B4X實驗: 使用 Let’s Encrypt 製作免費 SSL Cert 加密網站Https,Hostwindws VPS(B4J Server)

B4X實驗: 使用 Let’s Encrypt 製作免費 SSL Cert 加密網站Https,Hostwindws VPS(B4J Server)
參考資料:
https://andyyou.github.io/2019/04/13/how-to-use-certbot/ 推薦
https://certbot.eff.org/instructions?ws=other&os=debianbuster
https://semialpha.net/advanced/free-ssl-cert-lets-encrypt-certbot/
https://www.b4x.com/android/forum/threads/server-ssl-connections.40130/
https://blog.miniasp.com/post/2021/02/11/Create-SSL-TLS-certificates-from-LetsEncrypt-using-Certbot


1.安裝certbot,Let’s Encrypt
https://certbot.eff.org/instructions?ws=other&os=debianbuster
https://certbot.eff.org/instructions?ws=other&os=ubuntufocal


sudo apt-get install snapd
sudo snap install core; sudo snap refresh core

sudo snap install hello-world

安裝機器人SSL certbot
sudo snap install --classic certbot

on Debian 10 要做這
sudo ln -s /snap/bin/certbot /usr/bin/certbot

安裝憑證
sudo certbot certonly --standalone

測試憑證是否產生
sudo certbot renew --dry-run



let's encrypt 頒發太多次

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Please enter the domain name(s) you would like on your certificate (comma and/or
space separated) (Enter 'c' to cancel): b234.top
Requesting a certificate for b234.top
An unexpected error occurred:
Error creating new order :: too many certificates (5) already issued for this exact set of domains in the last 168 hours: b234.top: see https://letsencrypt.org/docs/rate-limits/
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

https://community.letsencrypt.org/t/duplicate-certificates-and-too-many-certificates-issued/89591


systemctl list-timers 這個指令.可以查出 certbot 是否在排程中...


2.憑證的位置
cd /etc/letsencrypt/live/b234.top


3.密碼123456
openssl pkcs12 -export -out keystore.pkcs12 -in fullchain.pem -inkey privkey.pem
keytool -importkeystore -srckeystore keystore.pkcs12 -srcstoretype PKCS12 -destkeystore keystore.jks

rm keystore.pkcs12

若要查看主機有申請了哪些域名的憑證，及到期日期和天數
sudo certbot certificates

Let's Encrypt 憑證更新:
https://ithelp.ithome.com.tw/articles/10264186?sc=rss.iron

certbot renew --quiet 更新憑證的指令


4.B4J程式碼??加入SSL機制

5.憑證更新 可參考此文
https://yowlab.idv.tw/wordpress/?p=1390

9.aeric
https://www.b4x.com/android/forum/threads/server-using-lets-encrypt-on-ubuntu-vps.124059/


程式碼
https://github.com/eric19740521/b4x20220531