{"id":95,"date":"2024-03-25T10:51:41","date_gmt":"2024-03-25T01:51:41","guid":{"rendered":"https:\/\/grit.kr\/?p=95"},"modified":"2025-01-17T09:47:30","modified_gmt":"2025-01-17T00:47:30","slug":"%ec%8b%9c%eb%86%80%eb%a1%9c%ec%a7%80-%ed%81%b4%eb%9d%bc%ec%9a%b0%eb%93%9c%ed%94%8c%eb%a0%88%ec%96%b4-%ec%9d%b8%ec%a6%9d%ec%84%9c-%ea%b0%b1%ec%8b%a0%ed%95%98%ea%b8%b0","status":"publish","type":"post","link":"https:\/\/grit.kr\/?p=95","title":{"rendered":"\uc2dc\ub180\ub85c\uc9c0 \ud074\ub77c\uc6b0\ub4dc\ud50c\ub808\uc5b4 \uc778\uc99d\uc11c \uac31\uc2e0\ud558\uae30"},"content":{"rendered":"

\uc2dc\ub180\ub85c\uc9c0 NAS Wildcard SSL \uc790\ub3d9 \uac31\uc2e0 \uc124\uc815 (acme.sh + Cloudflare API) (hlog.io)<\/a><\/p>\n

[\uc2dc\ub180\ub85c\uc9c0] SSL \uc778\uc99d\uc11c \uc790\ub3d9 \uac31\uc2e0\ud558\uae30 (2) – acme.sh \u2014 Devitamin<\/a><\/p>\n

\uc2dc\ub180\ub85c\uc9c0 \uc778\uc99d\uc11c \uac31\uc2e0\ud558\uae30<\/h1>\n

 <\/p>\n

\ub098\uc2a4 \uae30\ubcf8\uc778\uc99d\uc11c \uacbd\ub85c \ud655\uc778<\/p>\n

cat \/usr\/syno\/etc\/certificate\/_archive\/DEFAULT<\/p>\n

 <\/p>\n

\uc778\uc99d\uc11c \uc0dd\uc131<\/p>\n

 <\/p>\n

wget https:\/\/raw.githubusercontent.com\/acmesh-official\/acme.sh\/master\/acme.sh #acme.sh \ub2e4\uc6b4\ub85c\ub4dc<\/p>\n

chmod a+x acme.sh # \uad8c\ud55c \uc124\uc815
\nmkdir \/root\/.acme.sh # \ub514\ub809\ud1a0\ub9ac \uc0dd\uc131
\nsh acme.sh –upgrade # \uc2a4\ud06c\ub9bd\ud2b8 \uc5c5\ub370\uc774\ud2b8
\nsh acme.sh –set-default-ca –server letsencrypt # CA \ubcc0\uacbd
\nexport CF_Token=”[Cloudflare \ud1a0\ud070]” # Cloudflare \ud1a0\ud070
\nexport CF_Email=”[Cloudflare \uacc4\uc815 \uc774\uba54\uc77c \uc8fc\uc18c]” # Cloudflare \uacc4\uc815 \uc774\uba54\uc77c \uc8fc\uc18c
\nsh acme.sh –issue –dns dns_cf -d [\ub098\uc758 \ub3c4\uba54\uc778] -d ‘*.[\ub098\uc758 \ub3c4\uba54\uc778]’ # \uc640\uc77c\ub4dc\uce74\ub4dc \uc778\uc99d\uc11c \ubc1c\uae09<\/p>\n

cp \/root\/.acme.sh\/[\ub098\uc758 \ub3c4\uba54\uc778]_ecc\/[\ub098\uc758 \ub3c4\uba54\uc778].cer \/usr\/syno\/etc\/certificate\/_archive\/[\uae30\ubcf8 \uc778\uc99d\uc11c \uacbd\ub85c]\/cert.pem
\ncp \/root\/.acme.sh\/[\ub098\uc758 \ub3c4\uba54\uc778]_ecc\/ca.cer \/usr\/syno\/etc\/certificate\/_archive\/[\uae30\ubcf8 \uc778\uc99d\uc11c \uacbd\ub85c]\/chain.pem
\ncp \/root\/.acme.sh\/[\ub098\uc758 \ub3c4\uba54\uc778]_ecc\/fullchain.cer \/usr\/syno\/etc\/certificate\/_archive\/[\uae30\ubcf8 \uc778\uc99d\uc11c \uacbd\ub85c]\/fullchain.pem
\ncp \/root\/.acme.sh\/[\ub098\uc758 \ub3c4\uba54\uc778]_ecc\/[\ub098\uc758 \ub3c4\uba54\uc778].key \/usr\/syno\/etc\/certificate\/_archive\/[\uae30\ubcf8 \uc778\uc99d\uc11c \uacbd\ub85c]\/privkey.pem # \uc778\uc99d\uc11c \ub4f1\ub85d
\ncp \/root\/.acme.sh\/[\ub098\uc758 \ub3c4\uba54\uc778]_ecc\/[\ub098\uc758 \ub3c4\uba54\uc778].cer \/usr\/syno\/etc\/certificate\/system\/default\/cert.pem
\ncp \/root\/.acme.sh\/[\ub098\uc758 \ub3c4\uba54\uc778]_ecc\/ca.cer \/usr\/syno\/etc\/certificate\/system\/default\/chain.pem
\ncp \/root\/.acme.sh\/[\ub098\uc758 \ub3c4\uba54\uc778]_ecc\/fullchain.cer \/usr\/syno\/etc\/certificate\/system\/default\/fullchain.pem
\ncp \/root\/.acme.sh\/[\ub098\uc758 \ub3c4\uba54\uc778]_ecc\/[\ub098\uc758 \ub3c4\uba54\uc778].key \/usr\/syno\/etc\/certificate\/system\/default\/privkey.pem # \uae30\ubcf8 \uc778\uc99d\uc11c \ub4f1\ub85d<\/p>\n

synosystemctl restart nginx # nginx \uc11c\ube44\uc2a4 \uc7ac\uc2dc\uc791<\/p>\n

 <\/p>\n

 <\/p>\n

\uc791\uc5c5\uc2a4\ucf00\uc974\u00a0 \uc0ac\uc6a9\uc790 \uc815\uc758 \uc2a4\ud06c\ub9bd\ud2b8<\/p>\n

sh acme.sh –issue –force –dns dns_cf -d [\ub098\uc758 \ub3c4\uba54\uc778] -d ‘*.[\ub098\uc758 \ub3c4\uba54\uc778]’<\/p>\n

cp \/root\/.acme.sh\/[\ub098\uc758 \ub3c4\uba54\uc778]_ecc\/[\ub098\uc758 \ub3c4\uba54\uc778].cer \/usr\/syno\/etc\/certificate\/_archive\/[\uae30\ubcf8 \uc778\uc99d\uc11c \uacbd\ub85c]\/cert.pem
\ncp \/root\/.acme.sh\/[\ub098\uc758 \ub3c4\uba54\uc778]_ecc\/ca.cer \/usr\/syno\/etc\/certificate\/_archive\/[\uae30\ubcf8 \uc778\uc99d\uc11c \uacbd\ub85c]\/chain.pem
\ncp \/root\/.acme.sh\/[\ub098\uc758 \ub3c4\uba54\uc778]_ecc\/fullchain.cer \/usr\/syno\/etc\/certificate\/_archive\/[\uae30\ubcf8 \uc778\uc99d\uc11c \uacbd\ub85c]\/fullchain.pem
\ncp \/root\/.acme.sh\/[\ub098\uc758 \ub3c4\uba54\uc778]_ecc\/[\ub098\uc758 \ub3c4\uba54\uc778].key \/usr\/syno\/etc\/certificate\/_archive\/[\uae30\ubcf8 \uc778\uc99d\uc11c \uacbd\ub85c]\/privkey.pem
\ncp \/root\/.acme.sh\/[\ub098\uc758 \ub3c4\uba54\uc778]_ecc\/[\ub098\uc758 \ub3c4\uba54\uc778].cer \/usr\/syno\/etc\/certificate\/system\/default\/cert.pem
\ncp \/root\/.acme.sh\/[\ub098\uc758 \ub3c4\uba54\uc778]_ecc\/ca.cer \/usr\/syno\/etc\/certificate\/system\/default\/chain.pem
\ncp \/root\/.acme.sh\/[\ub098\uc758 \ub3c4\uba54\uc778]_ecc\/fullchain.cer \/usr\/syno\/etc\/certificate\/system\/default\/fullchain.pem
\ncp \/root\/.acme.sh\/[\ub098\uc758 \ub3c4\uba54\uc778]_ecc\/[\ub098\uc758 \ub3c4\uba54\uc778].key \/usr\/syno\/etc\/certificate\/system\/default\/privkey.pem<\/p>\n

synosystemctl restart nginx<\/p>\n

\uc2a4\ud06c\ub9bd\ud2b8 \/var\/services\/homes\/\uc0ac\uc6a9\uc790\/\uc5d0\uc11c vi renew_cert.sh \ud30c\uc77c \ub9cc\ub4e4\uc5b4\uc11c \ub0b4\uc6a9 \ub123\uc5b4\uc8fc\uae30<\/p>\n

 <\/p>\n

amce.sh #\uc804\uc5ed\uc124\uc815 \uc704\ud574\uc11c \/var\/services\/hoems\/\uc0ac\uc6a9\uc790\/ \uc124\uce58<\/h4>\n

\uc774\ubbf8\uc124\uce58\ud588\ub2e4\uba74 acme.sh \ubcf5\uc0ac\ud544\uc694<\/h4>\n

cp \/root\/.acme.sh\/acme.sh \/usr\/local\/bin\/<\/h4>\n

\ud658\uacbd \ubcc0\uc218 \uc124\uc815<\/h4>\n

vi \/etc\/profile<\/h4>\n

\ub9e8\uc544\ub7ab\uc904\uc5d0<\/h4>\n

export ACME_HOME=”\/root\/.acme.sh”<\/h4>\n

export path=”$ACME_HOME:$PATH”<\/h4>\n

:WQ<\/h4>\n

source \/etc\/profile #\ubc14\ub85c \uc801\uc6a9<\/h4>\n

chmod -R 755 \/root\/.acme.sh #\ubaa8\ub4e0 \uc0ac\uc6a9\uc790 \uc77d\uae30 \uac00\ub2a5\ud558\uac8c \uad8c\ud55c \uc218\uc815<\/h4>\n","protected":false},"excerpt":{"rendered":"

\uc2dc\ub180\ub85c\uc9c0 NAS Wildcard SSL \uc790\ub3d9 \uac31\uc2e0 \uc124\uc815 (acme.sh + Cloudflare API) (hlog.io) [\uc2dc\ub180\ub85c\uc9c0] SSL \uc778\uc99d\uc11c \uc790\ub3d9 \uac31\uc2e0\ud558\uae30 (2) – acme.sh \u2014 Devitamin \uc2dc\ub180\ub85c\uc9c0 \uc778\uc99d\uc11c \uac31\uc2e0\ud558\uae30   \ub098\uc2a4 \uae30\ubcf8\uc778\uc99d\uc11c \uacbd\ub85c \ud655\uc778 cat \/usr\/syno\/etc\/certificate\/_archive\/DEFAULT   \uc778\uc99d\uc11c \uc0dd\uc131   wget https:\/\/raw.githubusercontent.com\/acmesh-official\/acme.sh\/master\/acme.sh #acme.sh \ub2e4\uc6b4\ub85c\ub4dc chmod a+x acme.sh # \uad8c\ud55c \uc124\uc815 mkdir \/root\/.acme.sh # \ub514\ub809\ud1a0\ub9ac \ub354 \uc77d\uae30<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[],"class_list":["post-95","post","type-post","status-publish","format-standard","hentry","category-nas"],"_links":{"self":[{"href":"https:\/\/grit.kr\/index.php?rest_route=\/wp\/v2\/posts\/95","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/grit.kr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/grit.kr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/grit.kr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/grit.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=95"}],"version-history":[{"count":6,"href":"https:\/\/grit.kr\/index.php?rest_route=\/wp\/v2\/posts\/95\/revisions"}],"predecessor-version":[{"id":109,"href":"https:\/\/grit.kr\/index.php?rest_route=\/wp\/v2\/posts\/95\/revisions\/109"}],"wp:attachment":[{"href":"https:\/\/grit.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=95"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/grit.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=95"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/grit.kr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=95"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}