☰

LetsEncrypt 不適用於基本域

tag-icon • tag-icon ssl-certificate virtualhost lets-encrypt certbot centos8
LetsEncrypt 不適用於基本域

我正在使用 centos 8，並且已經安裝了 let's Encrypt 證書，該證書不適用於基本（根）網域，但適用於子網域。我檢查了根網域和子網域可用的憑證發現了以下憑證：

    Certificate Name: teachersbook.pk
    Serial Number: XXXXXXXXXXXXXX
    Key Type: XXXXXXXX
    Domains: teachersbook.pk www.teachersbook.pk
    Expiry Date: 2021-12-13 06:54:33+00:00 (VALID: 89 days)
    Certificate Path: /etc/letsencrypt/live/teachersbook.pk/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/teachersbook.pk/privkey.pem

我的虛擬主機配置是

<VirtualHost *:80>
    ServerName teachersbook.pk
    ServerAlias www.teachersbook.pk
    ServerAdmin [email protected]
    DocumentRoot /var/www/teachersbook.pk/

    ErrorLog /var/log/httpd/teachersbook.pk-error.log
    CustomLog /var/log/httpd/teachersbook.pk-access.log combined
RewriteEngine on
RewriteCond %{SERVER_NAME} =teachersbook.pk [OR]
RewriteCond %{SERVER_NAME} =www.teachersbook.pk
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>

我的 Let's Encrypt SSL 檔案配置是

<IfModule mod_ssl.c>
<VirtualHost *:443>
    ServerName teachersbook.pk
    ServerAlias www.teachersbook.pk
    ServerAdmin [email protected]
    DocumentRoot /var/www/teachersbook.pk/

    ErrorLog /var/log/httpd/teachersbook.pk-error.log
    CustomLog /var/log/httpd/teachersbook.pk-access.log combined

Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /etc/letsencrypt/live/teachersbook.pk/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/teachersbook.pk/privkey.pem
</VirtualHost>
</IfModule>

相關內容