{"id":2105,"date":"2020-08-21T16:35:52","date_gmt":"2020-08-21T21:35:52","guid":{"rendered":"https:\/\/creativapixel.com\/?p=2105"},"modified":"2020-08-21T17:32:20","modified_gmt":"2020-08-21T22:32:20","slug":"instalar-certificado-https-firmado-por-lets-encrypt-en-centos-7-con-apache","status":"publish","type":"post","link":"https:\/\/creativapixel.com\/blog\/instalar-certificado-https-firmado-por-lets-encrypt-en-centos-7-con-apache\/","title":{"rendered":"Instalar certificado https firmado por LET&#8217;S ENCRYPT en CentOS 7 con Apache"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Con LET&#8217;S ENCRYPT tendremos a diferencia de un ceritificado autofirmado, un certificado emitido por esta instituci\u00f3n el cual nos permitir\u00e1 cumplir con los requerimientos de los navegadores para validar un certificado ssl. Esto si es importante cuando manejamos una web p\u00fablica. Hay que tener en cuenta que estos certificados free caducan cada cierto tiempo y hay que renovarlos, pero configuraremos una renovaci\u00f3n autom\u00e1tica.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Instalamos EPEL<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code> sudo yum install epel-release<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Instalamos Certbot que nos ayudar\u00e1 con el registro en Let&#8217;s Encrypt y su posterior autorenovaci\u00f3n<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code> sudo yum install certbot python2-certbot-apache mod_ssl<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Configuramos certbot con apache<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code> sudo certbot --apache -d example.com -d www.example.com<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code> sudo certbot --apache<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Una vez que instalamos y configuramos, verificaremos en el sgte. enlace si se han generado y publicado nuestro certificado y key<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.ssllabs.com\/ssltest\/analyze.html?d=saminpms.com\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.ssllabs.com\/ssltest\/analyze.html?d=saminpms.com<\/a><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/creativapixel.com\/wp-content\/uploads\/2020\/08\/certificado-samin-1024x576.png\" alt=\"\" class=\"wp-image-2110\" srcset=\"https:\/\/creativapixel.com\/blog\/wp-content\/uploads\/2020\/08\/certificado-samin-1024x576.png 1024w, https:\/\/creativapixel.com\/blog\/wp-content\/uploads\/2020\/08\/certificado-samin-300x169.png 300w, https:\/\/creativapixel.com\/blog\/wp-content\/uploads\/2020\/08\/certificado-samin-768x432.png 768w, https:\/\/creativapixel.com\/blog\/wp-content\/uploads\/2020\/08\/certificado-samin.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Ahora configuramos la autorenovaci\u00f3n<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code> sudo certbot renew --dry-run<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Configuramos la tarea programada en centos<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code> sudo crontab -e<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code> 0 0,12 * * * python -c 'import random; import time; time.sleep(random.random() * 3600)' &amp;&amp; certbot renew<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Listo con esto ya podemos usar nuestro certificado emitido por Let&#8217;s Encrypt<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"601\" height=\"578\" src=\"https:\/\/creativapixel.com\/wp-content\/uploads\/2020\/08\/certificado-samin-2.png\" alt=\"\" class=\"wp-image-2111\" srcset=\"https:\/\/creativapixel.com\/blog\/wp-content\/uploads\/2020\/08\/certificado-samin-2.png 601w, https:\/\/creativapixel.com\/blog\/wp-content\/uploads\/2020\/08\/certificado-samin-2-300x289.png 300w\" sizes=\"auto, (max-width: 601px) 100vw, 601px\" \/><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Con LET&#8217;S ENCRYPT tendremos a diferencia de un ceritificado autofirmado, un certificado emitido por esta instituci\u00f3n el cual nos permitir\u00e1 cumplir con los requerimientos de los navegadores para validar un &#8230;<\/p>\n","protected":false},"author":1,"featured_media":2113,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17,18],"tags":[],"class_list":["post-2105","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-centos","category-servidores-gnulinux"],"_links":{"self":[{"href":"https:\/\/creativapixel.com\/blog\/wp-json\/wp\/v2\/posts\/2105","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/creativapixel.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/creativapixel.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/creativapixel.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/creativapixel.com\/blog\/wp-json\/wp\/v2\/comments?post=2105"}],"version-history":[{"count":4,"href":"https:\/\/creativapixel.com\/blog\/wp-json\/wp\/v2\/posts\/2105\/revisions"}],"predecessor-version":[{"id":2112,"href":"https:\/\/creativapixel.com\/blog\/wp-json\/wp\/v2\/posts\/2105\/revisions\/2112"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/creativapixel.com\/blog\/wp-json\/wp\/v2\/media\/2113"}],"wp:attachment":[{"href":"https:\/\/creativapixel.com\/blog\/wp-json\/wp\/v2\/media?parent=2105"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/creativapixel.com\/blog\/wp-json\/wp\/v2\/categories?post=2105"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/creativapixel.com\/blog\/wp-json\/wp\/v2\/tags?post=2105"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}