{"id":14613,"date":"2020-06-22T12:59:58","date_gmt":"2020-06-22T10:59:58","guid":{"rendered":"https:\/\/www.websupport.sk\/podpora\/?post_type=ht_kb&p=14613"},"modified":"2020-06-22T12:59:58","modified_gmt":"2020-06-22T10:59:58","slug":"ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https","status":"publish","type":"ht_kb","link":"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/","title":{"rendered":"Ako v Ubuntu 20.04 LTS nain\u0161talova\u0165 Let’s Encrypt TLS\/SSL pre Nginx (HTTPS)"},"content":{"rendered":"\n

Ak na Virtu\u00e1lnom serveri<\/a> (VPS) m\u00e1me nain\u0161talovan\u00fd LEMP<\/a>, ost\u00e1va e\u0161te nastavi\u0165 z\u00e1kladn\u00fa bezpe\u010dnos\u0165 pri zobrazen\u00ed webov\u00fdch str\u00e1nok cez protokol HTTPS<\/strong>. Bezplatn\u00e9 a plne automatizovan\u00e9 rie\u0161enie existuje pod n\u00e1zvom Let’s Encrypt SSL<\/strong>.\u00a0<\/p>\n\n\n\n

N\u00e1vod ako v Ubuntu Linux 20.04 LTS nain\u0161talova\u0165 Nginx, MySQL a PHP (LEMP)<\/a><\/p>\n\n\n\n

Let’s Encrypt<\/a> (LE) je certifika\u010dn\u00e1 autorita, ktor\u00e1 zadarmo automatizuje nie \u00faplne jednoduch\u00fd proces ru\u010dn\u00e9ho vytv\u00e1rania, overovania, podpisovania, in\u0161tal\u00e1cie a obnovovania certifik\u00e1tu. Cie\u013eom je, aby bolo \u0161ifrovan\u00e9 spojenie cez protokol TLS v r\u00e1mci webov\u00fdch str\u00e1nok (WWW) \u013eahko, r\u00fdchlo a bezplatne aplikovate\u013en\u00e9. D\u00f4veryhodnos\u0165 tejto slu\u017eby potvrdzuj\u00fa aj zainteresovan\u00e9 strany, ako napr. Google, Facebook, Mozilla Foundation alebo Cisco.<\/p>\n\n\n\n

Registrujeme dom\u00e9nu a nastavujeme DNS z\u00e1znamy<\/h2>\n\n\n\n

Aby sme mohli pomocou Let’s Encrypt z\u00edska\u0165 bezpe\u010dnostn\u00fd certifik\u00e1t, najsk\u00f4r mus\u00edme registrova\u0165 dom\u00e9nu<\/a>, preto\u017ee pre IP adresu certifik\u00e1t od Let’s Encrypt zatia\u013e nie je mo\u017en\u00e9 vytvori\u0165.<\/p>\n\n\n\n

Po registr\u00e1cii dom\u00e9ny e\u0161te mus\u00edme prepoji\u0165 IP adresu so zaregistrovanou dom\u00e9nou. Uprav\u00edme DNS z\u00e1znamy<\/a> tak, aby sa po zadan\u00ed n\u00e1zvu dom\u00e9ny do webov\u00e9ho prehliada\u010da zobrazil obsah webovej str\u00e1nky zatia\u013e cez nezabezpe\u010den\u00e9 spojenie protokolu HTTP:<\/p>\n\n\n\n

http:\/\/nazov-domeny.sk<\/pre>\n\n\n\n
Ako pr\u00edklad v n\u00e1vode budeme uv\u00e1dza\u0165 dom\u00e9nu nazov-domeny.sk<\/code><\/p>\n\n\n\n
In\u0161talujeme Let’s Encrypt certifik\u00e1t (Certbot)<\/h2>\n\n\n\n
V prvom rade je potrebn\u00e9 zabezpe\u010di\u0165 aktu\u00e1lnos\u0165 v\u0161etk\u00fdch bal\u00edkov. Nain\u0161talujeme teda v\u0161etok updatovan\u00fd softv\u00e9r pomocou dvoch pr\u00edkazov v jednej d\u00e1vke:<\/p>\n\n\n\n
sudo apt update && sudo apt upgrade<\/pre>\n\n\n\n
Ak syst\u00e9m n\u00e1jde aktualizovate\u013en\u00e9 bal\u00ed\u010dky, takto sa op\u00fdta, \u010di ich chcete za\u010da\u0165 in\u0161talova\u0165:<\/p>\n\n\n\n
Do you want to continue? [Y\/n]<\/em><\/pre>\n\n\n\n
Stla\u010dte kl\u00e1ves y<\/code> ak chcete za\u010da\u0165 aktualiza\u010dn\u00fd proces alebo tla\u010didlo n<\/code>, ak aktualizova\u0165 nechcete. N\u00e1sledne stla\u010dte kl\u00e1ves Enter<\/code>.<\/p>\n\n\n\n
Aby sme mohli slu\u017eby certifika\u010dnej autority Let’s Encrypt vyu\u017e\u00edva\u0165, mus\u00edme nain\u0161talova\u0165 n\u00e1stroj Certbot:<\/p>\n\n\n\n
sudo apt install certbot python3-certbot-nginx<\/pre>\n\n\n\n
Stla\u010d\u00edme kl\u00e1ves y<\/code> a n\u00e1sledne kl\u00e1ves Enter<\/code> a po\u010dk\u00e1me na dokon\u010denie in\u0161tal\u00e1cie.<\/p>\n\n\n\n
Jedin\u00fdm pr\u00edkazom z\u00edskame certifik\u00e1t a nastav\u00edme Nginx tak, aby webov\u00e9 str\u00e1nky dok\u00e1zal zobrazova\u0165 cez zabezpe\u010den\u00fd protokol HTTPS:<\/p>\n\n\n\n
sudo certbot --nginx<\/pre>\n\n\n\n
V procese nastavovania zad\u00e1me e-mailov\u00fa adresu administr\u00e1tora, mus\u00edme s\u00fahlasi\u0165 s podmienkami pou\u017e\u00edvania slu\u017eby (kl\u00e1ves a<\/code> + Enter<\/code>), rad\u0161ej nezverejn\u00edme e-mailov\u00fa adresu administr\u00e1tora (kl\u00e1ves n<\/code> + Enter<\/code>), nap\u00ed\u0161eme n\u00e1zov vlastnenej dom\u00e9ny (nie\u010do v tvare nazov-domeny.sk) a nech\u00e1me presmerova\u0165 HTTP na bezpe\u010dn\u00fd HTTPS (\u010d\u00edslo 2<\/code> + Enter<\/code>).<\/p>\n\n\n\n
Testujeme funk\u010dnos\u0165 zabezpe\u010den\u00e9ho spojenia<\/h2>\n\n\n\n
Ost\u00e1va u\u017e iba otestova\u0165, \u010di sa cel\u00fd proces in\u0161talovania bezpe\u010dnostn\u00e9ho certifik\u00e1tu dokon\u010dil spr\u00e1vne. Vo webovom prehliada\u010di si teda na\u010d\u00edtame str\u00e1nku cez protokol HTTPS:<\/p>\n\n\n\n
https:\/\/nazov-domeny.sk<\/pre>\n\n\n\n
V\u00fdsledok by mal hovori\u0165 o tom, \u017ee sa webov\u00e1 str\u00e1nka na\u010d\u00edtala cez zabezpe\u010den\u00e9 spojenie a m\u00e1 platn\u00fd certifik\u00e1t. Vo webovom prehliada\u010di kliknite na ikonu zamknut\u00e9ho visiaceho z\u00e1mku hore v\u013eavo:<\/p>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n
Zhrnutie<\/h2>\n\n\n\n
Nain\u0161talovali sme si n\u00e1stroj Certbot, v\u010faka ktor\u00e9mu sme zdarma z\u00edskali bezpe\u010dnostn\u00fd certifik\u00e1t pre dom\u00e9nu od slu\u017eby Let’s Encrypt. Odteraz m\u00f4\u017eeme webov\u00e9 str\u00e1nky zobrazova\u0165 bezpe\u010dne cez protokol HTTPS, pri\u010dom sa nemus\u00edme stara\u0165 o to, \u010di a kedy certifik\u00e1t expiruje, preto\u017ee sa automaticky obnovuje.<\/p>\n","protected":false},"excerpt":{"rendered":"
Ak na Virtu\u00e1lnom serveri (VPS) m\u00e1me nain\u0161talovan\u00fd LEMP, ost\u00e1va e\u0161te nastavi\u0165 z\u00e1kladn\u00fa bezpe\u010dnos\u0165 pri zobrazen\u00ed webov\u00fdch str\u00e1nok cez protokol HTTPS. Bezplatn\u00e9 a plne automatizovan\u00e9 rie\u0161enie existuje pod n\u00e1zvom Let’s Encrypt SSL.\u00a0 Let’s Encrypt (LE) je certifika\u010dn\u00e1 autorita, ktor\u00e1 zadarmo automatizuje nie \u00faplne jednoduch\u00fd proces ru\u010dn\u00e9ho vytv\u00e1rania, overovania, podpisovania, in\u0161tal\u00e1cie a…<\/p>\n","protected":false},"author":28,"template":"","format":"standard","meta":{"footnotes":""},"ht-kb-category":[52],"ht-kb-tag":[336,162,255,126,363,198,354,357],"class_list":["post-14613","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-vps","ht_kb_tag-cli","ht_kb_tag-lets-encrypt","ht_kb_tag-nginx","ht_kb_tag-ssl","ht_kb_tag-tls","ht_kb_tag-ubuntu","ht_kb_tag-ubuntu-20-04-lts","ht_kb_tag-webserver"],"yoast_head":"\nAko v Ubuntu 20.04 LTS nain\u0161talova\u0165 Let's Encrypt TLS\/SSL pre Nginx (HTTPS) - Websupport centrum podpory<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/\" \/>\n<meta property=\"og:locale\" content=\"sk_SK\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ako v Ubuntu 20.04 LTS nain\u0161talova\u0165 Let's Encrypt TLS\/SSL pre Nginx (HTTPS) - Websupport centrum podpory\" \/>\n<meta property=\"og:description\" content=\"Ak na Virtu\u00e1lnom serveri (VPS) m\u00e1me nain\u0161talovan\u00fd LEMP, ost\u00e1va e\u0161te nastavi\u0165 z\u00e1kladn\u00fa bezpe\u010dnos\u0165 pri zobrazen\u00ed webov\u00fdch str\u00e1nok cez protokol HTTPS. Bezplatn\u00e9 a plne automatizovan\u00e9 rie\u0161enie existuje pod n\u00e1zvom Let’s Encrypt SSL.\u00a0 Let’s Encrypt (LE) je certifika\u010dn\u00e1 autorita, ktor\u00e1 zadarmo automatizuje nie \u00faplne jednoduch\u00fd proces ru\u010dn\u00e9ho vytv\u00e1rania, overovania, podpisovania, in\u0161tal\u00e1cie a...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/\" \/>\n<meta property=\"og:site_name\" content=\"Websupport centrum podpory\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2020\/06\/Screenshot-2020-06-22-at-12.45.46.png\" \/>\n\t<meta property=\"og:image:width\" content=\"449\" \/>\n\t<meta property=\"og:image:height\" content=\"372\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Predpokladan\u00fd \u010das \u010d\u00edtania\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 min\u00faty\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/\",\"url\":\"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/\",\"name\":\"Ako v Ubuntu 20.04 LTS nain\u0161talova\u0165 Let's Encrypt TLS\/SSL pre Nginx (HTTPS) - Websupport centrum podpory\",\"isPartOf\":{\"@id\":\"https:\/\/www.websupport.sk\/podpora\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2020\/06\/Screenshot-2020-06-22-at-12.45.46.png\",\"datePublished\":\"2020-06-22T10:59:58+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/#breadcrumb\"},\"inLanguage\":\"sk-SK\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"sk-SK\",\"@id\":\"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/#primaryimage\",\"url\":\"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2020\/06\/Screenshot-2020-06-22-at-12.45.46.png\",\"contentUrl\":\"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2020\/06\/Screenshot-2020-06-22-at-12.45.46.png\",\"width\":449,\"height\":372},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.websupport.sk\/podpora\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ako v Ubuntu 20.04 LTS nain\u0161talova\u0165 Let’s Encrypt TLS\/SSL pre Nginx (HTTPS)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.websupport.sk\/podpora\/#website\",\"url\":\"https:\/\/www.websupport.sk\/podpora\/\",\"name\":\"Websupport centrum podpory\",\"description\":\"Radi v\u00e1m pom\u00f4\u017eeme s va\u0161im probl\u00e9mom\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.websupport.sk\/podpora\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"sk-SK\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ako v Ubuntu 20.04 LTS nain\u0161talova\u0165 Let's Encrypt TLS\/SSL pre Nginx (HTTPS) - Websupport centrum podpory","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/","og_locale":"sk_SK","og_type":"article","og_title":"Ako v Ubuntu 20.04 LTS nain\u0161talova\u0165 Let's Encrypt TLS\/SSL pre Nginx (HTTPS) - Websupport centrum podpory","og_description":"Ak na Virtu\u00e1lnom serveri (VPS) m\u00e1me nain\u0161talovan\u00fd LEMP, ost\u00e1va e\u0161te nastavi\u0165 z\u00e1kladn\u00fa bezpe\u010dnos\u0165 pri zobrazen\u00ed webov\u00fdch str\u00e1nok cez protokol HTTPS. Bezplatn\u00e9 a plne automatizovan\u00e9 rie\u0161enie existuje pod n\u00e1zvom Let’s Encrypt SSL.\u00a0 Let’s Encrypt (LE) je certifika\u010dn\u00e1 autorita, ktor\u00e1 zadarmo automatizuje nie \u00faplne jednoduch\u00fd proces ru\u010dn\u00e9ho vytv\u00e1rania, overovania, podpisovania, in\u0161tal\u00e1cie a...","og_url":"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/","og_site_name":"Websupport centrum podpory","og_image":[{"width":449,"height":372,"url":"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2020\/06\/Screenshot-2020-06-22-at-12.45.46.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Predpokladan\u00fd \u010das \u010d\u00edtania":"3 min\u00faty"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/","url":"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/","name":"Ako v Ubuntu 20.04 LTS nain\u0161talova\u0165 Let's Encrypt TLS\/SSL pre Nginx (HTTPS) - Websupport centrum podpory","isPartOf":{"@id":"https:\/\/www.websupport.sk\/podpora\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/#primaryimage"},"image":{"@id":"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/#primaryimage"},"thumbnailUrl":"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2020\/06\/Screenshot-2020-06-22-at-12.45.46.png","datePublished":"2020-06-22T10:59:58+00:00","breadcrumb":{"@id":"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/#breadcrumb"},"inLanguage":"sk-SK","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/"]}]},{"@type":"ImageObject","inLanguage":"sk-SK","@id":"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/#primaryimage","url":"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2020\/06\/Screenshot-2020-06-22-at-12.45.46.png","contentUrl":"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2020\/06\/Screenshot-2020-06-22-at-12.45.46.png","width":449,"height":372},{"@type":"BreadcrumbList","@id":"https:\/\/www.websupport.sk\/podpora\/kb\/ubuntu-20-04-lts-lets-encrypt-tls-ssl-pre-nginx-https\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.websupport.sk\/podpora\/"},{"@type":"ListItem","position":2,"name":"Ako v Ubuntu 20.04 LTS nain\u0161talova\u0165 Let’s Encrypt TLS\/SSL pre Nginx (HTTPS)"}]},{"@type":"WebSite","@id":"https:\/\/www.websupport.sk\/podpora\/#website","url":"https:\/\/www.websupport.sk\/podpora\/","name":"Websupport centrum podpory","description":"Radi v\u00e1m pom\u00f4\u017eeme s va\u0161im probl\u00e9mom","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.websupport.sk\/podpora\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"sk-SK"}]}},"_links":{"self":[{"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/ht-kb\/14613","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/users\/28"}],"version-history":[{"count":3,"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/ht-kb\/14613\/revisions"}],"predecessor-version":[{"id":14634,"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/ht-kb\/14613\/revisions\/14634"}],"wp:attachment":[{"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/media?parent=14613"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/ht-kb-category?post=14613"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/ht-kb-tag?post=14613"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}