{"id":972,"date":"2021-04-29T14:13:56","date_gmt":"2021-04-29T14:13:56","guid":{"rendered":"https:\/\/dev.sourcecode.sk\/wsczkb\/?post_type=ht_kb&#038;p=972"},"modified":"2021-07-19T10:29:18","modified_gmt":"2021-07-19T08:29:18","slug":"lets-encrypt-ssl-certifikaty-na-vps-ubuntu","status":"publish","type":"ht_kb","link":"https:\/\/www.websupport.cz\/podpora\/kb\/lets-encrypt-ssl-certifikaty-na-vps-ubuntu\/","title":{"rendered":"Let&#8217;s Encrypt SSL certifik\u00e1ty na VPS (Ubuntu)"},"content":{"rendered":"\n<p class=\"has-very-light-gray-background-color has-background\" style=\"font-size:18px\">Tento n\u00e1vod ukazuje, jak nainstalovat bal\u00edk certbot a pomoc\u00ed n\u011bho aktivovat Let&#8217;s Encrypt certifik\u00e1t na Virtu\u00e1ln\u00edm Serveru (d\u00e1le VPS). V p\u0159\u00edpad\u011b pot\u0159eby garance SSL certifik\u00e1tu, nebo pot\u0159eby \u00fapravy CSR si prohl\u00e9dn\u011bte na\u0161i\u00a0<a href=\"https:\/\/www.websupport.cz\/ssl-certifikaty\">nab\u00eddku placen\u00fdch SSL certifik\u00e1t\u016f<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">P\u0159edpoklady<\/h2>\n\n\n\n<p>Pro \u00fasp\u011b\u0161nou instalaci SSL certifik\u00e1tu podle tohoto n\u00e1vodu je pot\u0159eba splnit nasledovn\u00e1 krit\u00e9ria:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>VPS s opera\u010dn\u00edm syst\u00e9mem Ubuntu 12.04, Ubuntu 14.04, Ubuntu 16.04 nebo Ubuntu 18.04<\/li><li>Webov\u00fd server Apache<\/li><li>Administr\u00e1torsk\u00e1 privilegia na server (root nebo sudo)<\/li><\/ul>\n\n\n\n<p>P\u0159ed za\u010d\u00e1tkem instalace SSL certifik\u00e1tu doporu\u010dujeme\u00a0<a href=\"https:\/\/www.websupport.cz\/podpora\/kb\/snapshoty-na-virtualnim-serveru\/\">vytvo\u0159it snapshot<\/a>\u00a0Va\u0161eho VPS.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Instalace bal\u00ed\u010dku certbot<\/h2>\n\n\n\n<p>Let&#8217;s Encrypt certifik\u00e1ty jsou v\u011bt\u0161inou nahr\u00e1van\u00e9 na server bal\u00ed\u010dky. Ofici\u00e1ln\u00edm bal\u00ed\u010dkem je&nbsp;<a href=\"https:\/\/certbot.eff.org\/\">Certbot<\/a>&nbsp;&#8211; kter\u00fd je pravideln\u011b aktualizovan\u00fd a na opera\u010dn\u00edm syst\u00e9mu Ubuntu podporovan\u00fd.<\/p>\n\n\n\n<p>Prvn\u00edm krokem je p\u0159id\u00e1n\u00ed repozit\u00e1\u0159e bal\u00ed\u010dku certbot, kter\u00fd potvrd\u00edte kl\u00e1vesou ENTER:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo add-apt-repository ppa:certbot\/certbot<\/code><\/pre>\n\n\n\n<p>N\u00e1sledn\u011b je pot\u0159ebn\u00fd update repozit\u00e1\u0159\u016f pomoc\u00ed p\u0159\u00edkazu:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt-get update<\/code><\/pre>\n\n\n\n<p>Posledn\u00ed&nbsp;krok je instalace certbot bal\u00ed\u010dku pro webov\u00fd server Apache, pomoc\u00ed p\u0159\u00edkazu:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt-get install python-certbot-apache<\/code><\/pre>\n\n\n\n<p>Pokud v\u0161echno prob\u011bhne bez chybov\u00fdch hl\u00e1\u0161ek,&nbsp;bal\u00edk Certbot je p\u0159ipraven\u00fd.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Z\u00edskan\u00ed SSL certifik\u00e1tu<\/h2>\n\n\n\n<p>SSL certifik\u00e1t za v\u00e1s vygeneruje bal\u00ed\u010dek Certbot. Proces generov\u00e1n\u00ed se skl\u00e1d\u00e1 z:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>ov\u011b\u0159en\u00ed dom\u00e9ny (je pot\u0159eba m\u00edt dom\u00e9nu spr\u00e1vn\u011b nasm\u011brovanou DNS A z\u00e1znamem na VPS)<\/li><li>registrace e-mailu (voliteln\u00e9, je mo\u017en\u00e9 p\u0159esko\u010dit tuto mo\u017enost)<\/li><li>vyd\u00e1n\u00ed certifik\u00e1tu<\/li><\/ul>\n\n\n\n<p>Pro z\u00edsk\u00e1n\u00ed certifik\u00e1tu pro dom\u00e9nu example.com je mo\u017en\u00e9 pou\u017e\u00edt n\u00e1sledovn\u00fd p\u0159\u00edkaz<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">certbot --apache -d example.com<\/pre>\n\n\n\n<p>Nebo p\u0159\u00edkaz bez registrace e-mailu (pozn., mo\u017enost&nbsp;<em>&#8211;register-unsafely-without-email<\/em>&nbsp;je mo\u017en\u00e9 pou\u017e\u00edt i p\u0159i v\u00edce dom\u00e9n\u00e1ch):<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">certbot --apache -d example.com --register-unsafely-without-email<\/pre>\n\n\n\n<p>Na konci procesu je mo\u017en\u00e9 zvolit, jestli si p\u0159ejete, aby Certbot automaticky p\u0159esm\u011brov\u00e1val dopt\u00e1vky na va\u0161i dom\u00e9nu p\u0159es protokol&nbsp;<em>https:\/\/<\/em>&nbsp; (mo\u017enost&nbsp;<strong>1<\/strong>) nebo ponechal aktu\u00e1ln\u00ed nastaven\u00ed (mo\u017enos\u0165&nbsp;<strong>2<\/strong>).&nbsp;N\u00e1sledn\u011b je certifik\u00e1t vygenerovan\u00fd.<\/p>\n\n\n\n<p>V p\u0159\u00edpad\u011b generov\u00e1n\u00ed certifik\u00e1tu pro subdom\u00e9ny je mo\u017en\u00e9 pou\u017e\u00edt n\u00e1sledovn\u00fd form\u00e1t, v\u017edy v\u0161ak pouze s jednou dom\u00e9nou prvn\u00edho stupn\u011b (v tomto p\u0159\u00edpad\u011b example.com):<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">certbot --apache -d example.com -d www.example.com -d subdomain.example.com<\/pre>\n\n\n\n<p>Po \u00fasp\u011b\u0161n\u00e9 instalaci se certifik\u00e1ty nach\u00e1zej\u00ed ve slo\u017ece&nbsp;&nbsp;<code>\/etc\/letsencrypt\/live<\/code><\/p>\n\n\n\n<p>Kontrolu SSL certifik\u00e1tu je mo\u017en\u00e9 vykonat nap\u0159\u00edklad p\u0159es str\u00e1nku:&nbsp;https:\/\/www.sslshopper.com\/ssl-checker.html<br>Doporu\u010dujeme tak\u00e9 otestovat V\u00e1\u0161 web p\u0159es https:\/\/ protokol (otev\u0159en\u00edm https:\/\/example.com\/ v prohl\u00ed\u017ee\u010di).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Automatick\u00e1 obnova certifik\u00e1tu<\/h2>\n\n\n\n<p>Platnost v\u0161ech Let\u2019s Encrypt certifik\u00e1t\u016f je 90 dn\u00ed. Po t\u00e9to dob\u011b je pot\u0159eba certifik\u00e1t obnovit. Certbot bal\u00edk d\u011bl\u00e1 obnovu certifik\u00e1t\u016f automaticky, vytvo\u0159en\u00edm CRON \u00fakolu ve slo\u017ece&nbsp;<code>\/etc\/cron.d<\/code>, kter\u00fd obnovuje v\u0161echny certifik\u00e1ty s platnost\u00ed krat\u0161\u00ed ne\u017e 30 dn\u00ed.<\/p>\n\n\n\n<p>V p\u0159\u00edpad\u011b pot\u0159eby manu\u00e1ln\u00edho obnoven\u00ed certifik\u00e1tu je mo\u017en\u00e9 zkontrolovat funk\u010dnost pomoc\u00ed p\u0159\u00edkazu:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo certbot renew --dry-run<\/code><\/pre>\n\n\n\n<p>Pokud je v\u00fdstup bezchybov\u00fd, je mo\u017en\u00e9 pou\u017e\u00edt p\u0159\u00edkaz bez parametru&nbsp;<em>&#8211;dry-run.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Tento n\u00e1vod ukazuje, jak nainstalovat bal\u00edk certbot a pomoc\u00ed n\u011bho aktivovat Let&#8217;s Encrypt certifik\u00e1t na Virtu\u00e1ln\u00edm Serveru (d\u00e1le VPS). V p\u0159\u00edpad\u011b pot\u0159eby garance SSL certifik\u00e1tu, nebo pot\u0159eby \u00fapravy CSR si prohl\u00e9dn\u011bte na\u0161i\u00a0nab\u00eddku placen\u00fdch SSL certifik\u00e1t\u016f. P\u0159edpoklady Pro \u00fasp\u011b\u0161nou instalaci SSL certifik\u00e1tu podle tohoto n\u00e1vodu je pot\u0159eba splnit nasledovn\u00e1 krit\u00e9ria: VPS&#8230;<\/p>\n","protected":false},"author":3,"template":"","format":"standard","meta":{"footnotes":""},"ht-kb-category":[48],"ht-kb-tag":[],"class_list":["post-972","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-vps"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Let&#039;s Encrypt SSL certifik\u00e1ty na VPS (Ubuntu) - Websupport Centrum n\u00e1pov\u011bdy<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.websupport.cz\/podpora\/kb\/lets-encrypt-ssl-certifikaty-na-vps-ubuntu\/\" \/>\n<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Let&#039;s Encrypt SSL certifik\u00e1ty na VPS (Ubuntu) - Websupport Centrum n\u00e1pov\u011bdy\" \/>\n<meta property=\"og:description\" content=\"Tento n\u00e1vod ukazuje, jak nainstalovat bal\u00edk certbot a pomoc\u00ed n\u011bho aktivovat Let&#8217;s Encrypt certifik\u00e1t na Virtu\u00e1ln\u00edm Serveru (d\u00e1le VPS). V p\u0159\u00edpad\u011b pot\u0159eby garance SSL certifik\u00e1tu, nebo pot\u0159eby \u00fapravy CSR si prohl\u00e9dn\u011bte na\u0161i\u00a0nab\u00eddku placen\u00fdch SSL certifik\u00e1t\u016f. P\u0159edpoklady Pro \u00fasp\u011b\u0161nou instalaci SSL certifik\u00e1tu podle tohoto n\u00e1vodu je pot\u0159eba splnit nasledovn\u00e1 krit\u00e9ria: VPS...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.websupport.cz\/podpora\/kb\/lets-encrypt-ssl-certifikaty-na-vps-ubuntu\/\" \/>\n<meta property=\"og:site_name\" content=\"Websupport Centrum n\u00e1pov\u011bdy\" \/>\n<meta property=\"article:modified_time\" content=\"2021-07-19T08:29:18+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Odhadovan\u00e1 doba \u010dten\u00ed\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minuty\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.websupport.cz\/podpora\/kb\/lets-encrypt-ssl-certifikaty-na-vps-ubuntu\/\",\"url\":\"https:\/\/www.websupport.cz\/podpora\/kb\/lets-encrypt-ssl-certifikaty-na-vps-ubuntu\/\",\"name\":\"Let's Encrypt SSL certifik\u00e1ty na VPS (Ubuntu) - Websupport Centrum n\u00e1pov\u011bdy\",\"isPartOf\":{\"@id\":\"https:\/\/www.websupport.cz\/podpora\/#website\"},\"datePublished\":\"2021-04-29T14:13:56+00:00\",\"dateModified\":\"2021-07-19T08:29:18+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.websupport.cz\/podpora\/kb\/lets-encrypt-ssl-certifikaty-na-vps-ubuntu\/#breadcrumb\"},\"inLanguage\":\"cs\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.websupport.cz\/podpora\/kb\/lets-encrypt-ssl-certifikaty-na-vps-ubuntu\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.websupport.cz\/podpora\/kb\/lets-encrypt-ssl-certifikaty-na-vps-ubuntu\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.websupport.cz\/podpora\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Let&#8217;s Encrypt SSL certifik\u00e1ty na VPS (Ubuntu)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.websupport.cz\/podpora\/#website\",\"url\":\"https:\/\/www.websupport.cz\/podpora\/\",\"name\":\"Websupport Centrum n\u00e1pov\u011bdy\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.websupport.cz\/podpora\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"cs\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Let's Encrypt SSL certifik\u00e1ty na VPS (Ubuntu) - Websupport Centrum n\u00e1pov\u011bdy","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.websupport.cz\/podpora\/kb\/lets-encrypt-ssl-certifikaty-na-vps-ubuntu\/","og_locale":"cs_CZ","og_type":"article","og_title":"Let's Encrypt SSL certifik\u00e1ty na VPS (Ubuntu) - Websupport Centrum n\u00e1pov\u011bdy","og_description":"Tento n\u00e1vod ukazuje, jak nainstalovat bal\u00edk certbot a pomoc\u00ed n\u011bho aktivovat Let&#8217;s Encrypt certifik\u00e1t na Virtu\u00e1ln\u00edm Serveru (d\u00e1le VPS). V p\u0159\u00edpad\u011b pot\u0159eby garance SSL certifik\u00e1tu, nebo pot\u0159eby \u00fapravy CSR si prohl\u00e9dn\u011bte na\u0161i\u00a0nab\u00eddku placen\u00fdch SSL certifik\u00e1t\u016f. P\u0159edpoklady Pro \u00fasp\u011b\u0161nou instalaci SSL certifik\u00e1tu podle tohoto n\u00e1vodu je pot\u0159eba splnit nasledovn\u00e1 krit\u00e9ria: VPS...","og_url":"https:\/\/www.websupport.cz\/podpora\/kb\/lets-encrypt-ssl-certifikaty-na-vps-ubuntu\/","og_site_name":"Websupport Centrum n\u00e1pov\u011bdy","article_modified_time":"2021-07-19T08:29:18+00:00","twitter_card":"summary_large_image","twitter_misc":{"Odhadovan\u00e1 doba \u010dten\u00ed":"2 minuty"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.websupport.cz\/podpora\/kb\/lets-encrypt-ssl-certifikaty-na-vps-ubuntu\/","url":"https:\/\/www.websupport.cz\/podpora\/kb\/lets-encrypt-ssl-certifikaty-na-vps-ubuntu\/","name":"Let's Encrypt SSL certifik\u00e1ty na VPS (Ubuntu) - Websupport Centrum n\u00e1pov\u011bdy","isPartOf":{"@id":"https:\/\/www.websupport.cz\/podpora\/#website"},"datePublished":"2021-04-29T14:13:56+00:00","dateModified":"2021-07-19T08:29:18+00:00","breadcrumb":{"@id":"https:\/\/www.websupport.cz\/podpora\/kb\/lets-encrypt-ssl-certifikaty-na-vps-ubuntu\/#breadcrumb"},"inLanguage":"cs","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.websupport.cz\/podpora\/kb\/lets-encrypt-ssl-certifikaty-na-vps-ubuntu\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.websupport.cz\/podpora\/kb\/lets-encrypt-ssl-certifikaty-na-vps-ubuntu\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.websupport.cz\/podpora\/"},{"@type":"ListItem","position":2,"name":"Let&#8217;s Encrypt SSL certifik\u00e1ty na VPS (Ubuntu)"}]},{"@type":"WebSite","@id":"https:\/\/www.websupport.cz\/podpora\/#website","url":"https:\/\/www.websupport.cz\/podpora\/","name":"Websupport Centrum n\u00e1pov\u011bdy","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.websupport.cz\/podpora\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"cs"}]}},"_links":{"self":[{"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb\/972","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/users\/3"}],"version-history":[{"count":2,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb\/972\/revisions"}],"predecessor-version":[{"id":3140,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb\/972\/revisions\/3140"}],"wp:attachment":[{"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/media?parent=972"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb-category?post=972"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb-tag?post=972"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}