Help us understand the problem. What is going on with this article?

bitnami redmineにSSL証明書(Let's Encrypt)を導入する

はじめに

bitnamiにはSSL証明書(Let's Encrypt)を導入するためのツールがあります。
今回はそれを使って導入しようと思います。

SSL証明書の導入

bncert-toolを実行します。

bncert-tool
$ sudo /opt/bitnami/bncert-tool 
----------------------------------------------------------------------------
Welcome to the Bitnami HTTPS Configuration tool.

----------------------------------------------------------------------------
Domains

Please provide a valid space-separated list of domains for which you wish to 
configure your web server.

ドメイン名を入力します。

bncertt-tool
Domain list []: hoge.hengjiu.jp

www付きのマルチドメインに対応するかを聞かれますが、とりあえず今回はNoにしておきます。

bncertt-tool
The following domains were not included: www.hoge.hengjiu.jp. Do you want to add them? [Y/n]: n

Warning: No www domains (e.g. www.example.com) or non-www domains (e.g. 
www.example.com) have been provided, so the following redirections will be 
disabled: non-www to www, www to non-www.
Press [Enter] to continue:

----------------------------------------------------------------------------
Enable/disable redirections

HTTP→HTTPSへのリダイレクト設定を行うかどうか聞かれるので「y」で同意します。

bncertt-tool
Please select the redirections you wish to enable or disable on your Bitnami 
installation.



Enable HTTP to HTTPS redirection [Y/n]: y


----------------------------------------------------------------------------
Changes to perform

反映するために「以下の手順で再起動しますよ」ということなので「y」で再起動を行います。

bncertt-tool
The following changes will be performed to your Bitnami installation:

1. Stop web server
2. Configure web server to use a free Let's Encrypt certificate for the domains: 
hoge.hengjiu.jp
3. Configure a cron job to automatically renew the certificate each month
4. Configure web server name to: hoge.hengjiu.jp
5. Enable HTTP to HTTPS redirection (example: redirect http://hoge.hengjiu.jp 
to https://hoge.hengjiu.jp)
6. Start web server once all changes have been performed



Do you agree to these changes? [Y/n]: y


----------------------------------------------------------------------------
Create a free HTTPS certificate with Let's Encrypt

証明書の期限が近づいた際に更新通知を送るメールアドレスを登録します。

bncertt-tool
Please provide a valid e-mail address for which to associate your Let's Encrypt 
certificate.

Domain list: hoge.hengjiu.jp

Server name: hoge.hengjiu.jp

E-mail address []: xxxxx@hengjiu.jp

下記のサイトに記載されている内容を確認の上「y」で同意します。

bncertt-tool
The Let's Encrypt Subscriber Agreement can be found at:

https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf

Do you agree to the Let's Encrypt Subscriber Agreement? [Y/n]: y


----------------------------------------------------------------------------
Performing changes to your installation

The Bitnami HTTPS Configuration Tool will perform any necessary actions to your 
Bitnami installation. This may take some time, please be patient.

----------------------------------------------------------------------------
Success

以上で導入完了です。バックアップファイルとログファイルの場所が以下に表示されます。
ひととおり確認したらEnterで終了します。

bncertt-tool
The Bitnami HTTPS Configuration Tool succeeded in modifying your installation.

The configuration report is shown below.

Backup files:
* /opt/bitnami/apache2/conf/httpd.conf.back.202001140617
* /opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf.back.202001140617
* /opt/bitnami/apache2/conf/bitnami/bitnami.conf.back.202001140617

Find more details in the log file:

/tmp/bncert-202001140617.log

If you find any issues, please check Bitnami Support forums at:

https://community.bitnami.com

Press [Enter] to continue:

証明書にwwwドメインを追加する

やっぱりwwwドメインも追加したいという場合もbncert-toolで追加することが可能です。
導入したサイト同じようにツールを実行します。

bncert-tool
$ sudo /opt/bitnami/bncert-tool 
----------------------------------------------------------------------------
Welcome to the Bitnami HTTPS Configuration tool.

----------------------------------------------------------------------------
Domains

追加するドメインを入力し、追加しますかと聞かれるので「y」で同意します。

bncertt-tool
Please provide a valid space-separated list of domains for which you wish to 
configure your web server.

Domain list []: www.hoge.hengjiu.jp

The following domains were not included: hoge.hengjiu.jp. Do you want to add them? [Y/n]: y

----------------------------------------------------------------------------
Enable/disable redirections

HTTP→HTTPSへのリダイレクト設定を行うかどうか聞かれるので「y」で同意します。
また、non-www→wwwへのリダイレクトへも聞かれるのでこれも「y」にしておきます。
www→non-wwwは「n」にしておきます。

bncertt-tool
Please select the redirections you wish to enable or disable on your Bitnami 
installation.



Enable HTTP to HTTPS redirection [Y/n]: y




Enable non-www to www redirection [Y/n]: y




Enable www to non-www redirection [Y/n]: n


----------------------------------------------------------------------------
Changes to perform

反映するために「以下の手順で再起動しますよ」ということなので「y」で再起動を行います。

bncertt-tool
The following changes will be performed to your Bitnami installation:

1. Stop web server
2. Configure web server to use a free Let's Encrypt certificate for the domains: 
www.redmine.hengjiu.jp redmine.hengjiu.jp
3. Configure a cron job to automatically renew the certificate each month
4. Configure web server name to: www.redmine.hengjiu.jp
5. Enable HTTP to HTTPS redirection (example: redirect http://redmine.hengjiu.jp 
to https://redmine.hengjiu.jp)
6. Enable non-www to www redirection (example: redirect redmine.hengjiu.jp to 
www.redmine.hengjiu.jp)
7. Start web server once all changes have been performed



Do you agree to these changes? [Y/n]: y


----------------------------------------------------------------------------
Create a free HTTPS certificate with Let's Encrypt

下記のサイトに記載されている内容を確認の上「y」で同意します。

bncertt-tool
Please provide a valid e-mail address for which to associate your Let's Encrypt 
certificate.

Domain list: www.hoge.hengjiu.jp hoge.hengjiu.jp

Server name: www.hoge.hengjiu.jp

E-mail address []: xxxxx@hengjiu.jp

The Let's Encrypt Subscriber Agreement can be found at:

https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf

Do you agree to the Let's Encrypt Subscriber Agreement? [Y/n]: y


----------------------------------------------------------------------------
Performing changes to your installation

The Bitnami HTTPS Configuration Tool will perform any necessary actions to your 
Bitnami installation. This may take some time, please be patient.

----------------------------------------------------------------------------
Success

以上で導入完了です。バックアップファイルとログファイルの場所が以下に表示されます。
ひととおり確認したらEnterで終了します。

bncertt-tool
The Bitnami HTTPS Configuration Tool succeeded in modifying your installation.

The configuration report is shown below.

Backup files:
* /opt/bitnami/apache2/conf/httpd.conf.back.202001140629
* /opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf.back.202001140629
* /opt/bitnami/apache2/conf/bitnami/bitnami.conf.back.202001140629

Find more details in the log file:

/tmp/bncert-202001140629.log

If you find any issues, please check Bitnami Support forums at:

https://community.bitnami.com

Press [Enter] to continue:

サイトに確認し、HTTPSでアクセスできていれば完了です。

おわりに

bitnamiのredmineを初めて利用しましたが、証明書も簡単に導入できるしホントに楽だなと感じました。

[参考]
・Auto-Configure A Let's Encrypt Certificate(bitnami公式)
https://docs.bitnami.com/aws/apps/redmine/administration/generate-configure-certificate-letsencrypt/

Why not register and get more from Qiita?
  1. We will deliver articles that match you
    By following users and tags, you can catch up information on technical fields that you are interested in as a whole
  2. you can read useful information later efficiently
    By "stocking" the articles you like, you can search right away
Comments
No comments
Sign up for free and join this conversation.
If you already have a Qiita account
Why do not you register as a user and use Qiita more conveniently?
You need to log in to use this function. Qiita can be used more conveniently after logging in.
You seem to be reading articles frequently this month. Qiita can be used more conveniently after logging in.
  1. We will deliver articles that match you
    By following users and tags, you can catch up information on technical fields that you are interested in as a whole
  2. you can read useful information later efficiently
    By "stocking" the articles you like, you can search right away
ユーザーは見つかりませんでした