// API callback
av({"version":"1.0","encoding":"UTF-8","entry":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-875899154744260851.post-2803285499748922812"},"published":{"$t":"2021-03-28T23:29:00.000-07:00"},"updated":{"$t":"2021-03-28T23:29:11.372-07:00"},"category":[{"scheme":"http://www.blogger.com/atom/ns#","term":"System Administrator"}],"title":{"type":"text","$t":"Cara Pasang SSL HTTPS Geratis Berkualitas Pake Certbot Di Centos"},"content":{"type":"html","$t":"\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\u003Cp\u003ECara Pasang SSL HTTPS Geratis Berkualitas Pakai Certbot Di Centos\u003C\/p\u003E\u003Cp\u003E\u003Cbr \/\u003E\u003C\/p\u003E\u003Cp style=\"text-align: justify;\"\u003EMozunote.com- Saat ini Semua situs sudah harus menggunakan sll pada alamat websitenya, dalam mendukung keamanan transaksi data dalam sebuah situs diperlukan sebuah\u0026nbsp; sistem pengamanan yang cukup baik baik untuk sistus website biasa atau situs website yang perlu pengamanan yang tinggi dan perlu memiliki trust atau tingkat kepercayaan yang tinggi pula.\u0026nbsp;\u003C\/p\u003E\u003Cp\u003E\u003Cbr \/\u003E\u003C\/p\u003E\u003Cp style=\"text-align: justify;\"\u003ESSL geratis dan Berbayar pada dasarnya memiliki sistem yang tidak jauh berbeda dan pada umumnya memakai\u0026nbsp;2048 bit key namun ssl bebayar memiliki garansi yang cukup mahal jika terjadi kebocoran data dari layanan ssl mereka dan tetntunya ssl berbayar memiliki tingkat trust atau kepercayaan yang tinggi.\u003C\/p\u003E\u003Cp\u003E\u003Cbr \/\u003E\u003C\/p\u003E\u003Cp\u003EOke untuk teknis instalasi berikut saya tuliskan tahapanya;\u003C\/p\u003E\u003Cp\u003E\u003Cbr \/\u003E\u003C\/p\u003E\u003Cp\u003E1.\u0026nbsp; Pertama masukan terlebih dahulu repositori dari epel ke centos\u003C\/p\u003E\u003Cp\u003E\u003Cspan style=\"font-family: courier;\"\u003Esudo yum install epel-release\u003C\/span\u003E\u003C\/p\u003E\u003Cdiv\u003E\u003Cbr \/\u003E\u003C\/div\u003E\u003Cdiv\u003Ekemudian Baru Instal Certbot pake yum\u003C\/div\u003E\u003Cdiv\u003E\u003Cbr \/\u003E\u003C\/div\u003E\u003Cdiv\u003E\u003Cdiv\u003E\u003Cspan style=\"font-family: courier;\"\u003Esudo yum install certbot python2-certbot-apache mod_ssl\u003C\/span\u003E\u003C\/div\u003E\u003C\/div\u003E\u003Cdiv\u003E\u003Cbr \/\u003E\u003C\/div\u003E\u003Cdiv\u003E\u003Cbr \/\u003E\u003C\/div\u003E\u003Cdiv\u003E2. Setelah selesai install certbot kita akan daftarkan alamat website kita\u0026nbsp; seperti contoh.com atau www.contoh.com, kita bisa daftarkan keduanya langsung atau salahsatunya saja contohnya kita daftarkan contoh.com dan alamat www.contoh.com akan otomatis di redirect ke alamat contoh.com dalam https.\u003C\/div\u003E\u003Cdiv\u003E\u003Cbr \/\u003E\u003C\/div\u003E\u003Cdiv\u003Ecara instal untuk satu buah alamat\u0026nbsp;\u003C\/div\u003E\u003Cdiv\u003E\u003Cbr \/\u003E\u003C\/div\u003E\u003Cp\u003E\u003Cspan style=\"font-family: courier;\"\u003Esudo certbot --apache -d contoh.com\u003C\/span\u003E\u003C\/p\u003E\u003Cp\u003E\u003Cbr \/\u003E\u003C\/p\u003E\u003Cp\u003ECara Instal Untuk dua alamat langsung\u0026nbsp;\u003C\/p\u003E\u003Cp\u003E\u003Cspan style=\"font-family: courier;\"\u003Esudo certbot --apache -d contoh.com -d www.contoh.com\u003C\/span\u003E\u003C\/p\u003E\u003Cp\u003E\u003Cbr \/\u003E\u003C\/p\u003E\u003Cp\u003E3. Dalam Proses pendaftaran email tersebut akan muncul step demi step data yang harus kita lengkapi, seperti pengisian email, konfigurasi ssl dalam webserver apache dan lainya.\u003C\/p\u003E\u003Cp\u003Econtoh Pilihan agar setiap alamat kita dipanggil maka akan dialihkan ke alamat https secara otomatis.\u003C\/p\u003E\u003Cpre class=\"code-pre \" style=\"background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 3px; box-sizing: border-box; color: #545454; direction: ltr; font-family: Consolas, Monaco, \u0026quot;Andale Mono\u0026quot;, \u0026quot;Ubuntu Mono\u0026quot;, monospace; font-size: 14px; hyphens: none; line-height: 1.4em; margin: 1rem auto; overflow-wrap: normal; overflow: auto; padding: 1rem; text-shadow: none; width: 745px; word-break: normal;\"\u003E\u003Ccode style=\"background: 0px 0px; border-radius: 3px; box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, \u0026quot;Andale Mono\u0026quot;, \u0026quot;Ubuntu Mono\u0026quot;, monospace; hyphens: none; line-height: 22px; margin: 0px; padding: 0px; text-shadow: none; word-break: normal; word-spacing: normal;\"\u003E\u003Cdiv class=\"secondary-code-label \" style=\"box-sizing: border-box; color: rgba(0, 0, 0, 0.3); margin-bottom: 4px;\" title=\"Output\"\u003EOutput\u003C\/div\u003EPlease choose whether or not to redirect HTTP traffic to HTTPS, removing HTTP access.\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n1: No redirect - Make no further changes to the webserver configuration.\n2: Redirect - Make all requests redirect to secure HTTPS access. Choose this for\nnew sites, or if you're confident your site works on HTTPS. You can undo this\nchange by editing your web server's configuration.\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nSelect the appropriate number [1-2] then [enter] (press 'c' to cancel):\u003C\/code\u003E\u003Ccode style=\"background-attachment: initial; background-clip: initial; background-color: rgba(242, 201, 76, 0.35); background-image: initial; background-origin: initial; background-position: 0px 0px; background-repeat: initial; background-size: initial; border-radius: 3px; box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, \u0026quot;Andale Mono\u0026quot;, \u0026quot;Ubuntu Mono\u0026quot;, monospace; hyphens: none; line-height: 22px; margin: 0px; padding: 0px; text-shadow: none; word-break: normal; word-spacing: normal;\"\u003E2\u003C\/code\u003E\u003C\/pre\u003E\u003Cp\u003EJika Instalasi berjalana dengan benar dan berhasil, maka akan muncul konfirmasi seperti contoh dibawah;\u003C\/p\u003E\u003Cp\u003E\u003Cbr \/\u003E\u003C\/p\u003E\u003Cpre class=\"code-pre \" style=\"background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 3px; box-sizing: border-box; color: #545454; direction: ltr; font-family: Consolas, Monaco, \u0026quot;Andale Mono\u0026quot;, \u0026quot;Ubuntu Mono\u0026quot;, monospace; font-size: 14px; hyphens: none; line-height: 1.4em; margin: 1rem auto; overflow-wrap: normal; overflow: auto; padding: 1rem; text-shadow: none; width: 745px; word-break: normal;\"\u003E\u003Ccode style=\"background: 0px 0px; border-radius: 3px; box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, \u0026quot;Andale Mono\u0026quot;, \u0026quot;Ubuntu Mono\u0026quot;, monospace; hyphens: none; line-height: 22px; margin: 0px; padding: 0px; text-shadow: none; word-break: normal; word-spacing: normal;\"\u003E\u003Cdiv class=\"secondary-code-label \" style=\"box-sizing: border-box; color: rgba(0, 0, 0, 0.3); margin-bottom: 4px;\" title=\"Output\"\u003EOutput\u003C\/div\u003EIMPORTANT NOTES:\n - Congratulations! Your certificate and chain have been saved at:\n   \/etc\/letsencrypt\/live\/\u003Cspan class=\"highlight\" style=\"background: rgba(242, 201, 76, 0.35); border-radius: 3px; box-sizing: border-box; color: inherit; display: inline-block; margin: 1px 0px; padding: 0px 2px;\"\u003Econtoh.com\u003C\/span\u003E\/fullchain.pem\n   Your key file has been saved at:\n   \/etc\/letsencrypt\/live\/contoh.com\u003C\/code\u003E\u003Ccode style=\"background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: 0px 0px; background-repeat: initial; background-size: initial; border-radius: 3px; box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, \u0026quot;Andale Mono\u0026quot;, \u0026quot;Ubuntu Mono\u0026quot;, monospace; hyphens: none; line-height: 22px; margin: 0px; padding: 0px; text-shadow: none; word-break: normal; word-spacing: normal;\"\u003E\/privkey.pem\n   Your cert will expire on \u003Cspan class=\"highlight\" style=\"background: rgba(242, 201, 76, 0.35); border-radius: 3px; box-sizing: border-box; color: inherit; display: inline-block; margin: 1px 0px; padding: 0px 2px;\"\u003E2019-08-14\u003C\/span\u003E. To obtain a new or tweaked\n   version of this certificate in the future, simply run certbot again\n   with the \"certonly\" option. To non-interactively renew *all* of\n   your certificates, run \"certbot renew\"\n - If you like Certbot, please consider supporting our work by:\n\n   Donating to ISRG \/ Let's Encrypt:   https:\/\/letsencrypt.org\/donate\n   Donating to EFF:                    https:\/\/eff.org\/donate-le\u003C\/code\u003E\u003C\/pre\u003E\u003Cp\u003E\u003Cbr \/\u003E\u003C\/p\u003E\u003Cp\u003Edisana dituliskan alamat tempat penyimpanan dari key ssl yang sudah di generate oleh sistem. jika adamasalah dengan virtual host di web server tambahkan code berikut di httpd.conf di baris paling bawah.\u003C\/p\u003E\u003Cp\u003E\u003Cbr \/\u003E\u003C\/p\u003E\u003Cp\u003E\u003Cspan style=\"font-family: courier; font-size: x-small;\"\u003E\u0026lt;VirtualHost *:80\u0026gt;\u003C\/span\u003E\u003C\/p\u003E\u003Cp\u003E\u003Cspan style=\"font-family: courier; font-size: x-small;\"\u003E\u0026nbsp; ServerName Contoh.com\u003C\/span\u003E\u003C\/p\u003E\u003Cp\u003E\u003Cspan style=\"font-family: courier; font-size: x-small;\"\u003E\u0026nbsp; ServerAlias www.Contoh.com\u003C\/span\u003E\u003C\/p\u003E\u003Cp\u003E\u003Cspan style=\"font-family: courier; font-size: x-small;\"\u003E\u0026nbsp; DocumentRoot \/var\/www\/html\u003C\/span\u003E\u003C\/p\u003E\u003Cp\u003E\u003Cspan style=\"font-family: courier; font-size: x-small;\"\u003E\u0026nbsp; \u0026nbsp; \u0026lt;Directory \/var\/www\/html\u0026gt;\u003C\/span\u003E\u003C\/p\u003E\u003Cp\u003E\u003Cspan style=\"font-family: courier; font-size: x-small;\"\u003E\u0026nbsp; \u0026nbsp; \u0026nbsp; Options -Indexes +FollowSymLinks\u003C\/span\u003E\u003C\/p\u003E\u003Cp\u003E\u003Cspan style=\"font-family: courier; font-size: x-small;\"\u003E\u0026nbsp; \u0026nbsp; \u0026nbsp; AllowOverride All\u003C\/span\u003E\u003C\/p\u003E\u003Cp\u003E\u003Cspan style=\"font-family: courier; font-size: x-small;\"\u003E\u0026nbsp; \u0026lt;\/Directory\u0026gt;\u003C\/span\u003E\u003C\/p\u003E\u003Cp\u003E\u003Cspan style=\"font-family: courier; font-size: x-small;\"\u003E\u0026nbsp; ErrorLog \/var\/log\/httpd\/www.Contoh.com.net-error.log\u003C\/span\u003E\u003C\/p\u003E\u003Cp\u003E\u003Cspan style=\"font-family: courier; font-size: x-small;\"\u003E\u0026nbsp; CustomLog \/var\/log\/httpd\/www.Contoh.com.log combined\u003C\/span\u003E\u003C\/p\u003E\u003Cp\u003E\u003Cspan style=\"font-family: courier; font-size: x-small;\"\u003E\u0026lt;\/VirtualHost\u0026gt;\u003C\/span\u003E\u003C\/p\u003E\u003Cp\u003E\u003Cbr \/\u003E\u003C\/p\u003E\u003Cp\u003E4. Tahapan Selanjutnya adalah kita test alamat ssl yang sudah kita buat tadi melalui tool situs ssl lab\u0026nbsp;\u003C\/p\u003E\u003Cp\u003Ehttps:\/\/www.ssllabs.com\/ssltest\/analyze.html?d=contoh.com\u003C\/p\u003E\u003Cp\u003ENIlai A sudah merupakan Nilai yang sangat baik untuk pengetesan SSL\u003C\/p\u003E\u003Cdiv class=\"separator\" style=\"clear: both; text-align: center;\"\u003E\u003Ca href=\"https:\/\/1.bp.blogspot.com\/-E8n3kdlJZ0M\/YGFdwXthmqI\/AAAAAAAACX8\/aHwS2mNpTHYiKTqaBHi4Pqs6Q9FIamf1wCNcBGAsYHQ\/s1548\/Mozunote.com-testssl.jpg\" imageanchor=\"1\" style=\"margin-left: 1em; margin-right: 1em;\"\u003E\u003Cimg border=\"0\" data-original-height=\"973\" data-original-width=\"1548\" height=\"402\" src=\"https:\/\/1.bp.blogspot.com\/-E8n3kdlJZ0M\/YGFdwXthmqI\/AAAAAAAACX8\/aHwS2mNpTHYiKTqaBHi4Pqs6Q9FIamf1wCNcBGAsYHQ\/w640-h402\/Mozunote.com-testssl.jpg\" width=\"640\" \/\u003E\u003C\/a\u003E\u003C\/div\u003E\u003Cbr \/\u003E\u003Cp\u003E\u003Cbr \/\u003E\u003C\/p\u003E\u003Cp style=\"text-align: justify;\"\u003E5. Terakhir adalah pastikan agar ssl akmu selalu di perbaharui karena ssl geratisan ini berlaku sekita 60 hari, namun kamu jangan khawatir karena akan bisa di renew atau perbaharui secara otomatis dengan menggunakan cron job nya si linux berikut caranya ;\u003C\/p\u003E\u003Cp style=\"text-align: justify;\"\u003Emasuk ke\u0026nbsp; \u003Cspan style=\"font-family: courier; font-size: x-small;\"\u003Ecrontab -e\u0026nbsp;\u003C\/span\u003E\u003C\/p\u003E\u003Cp style=\"text-align: justify;\"\u003Ekemudian masukan code berikut :\u003C\/p\u003E\u003Cp style=\"text-align: justify;\"\u003E\u003Cbr \/\u003E\u003C\/p\u003E\u003Cp style=\"text-align: justify;\"\u003E\u003Cspan style=\"font-family: courier; font-size: x-small;\"\u003E0 0 * * 1 \/usr\/bin\/certbot renew \u0026gt;\u0026gt; \/var\/log\/sslrenew.log\u003C\/span\u003E\u003C\/p\u003E\u003Cp style=\"text-align: justify;\"\u003E\u003Cbr \/\u003E\u003C\/p\u003E\u003Cp style=\"text-align: justify;\"\u003Epada dasarnya code untuk cronjob bisa kita setting sesuai dengan kebutuhan untuk setingan sederhanan ini saya buat\u0026nbsp;aktif setiap Senin pada tengah malam dan log disimpan pada \/var\/log\/sslrenew.log\u003C\/p\u003E\u003Cp style=\"text-align: justify;\"\u003E\u003Cbr \/\u003E\u003C\/p\u003E\u003Cp style=\"text-align: justify;\"\u003E\u003Cbr \/\u003E\u003C\/p\u003E\u003Cp style=\"text-align: justify;\"\u003E\u003Cbr \/\u003E\u003C\/p\u003E\u003Cp\u003E\u003Cbr \/\u003E\u003C\/p\u003E"},"link":[{"rel":"replies","type":"application/atom+xml","href":"https:\/\/www.mozunote.com\/feeds\/2803285499748922812\/comments\/default","title":"Post Comments"},{"rel":"replies","type":"text/html","href":"https:\/\/www.mozunote.com\/2021\/03\/cara-pasang-ssl-https-geratis.html#comment-form","title":"0 Comments"},{"rel":"edit","type":"application/atom+xml","href":"https:\/\/www.blogger.com\/feeds\/875899154744260851\/posts\/default\/2803285499748922812"},{"rel":"self","type":"application/atom+xml","href":"https:\/\/www.blogger.com\/feeds\/875899154744260851\/posts\/default\/2803285499748922812"},{"rel":"alternate","type":"text/html","href":"https:\/\/www.mozunote.com\/2021\/03\/cara-pasang-ssl-https-geratis.html","title":"Cara Pasang SSL HTTPS Geratis Berkualitas Pake Certbot Di Centos"}],"author":[{"name":{"$t":"Mozu"},"uri":{"$t":"http:\/\/www.blogger.com\/profile\/15656279653354976812"},"email":{"$t":"noreply@blogger.com"},"gd$image":{"rel":"http://schemas.google.com/g/2005#thumbnail","width":"16","height":"16","src":"https:\/\/img1.blogblog.com\/img\/b16-rounded.gif"}}],"media$thumbnail":{"xmlns$media":"http://search.yahoo.com/mrss/","url":"https:\/\/1.bp.blogspot.com\/-E8n3kdlJZ0M\/YGFdwXthmqI\/AAAAAAAACX8\/aHwS2mNpTHYiKTqaBHi4Pqs6Q9FIamf1wCNcBGAsYHQ\/s72-w640-h402-c\/Mozunote.com-testssl.jpg","height":"72","width":"72"},"thr$total":{"$t":"0"}}});