{"id":345,"date":"2022-03-04T15:29:37","date_gmt":"2022-03-04T21:29:37","guid":{"rendered":"https:\/\/techexperiencemx.com\/?p=345"},"modified":"2023-08-11T18:03:31","modified_gmt":"2023-08-12T00:03:31","slug":"synology-ssl-wildcard","status":"publish","type":"post","link":"https:\/\/techexperiencemx.com\/?p=345","title":{"rendered":"Ssl Wildcard"},"content":{"rendered":"\n

Antes de generar los ssl te recomiendo generar certificados de prueba con el siguiente link<\/p>\n\n\n\n

wget<\/mark> https:\/\/acme-staging-v02.api.letsencrypt.org\/directory<\/mark><\/p>\n\n\n\n

Ejemplo<\/mark><\/p>\n\n\n\n

acme.sh \u2013issue \"\u2014<\/em>staging<\/mark><\/em><\/strong> <\/em>o<\/em> --test\"<\/em> -d example.com<\/strong><\/mark> -d *.example.com<\/strong><\/mark> --dns dns_cf.<\/em><\/pre>\n\n\n\n
Manos a la Obra<\/strong><\/p>\n\n\n\n
iniciamos sesi\u00f3n por ssh hacia Synology NAS y escribimos lo siguiente:\n\n cd ~\n wget https:\/\/github.com\/acmesh-official\/acme.sh\/archive\/master.tar.gz\n tar xvf master.tar.gz\n cd acme.sh-master\/\n .\/acme.sh --install --nocron --home \/usr\/local\/share\/acme.sh --accountemail \"mi correo electronico@gmailcom\"\n source ~\/.profile<\/pre>\n\n\n\n
Configuraci\u00f3n de DNS<\/mark><\/p>\n\n\n\n
Unico Dominio<\/strong><\/mark><\/p>\n\n\n\n
Ejemplo Cloudflare<\/strong><\/p>\n\n\n\n
aqui podras encontrar tu DNSapi<\/mark><\/a> segun tu dominio<\/p>\n\n\n\n
export CF_Key=\u201dtu API aqui\u201d<\/em><\/p>\n\n\n\n
Cloudflare\u2014\u2014\u2014\u2014-export CF_Email=<\/em>mi email@gmail.com<\/p>\n\n\n\n
Cloudflare\u2014\u2014\u2014\u2014-<\/em>.\/acme.sh –issue –home . -d hola.dominio.com –dns \u00ab$CERT_DNS\u00bb<\/p>\n\n\n\n
Wildcard Ssl<\/strong><\/mark><\/p>\n\n\n\n
Cloudflare\u2014\u2014\u2014\u2014-export CF_Key=\u201dtu API aqui\u201d<\/em><\/p>\n\n\n\n
Cloudflare\u2014\u2014\u2014\u2014-export CF_Email=<\/em>mi email@gmail.com<\/p>\n\n\n\n
Cloudflare\u2014\u2014\u2014\u2014-<\/em>.\/acme.sh –issue –home . -d hola.dominio.com –d *.dominio.com –dns dns_cf<\/p>\n\n\n\n
DNS Manual<\/h2>\n\n\n\n
Solo un dominio\n\n acme.sh --issue -d dominio.com --dns \\\n--yes-I-know-dns-manual-mode-enough-go-ahead-please<\/pre>\n\n\n\n
ssl wildcard manual\n\nacme.sh --issue -d dominio.com --d *.dominio.com  --dns \\\n--yes-I-know-dns-manual-mode-enough-go-ahead-please<\/pre>\n\n\n\n
nos generara una claves TXT que debemos a\u00f1adir a nuestro host de dominios<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Por ultimo en la misma sesi\u00f3n ssh solo debemos agregar  — renew para generar ssl<\/p>\n\n\n\n
acme.sh --renew -d dominio.com --dns \\\n--yes-I-know-dns-manual-mode-enough-go-ahead-please<\/pre>\n\n\n\n
Este es el ejemplo para quienes usan duckdns<\/p>\n\n\n\n
duckdns\u2014\u2014\u2014\u2014\u2014\u2014<\/em>acme.sh \u2013insecure \u2013issue \u2013dns dns_duckdns -d mydomain.duckdns.org<\/pre>\n\n\n\n
Transferencia de los certificados hacia el Nas<\/mark><\/p>\n\n\n\n
cd \/usr\/local\/share\/acme.sh<\/pre>\n\n\n\n
1 \u2014\u2014\u2014\u2014\u2014\u2014\u2014-export SYNO_Username=\u2019nombre de usuario Synology\u2019<\/p>\n\n\n\n
2\u2014\u2014 \u2014\u2014\u2014\u2014\u2014\u2014\u2014export SYNO_Password=\u2019contrase\u00f1a usuario Synology\u2019<\/p>\n\n\n\n
3\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014-export SYNO_Scheme=\u201dhttps\u201d\u2014\u2014\u2014\u2014si tu tienes \u201chttps\u201d\u201d en tu nas  agregarlos aqu\u00ed de lo contrario omite este paso<\/p>\n\n\n\n
4\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014-export SYNO_Port=\u201d5001\u201d\u2014\u2014\u2014\u2014\u2014\u2014si tu tienes otro puerto en tu nas  agregarlos aqu\u00ed de lo contrario omite este paso<\/p>\n\n\n\n
5\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014 export SYNO_Certificate=\u201c\u201d\u2014\u2014\u2014\u2014\u2014\u2014Para sustituir certificado <\/p>\n\n\n\n
6\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014export SYNO_Create=\u201dnombre del certificado\u201d\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014agregar como nuevo ssl<\/p>\n\n\n\n
7\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014 .\/acme.sh –deploy –home . -d dominio.com –deploy-hook synology_dsm<\/p>\n\n\n\n
Renovaci\u00f3n de certificados <\/mark><\/strong><\/p>\n\n\n\n
    \n
  • General Setting: Task \u2013 Update default Cert. User \u2013 root<\/li>\n\n\n\n
  • Schedule: agregar renovaci\u00f3n cada que caduque el ssl ejemplo cada 89 d\u00edas caduca o 3 meses <\/li>\n\n\n\n
  • Task setting: User-defined-script:<\/li>\n<\/ul>\n\n\n\n
    # renew certificates \nusr\/local\/share\/acme.sh\/acme.sh \u2013cron \u2013home \/usr\/local\/share\/acme.sh\/<\/pre>\n\n\n\n
    <\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \"\"<\/figure>\n","protected":false},"excerpt":{"rendered":"
    Antes de generar los ssl te recomiendo generar certificados de prueba con el siguiente link wget https:\/\/acme-staging-v02.api.letsencrypt.org\/directory Ejemplo acme.sh \u2013issue \u00ab\u2014staging o –test\u00bb -d example.com -d *.example.com –dns dns_cf. Manos a la Obra iniciamos sesi\u00f3n por ssh hacia Synology NAS y escribimos lo siguiente: cd ~ wget https:\/\/github.com\/acmesh-official\/acme.sh\/archive\/master.tar.gz tar xvf master.tar.gz cd acme.sh-master\/ .\/acme.sh –install […]<\/p>\n","protected":false},"author":1,"featured_media":217,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[17],"tags":[],"class_list":["post-345","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-synology"],"_links":{"self":[{"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=\/wp\/v2\/posts\/345","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=345"}],"version-history":[{"count":0,"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=\/wp\/v2\/posts\/345\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=\/wp\/v2\/media\/217"}],"wp:attachment":[{"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=345"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=345"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=345"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}