2019独角兽企业重金招聘Python工程师标准>>> 
安装环境：
[root@WQ02 opt]# lsb_release -a
LSB Version: :core-4.0-amd64:core-4.0-ia32:core-4.0-noarch:graphics-4.0-amd64:graphics-4.0-ia32:graphics-4.0-noarch:printing-4.0-amd64:pri
nting-4.0-ia32:printing-4.0-noarchDistributor ID: CentOS
Description: CentOS release 5.11 (Final)
Release: 5.11
Codename: Final1、下载certbot-auto：
wget https://dl.eff.org/certbot-auto
chmod a+x ./certbot-auto2、升级Python到2.7版本。Centos5系统Python为2.4版本。certbot-auto需要依赖Python2.7+版本。
wget https://www.python.org/ftp/python/2.7.2/Python-2.7.2.tgz
tar xfz Python-2.7.2.tgz
./configure
make
make install安装后系统自动默认Python为新版本。
[root@WQ02 opt]# python -V
Python 2.7.2
如果升级python后yum无法使用时可按照如下方法处理。
vim /usr/bin/yum
将第一个行#!/usr/bin/python调整为原来python版本。如#!/usr/bin/python2.4我本服务器的python升级到2.7.2后yum可正常使用。
3、安装pip
wget https://files.pythonhosted.org/packages/52/85/b160ebdaa84378df6bb0176d4eed9f57edca662446174eead7a9e2e566d6/pip-6.0.7.tar.gz
tar xfz pip-6.0.7.tar.gz
./configure
make
make install4、开始安装证书
[root@WQ02 opt]# ./certbot-auto certonly --webroot -w /www1/abc/ -d www.abc.org.cn
Bootstrapping dependencies for RedHat-based OSes... (you can skip this with --no-bootstrap)
yum is /usr/bin/yum
yum is hashed (/usr/bin/yum)
Loaded plugins: fastestmirror, security
Loading mirror speeds from cached hostfile
* epel: pubmirror2.math.uh.edu
Setting up Install Process
Package gcc-4.1.2-55.el5.x86_64 already installed and latest version
Package augeas-libs-1.2.0-1.el5.x86_64 already installed and latest version
Package augeas-libs-1.2.0-1.el5.i386 already installed and latest version
Package openssl-0.9.8e-40.el5_11.x86_64 already installed and latest version
Package openssl-0.9.8e-40.el5_11.i686 already installed and latest version
Package openssl-devel-0.9.8e-40.el5_11.x86_64 already installed and latest version
Package openssl-devel-0.9.8e-40.el5_11.i386 already installed and latest version
Package libffi-devel-3.0.5-1.el5.x86_64 already installed and latest version
Package libffi-devel-3.0.5-1.el5.i386 already installed and latest version
Package redhat-rpm-config-8.0.45-32.el5.centos.noarch already installed and latest version
No package ca-certificates available.
Package python-devel-2.4.3-56.el5.x86_64 already installed and latest version
Package python-devel-2.4.3-56.el5.i386 already installed and latest version
Package 1:python-virtualenv-1.7.2-2.el5.noarch already installed and latest version
Package python-tools-2.4.3-56.el5.x86_64 already installed and latest version
No package python-pip available.
Package 1:mod_ssl-2.2.22-jason.1.x86_64 already installed and latest version
Nothing to do
WARNING: unable to check for updates.
Creating virtual environment...
Traceback (most recent call last):
File "/usr/lib/python2.4/site-packages/virtualenv.py", line 2441, in
main()
File "/usr/lib/python2.4/site-packages/virtualenv.py", line 954, in main
never_download=options.never_download)
File "/usr/lib/python2.4/site-packages/virtualenv.py", line 1064, in create_environment
search_dirs=search_dirs, never_download=never_download)
File "/usr/lib/python2.4/site-packages/virtualenv.py", line 598, in install_setuptools
search_dirs=search_dirs, never_download=never_download)
File "/usr/lib/python2.4/site-packages/virtualenv.py", line 570, in _install_req
cwd=cwd)
File "/usr/lib/python2.4/site-packages/virtualenv.py", line 1032, in call_subprocess
% (cmd_desc, proc.returncode))
OSError: Command /opt/eff.org/certbot/venv/bin/python2.7 -c "#!python
\"\"\"Bootstra...sys.argv[1:])
" --always-copy -U setuptools failed with error code 1
问题排查：问题是出现在Creating virtual environment...。即创建python虚拟环境时出错的。问题找到了那么手动提前安装好虚拟环境是不是就能解决问题呢？
执行手动安装
[root@WQ02 opt]# pip install virtualenv
Collecting virtualenv
Could not find any downloads that satisfy the requirement virtualenv
No distributions at all found for virtualenv
还是失败，问题原因是没有找到对应的下载包。
尝试更改为国内的镜像站https://mirrors.tuna.tsinghua.edu.cn/help/pypi/。果然成功了。
[root@WQ02 opt]# pip install -i https://pypi.tuna.tsinghua.edu.cn/simple virtualenv
Collecting virtualenv
Downloading https://pypi.tuna.tsinghua.edu.cn/packages/6a/d1/e0d142ce7b8a5c76adbfad01d853bca84c7c0240e35577498e20bc2ade7d/virtualenv-16.2.0
-py2.py3-none-any.whl (1.9MB) 100% |################################| 1.9MB 147kB/s
Collecting setuptools>=18.0.0 (from virtualenv)
Downloading https://pypi.tuna.tsinghua.edu.cn/packages/37/06/754589caf971b0d2d48f151c2586f62902d93dc908e2fd9b9b9f6aa3c9dd/setuptools-40.6.3
-py2.py3-none-any.whl (573kB) 100% |################################| 573kB 252kB/s
Installing collected packages: setuptools, virtualenv
Found existing installation: setuptools 12.0.3
Uninstalling setuptools-12.0.3:
Successfully uninstalled setuptools-12.0.3
将国内的镜像站设为默认。先升级pip到最新版本，然后配置config设置。
[root@WQ02 opt]# pip install -i https://pypi.tuna.tsinghua.edu.cn/simple virtualenv pip -U
[root@WQ02 opt]# pip config set global.index-url https://pypi.tuna.tsinghua.edu.cn/simple
Writing to /root/.config/pip/pip.conf
5、一切OK，继续安装证书。
[root@WQ02 opt]# ./certbot-auto certonly --webroot -w /www1/abc/ -d www.abc.org.cn
WARNING: unable to check for updates.
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator webroot, Installer None
Enter email address (used for urgent renewal and security notices) (Enter 'c' to cancel): [email protected]
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Please read the Terms of Service at
https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must
agree in order to register with the ACME server at
https://acme-v02.api.letsencrypt.org/directory
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(A)gree/(C)ancel: A
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Would you be willing to share your email address with the Electronic Frontier
Foundation, a founding partner of the Let's Encrypt project and the non-profit
organization that develops Certbot? We'd like to send you email about our work
encrypting the web, EFF news, campaigns, and ways to support digital freedom.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: Y
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for www.dxaldqrmyy.org.cn
Using the webroot path /www1/abc for all unmatched domains.
Waiting for verification...
Cleaning up challenges
IMPORTANT NOTES:
- Congratulations! Your certificate and chain have been saved at:
/etc/letsencrypt/live/www.abc.org.cn/fullchain.pem
Your key file has been saved at:
/etc/letsencrypt/live/www.abc.org.cn/privkey.pem
Your cert will expire on 2019-04-21. To obtain a new or tweaked
version of this certificate in the future, simply run certbot-auto
again. To non-interactively renew *all* of your certificates, run
"certbot-auto renew"
- If you like Certbot, please consider supporting our work by:
Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate
Donating to EFF: https://eff.org/donate-le
后续配置方法参考：
1、CentOS系统Nginx配置免费https证书
2、CentOS配置Https
3、Nginx+Tomcat实现免费https访问