn1crypto (0.24.0-1) ...
Selecting previously unselected package python3-cffi-backend.
Preparing to unpack .../01-python3-cffi-backend_1.12.2-1_amd64.deb ...
Unpacking python3-cffi-backend (1.12.2-1) ...
Selecting previously unselected package python3-cryptography.
Preparing to unpack .../02-python3-cryptography_2.6.1-3+deb10u2_amd64.deb ...
Unpacking python3-cryptography (2.6.1-3+deb10u2) ...
Selecting previously unselected package python3-openssl.
Preparing to unpack .../03-python3-openssl_19.0.0-1_all.deb ...
Unpacking python3-openssl (19.0.0-1) ...
Selecting previously unselected package python3-josepy.
Preparing to unpack .../04-python3-josepy_1.1.0-2_all.deb ...
Unpacking python3-josepy (1.1.0-2) ...
Selecting previously unselected package python3-lib2to3.
Preparing to unpack .../05-python3-lib2to3_3.7.3-1_all.deb ...
Unpacking python3-lib2to3 (3.7.3-1) ...
Selecting previously unselected package python3-distutils.
Preparing to unpack .../06-python3-distutils_3.7.3-1_all.deb ...
Unpacking python3-distutils (3.7.3-1) ...
Selecting previously unselected package python3-setuptools.
Preparing to unpack .../07-python3-setuptools_40.8.0-1_all.deb ...
Unpacking python3-setuptools (40.8.0-1) ...
Selecting previously unselected package python3-pbr.
Preparing to unpack .../08-python3-pbr_4.2.0-5_all.deb ...
Unpacking python3-pbr (4.2.0-5) ...
Selecting previously unselected package python3-mock.
Preparing to unpack .../09-python3-mock_2.0.0-4_all.deb ...
Unpacking python3-mock (2.0.0-4) ...
Selecting previously unselected package python3-requests-toolbelt.
Preparing to unpack .../10-python3-requests-toolbelt_0.8.0-1_all.deb ...
Unpacking python3-requests-toolbelt (0.8.0-1) ...
Selecting previously unselected package python3-tz.
Preparing to unpack .../11-python3-tz_2019.1-1_all.deb ...
Unpacking python3-tz (2019.1-1) ...
Selecting previously unselected package python3-rfc3339.
Preparing to unpack .../12-python3-rfc3339_1.1-1_all.deb ...
Unpacking python3-rfc3339 (1.1-1) ...
Selecting previously unselected package python3-acme.
Preparing to unpack .../13-python3-acme_0.31.0-2_all.deb ...
Unpacking python3-acme (0.31.0-2) ...
Selecting previously unselected package python3-configargparse.
Preparing to unpack .../14-python3-configargparse_0.13.0-1_all.deb ...
Unpacking python3-configargparse (0.13.0-1) ...
Selecting previously unselected package python3-configobj.
Preparing to unpack .../15-python3-configobj_5.0.6-3_all.deb ...
Unpacking python3-configobj (5.0.6-3) ...
Selecting previously unselected package python3-future.
Preparing to unpack .../16-python3-future_0.16.0-1_all.deb ...
Unpacking python3-future (0.16.0-1) ...
Selecting previously unselected package python3-parsedatetime.
Preparing to unpack .../17-python3-parsedatetime_2.4-2_all.deb ...
Unpacking python3-parsedatetime (2.4-2) ...
Selecting previously unselected package python3-zope.hookable.
Preparing to unpack .../18-python3-zope.hookable_4.0.4-4+b4_amd64.deb ...
Unpacking python3-zope.hookable (4.0.4-4+b4) ...
Selecting previously unselected package python3-zope.interface.
Preparing to unpack .../19-python3-zope.interface_4.3.2-1+b2_amd64.deb ...
Unpacking python3-zope.interface (4.3.2-1+b2) ...
Selecting previously unselected package python3-zope.event.
Preparing to unpack .../20-python3-zope.event_4.2.0-1_all.deb ...
Unpacking python3-zope.event (4.2.0-1) ...
Selecting previously unselected package python3-zope.component.
Preparing to unpack .../21-python3-zope.component_4.3.0-1_all.deb ...
Unpacking python3-zope.component (4.3.0-1) ...
Selecting previously unselected package python3-certbot.
Preparing to unpack .../22-python3-certbot_0.31.0-1+deb10u1_all.deb ...
Unpacking python3-certbot (0.31.0-1+deb10u1) ...
Selecting previously unselected package certbot.
Preparing to unpack .../23-certbot_0.31.0-1+deb10u1_all.deb ...
Unpacking certbot (0.31.0-1+deb10u1) ...
Selecting previously unselected package python-pyicu.
Preparing to unpack .../24-python-pyicu_2.2-2_amd64.deb ...
Unpacking python-pyicu (2.2-2) ...
Selecting previously unselected package python3-pyparsing.
Preparing to unpack .../25-python3-pyparsing_2.2.0+dfsg1-2_all.deb ...
Unpacking python3-pyparsing (2.2.0+dfsg1-2) ...
Selecting previously unselected package python3-certbot-nginx.
Preparing to unpack .../26-python3-certbot-nginx_0.31.0-1_all.deb ...
Unpacking python3-certbot-nginx (0.31.0-1) ...
Setting up python3-configargparse (0.13.0-1) ...
Setting up python3-requests-toolbelt (0.8.0-1) ...
Setting up python3-zope.event (4.2.0-1) ...
Setting up python3-zope.interface (4.3.2-1+b2) ...
Setting up python-pyicu (2.2-2) ...
Setting up python3-tz (2019.1-1) ...
Setting up python3-zope.hookable (4.0.4-4+b4) ...
Setting up python3-configobj (5.0.6-3) ...
Setting up python3-pyparsing (2.2.0+dfsg1-2) ...
Setting up python3-rfc3339 (1.1-1) ...
Setting up python3-lib2to3 (3.7.3-1) ...
Setting up python3-asn1crypto (0.24.0-1) ...
Setting up python3-cffi-backend (1.12.2-1) ...
Setting up python3-distutils (3.7.3-1) ...
Setting up python3-setuptools (40.8.0-1) ...
Setting up python3-pbr (4.2.0-5) ...
update-alternatives: using /usr/bin/python3-pbr to provide /usr/bin/pbr (pbr) in auto mode
Setting up python3-zope.component (4.3.0-1) ...
Setting up python3-mock (2.0.0-4) ...
Setting up python3-cryptography (2.6.1-3+deb10u2) ...
Setting up python3-future (0.16.0-1) ...
update-alternatives: using /usr/bin/python3-futurize to provide /usr/bin/futurize (futurize) in auto mode
update-alternatives: using /usr/bin/python3-pasteurize to provide /usr/bin/pasteurize (pasteurize) in auto mode
Setting up python3-parsedatetime (2.4-2) ...
Setting up python3-openssl (19.0.0-1) ...
Setting up python3-josepy (1.1.0-2) ...
Setting up python3-acme (0.31.0-2) ...
Setting up python3-certbot (0.31.0-1+deb10u1) ...
Setting up certbot (0.31.0-1+deb10u1) ...
Created symlink /etc/systemd/system/timers.target.wants/certbot.timer → /lib/systemd/system/certbot.timer.
Setting up python3-certbot-nginx (0.31.0-1) ...
Processing triggers for man-db (2.8.5-2) ...


root@debianweb:~# certbot --nginx -d sman2kandangan.sch.id -d www.sman2kandangan.sch.id
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator nginx, Installer nginx
Enter email address (used for urgent renewal and security notices) (Enter 'c' to
cancel): noor.ridhwan@ymail.com

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Please read the Terms of Service at
https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must
agree in order to register with the ACME server at
https://acme-v02.api.letsencrypt.org/directory
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(A)gree/(C)ancel: a

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Would you be willing to share your email address with the Electronic Frontier
Foundation, a founding partner of the Let's Encrypt project and the non-profit
organization that develops Certbot? We'd like to send you email about our work
encrypting the web, EFF news, campaigns, and ways to support digital freedom.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: y
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for sman2kandangan.sch.id
http-01 challenge for www.sman2kandangan.sch.id
Using default addresses 80 and [::]:80 ipv6only=on for authentication.
Using default addresses 80 and [::]:80 ipv6only=on for authentication.
Waiting for verification...
Cleaning up challenges
Failed authorization procedure. www.sman2kandangan.sch.id (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://www.sman2kandangan.sch.id/.well-known/acme-challenge/o28tO8a-QcDZvCZcKjsW-d8E0RfvcqKHm2-1vvdbyYA [103.153.3.98]: "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>404 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p"

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: www.sman2kandangan.sch.id
   Type:   unauthorized
   Detail: Invalid response from
   http://www.sman2kandangan.sch.id/.well-known/acme-challenge/o28tO8a-QcDZvCZcKjsW-d8E0RfvcqKHm2-1vvdbyYA
   [103.153.3.98]: "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML
   2.0//EN\">\n<html><head>\n<title>404 Not
   Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p"

   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A/AAAA record(s) for that domain
   contain(s) the right IP address.
 - Your account credentials have been saved in your Certbot
   configuration directory at /etc/letsencrypt. You should make a
   secure backup of this folder now. This configuration directory will
   also contain certificates and private keys obtained by Certbot so
   making regular backups of this folder is ideal.


root@debianweb:~# certbot --nginx
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator nginx, Installer nginx

Which names would you like to activate HTTPS for?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: web.sman2kandangan.sch.id
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter 'c' to cancel): 1
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for web.sman2kandangan.sch.id
Waiting for verification...
Cleaning up challenges
Failed authorization procedure. web.sman2kandangan.sch.id (http-01): urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for web.sman2kandangan.sch.id - check that a DNS record exists for this domain

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: web.sman2kandangan.sch.id
   Type:   None
   Detail: DNS problem: NXDOMAIN looking up A for
   web.sman2kandangan.sch.id - check that a DNS record exists for this
   domain

Share:

0 comments:

Post a Comment