完全無料でワイルドカード証明書を手に入れよう / How to get wildcard certs without any charges

Transcript

1. ׬શແྉͰ
   ϫΠϧυΧʔυূ໌ॻΛ
   खʹೖΕΑ͏ 
   ඌ৲
   ݈

2. ϫΠϧυΧʔυূ໌ॻʁ 9W
   4VCKFDU
   "MUFSOBUJWF
   /BNF 4"/

3. ͳͥϫΠϧυΧʔυূ໌ॻ͕ ΄͍͠ͷ͔ wࠓ͞Βฏจ)551ͳ8FCαʔϏεΛ ৽نΦʔϓϯ͢ΔͳΜͯ͋Γ͑ͳ͍
   wຊ൪؀ڥ͚ͩͰͳ͘ɺ$*؀ڥ΍։ൃ ؀ڥ΋)5514Խ͍͕ͨ͠ɺ'2%/ຖ ʹূ໌ॻൃߦͳΜͯ΍ͬͯΒΕͳ͍

4. ʮ׬શແྉͰϫΠϧυΧʔυ ূ໌ॻʯͷλω໌͔͠ wແྉυϝΠϯ
   'SFFOPN
   wແྉ੩త8FCαΠτ
   (JU)VC
   1BHFT
   wແྉ%/4αʔό
   $MPVEqBSF
   %/4
   wແྉ5-4ূ໌ॻ
   -FU`T
   &ODSZQU

5. ແྉυϝΠϯ
   'SFFOPN freenom.com

6. ແྉυϝΠϯ
   'SFFOPN w.tk .ml .ga .cf .gq
   ͷ֤5-%Ͱɺ
 ηΧϯυϨϕϧ͕จࣈҎ্ͩͱແྉ
   w ʢྫʣgikai.ml
   ͸ແྉɻntt.cf
   ͸༗ྉ
   wυϝΠϯͷ༗ޮظؒ͸ʙϲ݄
   

   w Ԇ௕͸ظݶ੾Εͷिؒલ͔Βखଓ͖Մೳ
   w ແྉυϝΠϯ͸Ԇ௕ͯ͠΋ͻ͖͖ͭͮແྉ
   w%/4αʔό΋ఏڙ͍ͯ͠Δ͕
 %/4ϨίʔυΛૢ࡞͢Δ"1*͸ແ͍

7. ແྉ੩త8FCαΠτ
   (JU)VC
   1BHFT

8. ແྉ%/4αʔό
   $MPVEqBSF
   %/4 w%/4Ϩίʔυૢ࡞ʹ"1*΋࢖͑Δ ΋ͪΖΜ(6*΋Մ

9. ແྉ5-4ূ໌ॻ
   -FU`T
   &ODSZQU w*43(
   *OUFSOFU
   4FDVSJUZ
   3FTFBSDI
   (SPVQ
   ͕
 ແྉͰఏڙ͢Δ5-4αʔόূ໌ॻൃߦαʔϏε
   w"$.&
   "VUPNBUFE
   $FSUJpDBUF
   .BOBHFNFOU
   &OWJSPONFOU ϓϩτίϧΛ༻͍ͯূ໌ॻൃߦϓϩηεΛࣗಈԽ
   wυϝΠϯ ݖҖ%/4αʔό্ͷ%/4Ϩίʔυ

   ͷ؅ཧݖݶͷ ॴ࣋Λ֬ೝ͢Δ͜ͱΛ΋ͬͯূ໌ॻൃߦՄೳͱ൑ఆ͢Δ ͍ΘΏΔυϝΠϯೝূ
   w೥݄͔Β"$.&
   Wϓϩτίϧͷਖ਼ࣜαϙʔτʹΑΓ ϫΠϧυΧʔυূ໌ॻͷൃߦ΋Մೳʹ
   wূ໌ॻͷ༗ޮظؒ͸ൃߦޙ೔ؒ

10. ແྉ5-4ূ໌ॻ
    -FU`T
    &ODSZQU ূ໌ॻͷ༗ޮظؒ͸ൃߦޙ೔ؒ w தؒূ໌ॻ͸-FU`T
    &ODSZQUࣗ਎ͷ$"ʹ Ճ͑ͯ*EFO5SVTU$"ʹΑͬͯ΋ॺ໊
    w ΄ͱΜͲͷ8FCΫϥΠΞϯτ͸*EFO5SVTU ͷϧʔτ$"ূ໌ॻΛϓϦΠϯετʔϧɹ
    ‎Ϣʔβࣗ਎͕$"ূ໌ॻΛΠϯετʔϧ ͠ͳͯ͘΋0,

11. υϝΠϯऔಘ͔Βূ໌ॻήοτ ·ͰͷྲྀΕ ᶃ 'SFFOPNͰυϝΠϯऔಘ
    ᶄ (JU)VCʹ੩త8FCαΠτίϯςϯπΛQVTI͠ɺ(JU)VC
    1BHFTΛ༗ޮԽ
    ᶅ $MPVEqBSFͰαΠτొ࿥ˍ(JU)VC
    1BHFTͷΧελϜυϝ Πϯ༻%/4Ϩίʔυొ࿥
    

    ᶆ 'SFFOPNͰݖҖ%/4αʔόΛ$MPVEqBSF
    %/4ʹ੾Γସ͑
    ᶇ -FU`T
    &ODSZQUͰ$MPVEqBSF
    %/4Λ࢖ͬͯϫΠϧυΧʔυ ূ໌ॻήοτ

12. (JU)VC
    1BHFT

13. ΧελϜυϝΠϯͰ
 (JU)VC
    1BHFTΛ࢖͓͏ͱ͢Δͱ

14. υϝΠϯऔಘ͔Βূ໌ॻήοτ ·ͰͷྲྀΕ ᶃ 'SFFOPNͰυϝΠϯऔಘ
    ᶄ (JU)VCʹ੩త8FCαΠτίϯςϯπΛQVTI͠ɺ(JU)VC
    1BHFTΛ༗ޮԽ
    ᶅ $MPVEqBSFͰαΠτొ࿥ˍ(JU)VC
    1BHFTͷΧελϜυϝ Πϯ༻%/4Ϩίʔυొ࿥
    

    ᶆ 'SFFOPNͰݖҖ%/4αʔόΛ$MPVEqBSF
    %/4ʹ੾Γସ͑
    ᶇ -FU`T
    &ODSZQUͰ$MPVEqBSF
    %/4Λ࢖ͬͯϫΠϧυΧʔυ ূ໌ॻήοτ

15. $MPVEqBSFͰαΠτొ࿥

16. (JU)VC
    1BHFTͷ
 ΧελϜυϝΠϯ༻%/4Ϩίʔυొ࿥ w 
    ͱ
 
    Ѽͷ
 %/4
    "ϨίʔυΛ౤ೖ
    w ͍ͣΕ΋$MPVEqBSF
    $%/Λ ௨ͯ͠ΞΫηε ˞೚ҙ

17. υϝΠϯऔಘ͔Βূ໌ॻήοτ ·ͰͷྲྀΕ ᶃ 'SFFOPNͰυϝΠϯऔಘ
    ᶄ (JU)VCʹ੩త8FCαΠτίϯςϯπΛQVTI͠ɺ(JU)VC
    1BHFTΛ༗ޮԽ
    ᶅ $MPVEqBSFͰαΠτొ࿥ˍ(JU)VC
    1BHFTͷΧελϜυϝ Πϯ༻%/4Ϩίʔυొ࿥
    

    ᶆ 'SFFOPNͰݖҖ%/4αʔόΛ$MPVEqBSF
    %/4ʹ੾Γସ͑
    ᶇ -FU`T
    &ODSZQUͰ$MPVEqBSF
    %/4Λ࢖ͬͯϫΠϧυΧʔυ ূ໌ॻήοτ

18. $MPVEqBSFΛ
 ݖҖ%/4αʔόʹ͢Δ

19. ݖҖ%/4αʔόมߋ੒ޭ ˞มߋ׬ྃ·ͰԿ෼͔଴ͱ͏ʂ

20. υϝΠϯऔಘ͔Βূ໌ॻήοτ ·ͰͷྲྀΕ ᶃ 'SFFOPNͰυϝΠϯऔಘ
    ᶄ (JU)VCʹ੩త8FCαΠτίϯςϯπΛQVTI͠ɺ(JU)VC
    1BHFTΛ༗ޮԽ
    ᶅ $MPVEqBSFͰαΠτొ࿥ˍ(JU)VC
    1BHFTͷΧελϜυϝ Πϯ༻%/4Ϩίʔυొ࿥
    

    ᶆ 'SFFOPNͰݖҖ%/4αʔόΛ$MPVEqBSF
    %/4ʹ੾Γସ͑
    ᶇ -FU`T
    &ODSZQUͰ$MPVEqBSF
    %/4Λ࢖ͬͯϫΠϧυΧʔυ ূ໌ॻήοτ

21. -FU`T
    &ODSZQU͔Βূ໌ॻΛ ήοτ͢Δํ๏ w"$.&
    WΫϥΠΞϯτΛࣗ෼Ͱಈ͔͢
    wͳΜ͔উखʹ΍ͬͯ͘ΕΔ
    wϓϩμΫτʹ૊Έࠐ·Ε͍ͯΔ ࠓճ͸ίϨ

22. "$.&
    WΫϥΠΞϯτ https://letsencrypt.org/docs/client-options/ ࠓճ͸
    BDNFTI
    Λ࢖༻
    wCBTIεΫϦϓτϕʔε
    wBMQJOFϕʔεͷ%PDLFSpMF͕ ͍͍ͭͯΔ
    w$MPVEqBSF
    %/4ͷ"1*ʹରԠ https://github.com/Neilpang/acme.sh

23. $MPVEqBSF
    "1*Ωʔ

24. BDNFTIͷ࢖͍ํ
     ৽نൃߦ $ git clone https://github.com/Neilpang/acme.sh $ cd acme.sh

    $ docker build -t acme.sh . $ cd .. $ docker run -t --rm \ -e CF_Email='hoge@hoge.com' \ -e CF_Key=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX \ -v $PWD:/acme.sh acme.sh \ --issue --dns dns_cf \ -d hogehoge.cf -d '*.hogehoge.cf' ద౰ͳ%PDLFSϗετʹ࡞ۀ༻σΟϨΫτϦΛ۷ͬͯɺ
    ͓΋ΉΖʹҎԼΛ࣮ߦ $MPVEqBSF
    "1*Ωʔ $MPVEqBSFΞΧ΢ϯτ*%
    ొ࿥ϝΞυ ϫΠϧυΧʔυΛࢦఆ

25. ੜ੒͞ΕΔϑΝΠϧ $ tree . ├── account.conf ├── acme.sh │ ├──

    acme.sh │ ʲதུʳ ├── ca │ └── acme-v02.api.letsencrypt.org │ ├── account.json │ ├── account.key │ └── ca.conf └── hogehoge.cf ├── ca.cer ├── hogehoge.cf.cer ├── hogehoge.cf.conf ├── hogehoge.cf.csr ├── hogehoge.cf.csr.conf ├── hogehoge.cf.key └── fullchain.cer ൿີݤϑΝΠϧ ূ໌ॻνΣΠϯϑΝΠϧ ূ໌ॻϑΝΠϧ

26. BDNFTIͷ࢖͍ํ
     ߋ৽࠶ൃߦɾࢀরɾ࡟আ $ docker run -t --rm -v $PWD:/acme.sh

    \ acme.sh --renew-all $ docker run -t --rm -v $PWD:/acme.sh \ acme.sh --list $ docker run -t --rm -v $PWD:/acme.sh \ acme.sh --remove -d hogehoge.cf ʲࢀরʳ ʲߋ৽࠶ൃߦʳ˞༗ޮظؒ࢒Γ೔Λ੾ͬͨ΋ͷͷΈ"$.&࠶࣮ߦ ʲ࡟আʳ

27. ʲ2ʳ
 αϒυϝΠϯͰ΋͍͚Δͷʁ $ docker run -t --rm \ -e CF_Email='hoge@hoge.com'

    \ -e CF_Key=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX \ -v $PWD:/acme.sh acme.sh \ --issue --dns dns_cf \ -d sub.hogehoge.cf -d '*.sub.hogehoge.cf' ʲ"ʳ͑͑ɺ͍͚·͢ ˞ূ໌ॻΛ࣮ࡍʹ࢖͏ͱ͖͸ɺαϒυϝΠϯͷ%/4Ϩίʔυొ࿥ͳͲ͓๨Εͳ͘

28. ෭࢈෺ w(JU)VCͰͪΌΜͱόʔδϣϯ؅ཧ͞Εɺ
 $%/΋࢖ͬͨɺܹ଎ͳ੩త8FCαΠτ
    wΠϯτϥωοτͰ࢖͏υϝΠϯͰ΋
 ࣗಈߋ৽ՄೳͳϫΠϧυΧʔυূ໌ॻ
    w*OUFSOFU
    SFBDIBCMFͳ8FCαʔό͕ͳͯ͘΋ɺ ݖҖ%/4αʔό͑͋͞Ε͹ূ໌ॻߋ৽͕Մೳ

29. ͋Γ͕ͱ͏͍͟͝·ͨ͠