Azure Apps ServiceでLet’s Encryptの証明書発行からインポートまで

#パッケージ更新

root@exxxxxxxxxxx:/home# apt list –upgradable
Listing… Done
adduser/oldstable 3.118+deb11u1 all [upgradable from: 3.118]
~以下略~

root@exxxxxxxxxxx:/home# apt -y upgrade
Reading package lists… Done
Building dependency tree… Done
~以下略~

#certbotインストール

root@exxxxxxxxxxx:/home# apt -y install certbot
Reading package lists… Done
Building dependency tree… Done
Reading state information… Done
The following additional packages will be installed:
~以下略~

root@exxxxxxxxxxx:/home# certbot certonly –webroot -w /home/site/wwwroot -d www.example.com

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator webroot, Installer None
Enter email address (used for urgent renewal and security notices)
(Enter 'c’ to cancel): admin@example.com #メールアドレスを入力

– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –
Please read the Terms of Service at
https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf. You must
agree in order to register with the ACME server. Do you agree?
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –
(Y)es/(N)o: Y　#承認の確認です。Yを選択します。

– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –
Would you be willing, once your first certificate is successfully issued, to
share your email address with the Electronic Frontier Foundation, a founding
partner of the Let’s Encrypt project and the non-profit organization that
develops certbot? We’d like to send you email about our work encrypting the web,
EFF news, campaigns, and ways to support digital freedom.
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –
(Y)es/(N)o: N　#案内メール送信の確認です。必要な場合はYを選択
Account registered.
Requesting a certificate for www.example.com
Performing the following challenges:
http-01 challenge for www.example.com
Using the webroot path /home/site/wwwroot for all unmatched domains.
Waiting for verification…
Cleaning up challenges

IMPORTANT NOTES:
– Congratulations! Your certificate and chain have been saved at:
/etc/letsencrypt/live/www.example.com/fullchain.pem
Your key file has been saved at:
/etc/letsencrypt/live/www.example.com/privkey.pem
Your certificate will expire on 2024-05-12. To obtain a new or
tweaked version of this certificate in the future, simply run
certbot again. To non-interactively renew *all* of your
certificates, run “certbot renew"
– If you like certbot, please consider supporting our work by:

Donating to ISRG / Let’s Encrypt: https://letsencrypt.org/donate
Donating to EFF: https://eff.org/donate-le

root@exxxxxxxxxxx:/home# certbot certonly –manual -d www.example.com

http-01 challenge for www.example.com
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –
Create a file containing just this data:
002Hlo_G1Cxxxxxxxxxxxxxxxxxxxxxf2iYF_uESo.HKR2j8cvxnxxxxxxxxxxxxxxxxxxxGvnabdNDYc
And make it available on your web server at this URL:
http://www.example.com/.well-known/acme-challenge/002Hlo_G1Cxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx_uESo
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – 

root@exxxxxxxxxxx:/home# ls -alh /etc/letsencrypt/live/www.example.com/

total 12K
drwxr-xr-x 2 root root 4.0K Feb 12 08:39 .
drwx—— 3 root root 4.0K Feb 12 08:39 ..
-rw-r–r– 1 root root 692 Feb 12 08:39 README
lrwxrwxrwx 1 root root 45 Feb 12 08:39 cert.pem -> ../../archive/www.example.com/cert1.pem
lrwxrwxrwx 1 root root 46 Feb 12 08:39 chain.pem -> ../../archive/www.example.com/chain1.pem
lrwxrwxrwx 1 root root 50 Feb 12 08:39 fullchain.pem -> ../../archive/www.example.com/fullchain1.pem
lrwxrwxrwx 1 root root 48 Feb 12 08:39 privkey.pem -> ../../archive/www.example.com/privkey1.pem

root@exxxxxxxxxxx:/home# cd /etc/letsencrypt/live/www.example.com/
root@exxxxxxxxxxx:/etc/letsencrypt/live/www.example.com/# openssl pkcs12 -export -inkey privkey.pem -in cert.pem -out www.example.com.pfx
Enter Export Password:
Verifying – Enter Export Password:
root@exxxxxxxxxxx:/etc/letsencrypt/live/www.example.com/# ls -l |grep pfx
-rw——-. 1 root root 1.6K Feb 12 08:55 www.example.com.pfx