備忘録 失効

お得サーバ1号機をおもちゃにしたいので、一旦初期化します。

lets encryptの証明書を失効しとこう

aptでいれたcertbotでやってたのでそれで適当にする

調査

適当にgoogleみたらrevokeで失効しdeleteでローカルファイル消えるみたいです。ヘーーー

あとはmanよんで適当にやったらいけます。

確認

# certbot certificates
Saving debug log to /var/log/letsencrypt/letsencrypt.log

• - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Found the following certs:
Certificate Name: dotasexsex.com
Domains: dotasexsex.com www.dotasexsex.com
Expiry Date: 2020-08-20 14:33:47+00:00 (VALID: 40 days)
Certificate Path: /etc/letsencrypt/live/dotasexsex.com/fullchain.pem
Private Key Path: /etc/letsencrypt/live/dotasexsex.com/privkey.pem

• - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

失効

# certbot revoke --cert-path=/etc/letsencrypt/live/dotasexsex.com/cert.pem
Saving debug log to /var/log/letsencrypt/letsencrypt.log

• - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Would you like to delete the cert(s) you just revoked?

• - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

(Y)es (recommended)/(N)o: y

• - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Deleted all files relating to certificate dotasexsex.com.

• - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

• - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Congratulations! You have successfully revoked the certificate that was located
at /etc/letsencrypt/live/dotasexsex.com/cert.pem

• - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

確認

# certbot certificates
Saving debug log to /var/log/letsencrypt/letsencrypt.log

• - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

No certs found.

• - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

deleteしなくてもローカルファイルごと消えてましたね。