== FreeBSD/letsencrypt/certbot/log-2017-08 ==
[[../certbot]]で証明書を得る。

port 80 を listenしているhttpd, poundを停止してから、実行する。-- ToshinoriMaeno <<DateTime(2017-08-28T19:28:17+0900)>>

得られた　/usr/local/etc/letsencrypt/live/moin.qmail.jp-0001/fullchain.pem　などを
　/service/poundの下にコピーして、pound.cfgに反映する。
-- ToshinoriMaeno <<DateTime(2017-08-28T19:39:47+0900)>>

# certbot certonly --standalone -d moin.qmail.jp
{{{
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
Cert is due for renewal, auto-renewing...
Renewing an existing certificate
Performing the following challenges:
tls-sni-01 challenge for moin.qmail.jp
Waiting for verification...
Cleaning up challenges
Generating key (2048 bits): /usr/local/etc/letsencrypt/keys/0001_key-certbot.pem
Creating CSR: /usr/local/etc/letsencrypt/csr/0001_csr-certbot.pem

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at
   /usr/local/etc/letsencrypt/live/moin.qmail.jp-0001/fullchain.pem.
   Your cert will expire on 2017-11-26. To obtain a new or tweaked
   version of this certificate in the future, simply run certbot
   again. To non-interactively renew *all* of your certificates, run
   "certbot renew"
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le
}}}