\uc880 \ub354 \ubc94\uc6a9\uc801\uc73c\ub85c VPN\uc5f0\uacb0, AD\uc778\uc99d \ub4f1 \uc5ec\ub7ec\uac00\uc9c0\uc5d0 \uc0ac\uc6a9\ud560\ub824\uba74 \uac00\uaca9\uc774 \ub354 \uc62c\ub77c\uac00\ub294 \uad6c\uc870\uc774\ub2e4.
\uac1c\uc778\uc801\uc73c\ub85c \ub3c4\uba54\uc778\ub3c4 \uc81c\uc77c \uc2fc\uac70\ub85c 1\ub144\ub9c8\ub2e4 \uba54\ub69c\uae30 \uc9d3\uc744 \ud558\ub294 \uc785\uc7a5\uc5d0\uc11c \ube44\ud6a8\uc728\uc801\uc774\ub2e4.
\uc0ac\ub78c\uc0ac\ub294 \uac83\uc774 \ub2e4 \ubc29\ubc95\uc774 \uc788\ub4ef\uc774 \uac1c\uc778\uc5d0\uac8c 90\uc77c\uc9dc\ub9ac \ubb34\ub8cc\uc778\uc99d\uc11c\ub97c \uc81c\uacf5\ud558\ub294 \uae30\uad00\uc774 \uc788\ub2e4.
\ubb3c\ub860 90\uc77c\ub9c8\ub2e4 \uac31\uc2e0\ud558\ub294 \uac83\ub3c4 \uac00\ub2a5\ud558\ub2e4. (Let’s Encrypt : https:\/\/letsencrypt.org\/ko\/<\/a>)
\uc124\uce58\ubc29\ubc95\ub3c4 \ub108\ubb34 \uc26c\uc6cc\uc11c \uad8c\uc7a5\ud55c\ub2e4.
<\/p>\n\n\n\n
![\"\"](\"http:\/\/www.iwgh.my\/wp-content\/uploads\/2025\/08\/image-2.png\")
<\/figure>\n\n\n\n
<\/p>\n\n\n\n
1. certbot \uc124\uce58<\/h2>\n\n\n\n
# apt install certbot python3-certbot-apache
\uc6b0\ubd84\ud22c\uc5d0\uc11c\ub294 \uac04\ub2e8\ud558\uac8c certbot, python3-certbot-apache \ub97c \uc124\uce58\ud558\uba74 \uac00\ub2a5.
\uc6f9\uc0ac\uc774\ud2b8\uc5d0\uc11c \ubcc4\ub3c4\ub85c \uc778\uc99d\uc11c \ubc1c\uae09\ud558\uace0 \uc6f9\uc11c\ubc84\uc5d0 \ub4f1\ub85d\ub3c4 \uac00\ub2a5\ud558\uc9c0\ub9cc, \uc6f9\uc11c\ubc84\uc5d0\uc11c \uc2e4\ud589\uc2dc \uc790\ub3d9\uc73c\ub85c ssl\uc6a9 conf \uae4c\uc9c0 \uc0dd\uc131 \ubc0f \ubc1c\uae09\ub41c \uc778\uc99d\uc11c \ub2e4\uc6b4\ub85c\ub4dc\ub428.
nginx \uc0ac\uc6a9\uc790\ub294 “python3-certbot-nginx” \ub85c plugin\uc73c\ub85c \uc124\uce58 \ubcc0\uacbd.<\/p>\n\n\n\n
\n# apt install certbot python3-certbot-apache
Reading package lists\u2026 Done
Building dependency tree
Reading state information\u2026 Done
Suggested packages:
python3-certbot-nginx python-certbot-doc python-certbot-apache-doc
The following NEW packages will be installed:
certbot python3-certbot-apache
0 upgraded, 2 newly installed, 0 to remove and 147 not upgraded.
Need to get 88.1 kB of archives.
After this operation, 481 kB of additional disk space will be used.
Get:1 http:\/\/ap-seoul-1-ad-1.clouds.archive.ubuntu.com\/ubuntu focal-updates\/universe amd64 certbot all 0.40.0-1ubuntu0.1 [17.9 kB]
Get:2 http:\/\/ap-seoul-1-ad-1.clouds.archive.ubuntu.com\/ubuntu focal\/universe amd64 python3-certbot-apache all 0.39.0-1 [70.2 kB]
Fetched 88.1 kB in 2s (44.2 kB\/s)
Selecting previously unselected package certbot.
(Reading database \u2026 226049 files and directories currently installed.)
Preparing to unpack \u2026\/certbot_0.40.0-1ubuntu0.1_all.deb \u2026
Unpacking certbot (0.40.0-1ubuntu0.1) \u2026
Selecting previously unselected package python3-certbot-apache.
Preparing to unpack \u2026\/python3-certbot-apache_0.39.0-1_all.deb \u2026
Unpacking python3-certbot-apache (0.39.0-1) \u2026
Setting up certbot (0.40.0-1ubuntu0.1) \u2026
Setting up python3-certbot-apache (0.39.0-1) \u2026
Processing triggers for man-db (2.9.1-1) \u2026
… (\uc0dd\ub7b5)<\/p>\n<\/blockquote>\n\n\n\n2. certbot \uc778\uc99d\uc11c \ub4f1\ub85d<\/h2>\n\n\n\n
# certbot –apache
apache plugin\uc744 \uc774\uc6a9\ud558\uc5ec \uc778\uc99d\uc11c \ubc1c\uae09 \ubc0f SSL config \uc0dd\uc131.
– \uc0ac\uc6a9\uc790 \uc774\uba54\uc77c \ud655\uc778 \/ \uc785\ub825
Enter email address (used for urgent renewal and security notices) (Enter ‘c’ to
cancel): email@iwgh.my
– \uc57d\uad00\ub3d9\uc758
Please read the Terms of Service at …
You must agree in order to register with the ACME server at…
(A)gree\/(C)ancel: a
– \uc774\uba54\uc77c \uc18c\uc2dd \uad6c\ub3c5 \ud655\uc778 (no \ud574\ub3c4 \uc9c4\ud589\uac00\ub2a5)
Would you be willing to share your email address with the Electronic Frontier
Foundation, a founding partner of the Let’s Encrypt project and the non-profit
organization that develops Certbot? We’d like to send you email about our work
encrypting the web, EFF news, campaigns, and ways to support digital freedom.
(Y)es\/(N)o: n
– https \uc11c\ube44\uc2a4\ub97c \uc0ac\uc6a9\ud560 \uc6f9\uc11c\ubc84 \uc8fc\uc18c \uc120\ud0dd
Which names would you like to activate HTTPS for?
1: (website address)
Select the appropriate numbers separated by commas and\/or spaces, or leave input
blank to select all options shown (Enter ‘c’ to cancel): 1
– \ud604\uc7ac apache \uc124\uc815 \ud655\uc778\ud558\uc5ec SSL vhost config \ud30c\uc77c \uc0dd\uc131
\uc774\ud6c4 https\ub85c \uc790\ub3d9 redirect \uc120\ud0dd.
Created an SSL vhost at \/etc\/apache2\/sites-available\/000-default-le-ssl.conf
…(\uc0dd\ub7b5)
Please choose whether or not to redirect HTTP traffic to HTTPS, removing HTTP access.
1: No redirect – Make no further changes to the webserver configuration.
2: Redirect – Make all requests redirect to secure HTTPS access. Choose this for
new sites, or if you’re confident your site works on HTTPS. You can undo this
change by editing your web server’s configuration.
Select the appropriate number [1-2] then [enter] (press ‘c’ to cancel): 2
Redirecting vhost in \/etc\/apache2\/sites-enabled\/000-default.conf to ssl vhost in \/etc\/apache2\/sites-available\/000-default-le-ssl.conf<\/p>\n\n\n\n3. apache2 \uc6f9\uc11c\ubc84\uc5d0 \ub4f1\ub85d \ubc0f \uc7ac\uc2dc\uc791<\/h2>\n\n\n\n
sites-enable \uc5d0 \ub4f1\ub85d\uae4c\uc9c0 \uc790\ub3d9\uc73c\ub85c \ub418\ubbc0\ub85c apache SSL \ubaa8\ub4c8 enable, \uc7ac\uc2dc\uc791, \ubc29\ud654\ubcbd open \ud544\uc694.
# a2enmod ssl
# iptables -I INPUT 6 -m state –state NEW -p tcp –dport 443 -j ACCEPT
http\ub85c \uc811\uc18d\uc2dc https\ub85c \ub9ac\ub2e4\uc774\ub809\uc158 \ubc0f \uc815\uc0c1 \uc791\ub3d9\ud655\uc778
<\/p>\n\n\n\n4. \uc815\uc0c1\uc5f0\uacb0 \uac80\uc99d<\/h2>\n\n\n\n