{"id":774,"date":"2020-09-27T17:29:10","date_gmt":"2020-09-27T15:29:10","guid":{"rendered":"http:\/\/jeedom.sigalou-domotique.fr\/?p=774"},"modified":"2024-05-23T07:01:16","modified_gmt":"2024-05-23T05:01:16","slug":"basculer-jeedom-en-https","status":"publish","type":"post","link":"https:\/\/www.sigalou-domotique.fr\/es\/basculer-jeedom-en-https","title":{"rendered":"Cambiar Jeedom a https"},"content":{"rendered":"<h2>Explicaciones, requisitos previos<\/h2>\n<p>En esta retroalimentaci\u00f3n, utilizo mi <strong>DNS Inverso desde Gratis<\/strong>. Me imagino que es a\u00fan m\u00e1s f\u00e1cil usar un nombre de dominio, pero con la funcionalidad que ofrece Free, el dominio no es indispensable.<\/p>\n<p>En el resto de esta p\u00e1gina, usar\u00e9 el siguiente DNS inverso: <strong>sigalou.hd.free.fr<\/strong>. Tenga en cuenta que este nombre es un ejemplo y no existe; Por razones de seguridad, no doy aqu\u00ed el DNS inverso que realmente uso.<\/p>\n<p>Tengo 3 Jeedoms instalados en mi red local:<\/p>\n<ul>\n<li>Jeedom Master en 192.168.0.100 (la producci\u00f3n principal Jeedom)<\/li>\n<li>Jeedom Slave en 192.168.0.21 (el Jeedom secundario del desarrollo)<\/li>\n<li>Jeedom Calefacci\u00f3n en 192.168.0.150 (un Jeedom dedicado a la calefacci\u00f3n)<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-786\" src=\"http:\/\/jeedom.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/schema-ports-300x213.png\" alt=\"\" width=\"300\" height=\"213\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/schema-ports-300x213.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/schema-ports-600x427.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/schema-ports-768x546.png 768w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/schema-ports.png 1024w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><!--more--><\/p>\n<p><strong>Mi objetivo es acceder a los 3 Jeedoms desde el exterior a trav\u00e9s de HTTPS.<\/strong><\/p>\n<p>As\u00ed, por ejemplo:<\/p>\n<ul>\n<li>https:\/\/sigalou.hd.free.fr:100<\/li>\n<li>https:\/\/sigalou.hd.free.fr:121<\/li>\n<li>https:\/\/sigalou.hd.free.fr:150<\/li>\n<\/ul>\n<h2>Genere el certificado en un sistema operativo Raspberry Pi<\/h2>\n<h3>Redirigir todo el flujo desde el puerto 80<\/h3>\n<p>Antes de generar el certificado, debe redirigir todo el flujo desde el puerto 80 a la Raspberry en cuesti\u00f3n.<\/p>\n<p>En el router (o cuadro), agregue una regla de reenv\u00edo de puertos.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-775\" src=\"http:\/\/jeedom.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/toutleflux80-300x176.png\" alt=\"\" width=\"300\" height=\"176\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/toutleflux80-300x176.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/toutleflux80.png 502w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/p>\n<h3>Generar certificado<\/h3>\n<p>Tienes que conectarte en SSH <em>(de 192.168.0.21 en este ejemplo)<\/em> Frambuesa, luego lance:<\/p>\n<p><em>Sustit\u00fayase <strong>sigalou<\/strong> por su DNS inverso o adaptarse a su dominio<\/em><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"bash\">sudo su cd \/etc\/ wget https:\/\/dl.eff.org\/certbot-auto chmod a+x certbot-auto .\/certbot-auto --apache -d sigalou.hd.free.fr<\/pre>\n<p>\u00a0<\/p>\n<div class=\"enlighter\">\n<div class=\"\">\n<div>\n<div><strong>Tenga cuidado, hay 2 guiones antes de apache!!!<\/strong><\/div>\n<div>\u00a0<\/div>\n<div>El certificado se genera en la Raspberry en 192.168.0.21<\/div>\n<div>\u00a0<\/div>\n<blockquote>\n<div>&#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211;<br \/>\u00a1Felicitaciones! Ha habilitado correctamente https:\/\/sigalou.hd.free.fr<br \/>&#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211;<\/div>\n<\/blockquote>\n<\/div>\n<\/div>\n<\/div>\n<h3>Recrear la redirecci\u00f3n de puertos<\/h3>\n<div>Si tiene varios Jeedoms en su DNS inverso, debe usar el puerto para redirigir a cada dispositivo. As\u00ed que no deje la redirecci\u00f3n en 80, sino redirija el puerto que selecciona su Jeedom <em>(:21,:100,:150 en los ejemplos de esta p\u00e1gina)<\/em> desde el nombre de dominio hasta el puerto 443 de tu Raspberry.<\/div>\n<div>\u00a0<\/div>\n<div><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-781\" src=\"http:\/\/jeedom.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/443-300x174.png\" alt=\"\" width=\"300\" height=\"174\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/443-300x174.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/443.png 509w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/div>\n<h2>Resultado<\/h2>\n<div>Si en este ejemplo, llamamos <strong>https:\/\/sigalou.hd.free.fr<\/strong>, finalmente llegamos a <strong>https:\/\/sigalou.hd.free.fr:121\/index.php?v=d<\/strong>, As\u00ed que en la buena frambuesa que alberga el Jeedom.<\/div>\n<div><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-782\" src=\"http:\/\/jeedom.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/site-300x190.png\" alt=\"\" width=\"300\" height=\"190\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/site-300x190.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/site-600x380.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/site-1024x649.png 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/site-768x487.png 768w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/site.png 1043w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/div>\n<div><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-784\" src=\"http:\/\/jeedom.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/site2-300x166.png\" alt=\"\" width=\"300\" height=\"166\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/site2-300x166.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2020\/09\/site2.png 473w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/div>\n<div>Su acceso HTTPS es validado por <span style=\"color: #339966;\">Vamos a cifrar<\/span><\/div>\n<h2>Y los otros Jeedoms en la misma red<\/h2>\n<div>Simplemente repita el mismo procedimiento en cada equipo.<\/div>\n<h2>Renovaci\u00f3n<\/h2>\n<div>Para renovar el certificado, despu\u00e9s de haber definido claramente los redireccionamientos de puertos, simplemente inicie:<\/div>\n<div>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"bash\">sudo certbot renovar<\/pre>\n<p>En la l\u00ednea de comandos<\/p>\n<blockquote>\n<p>root@maitre:\/etc# sudo certbot renovar<br \/>Guardar el registro de depuraci\u00f3n en \/var\/log\/letsencrypt\/letsencrypt.log<\/p>\n<p>&#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211;<br \/>Procesamiento \/etc\/letsencrypt\/renewal\/peres.hd.free.fr.conf<br \/>&#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211;<br \/>Renovaci\u00f3n de un certificado existente para peres.hd.free.fr<br \/>Recarga del servidor apache despu\u00e9s de la renovaci\u00f3n del certificado<\/p>\n<p>&#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211;<br \/>Felicitaciones, todas las renovaciones certificadas:<br \/>\/etc\/letsencrypt\/live\/peres.hd.free.fr\/fullchain.pem (exitoso)<br \/>&#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211;<\/p>\n<\/blockquote>\n<\/div>\n<h2>Referencias, Bibliograf\u00eda<\/h2>\n<div>\u00a0<\/div>\n<ul>\n<li><a href=\"https:\/\/jeedomiser.fr\/article\/acceder-a-jeedom-depuis-lexterieur-et-en-https-avec-lets-encrypts-sur-son-raspberry-pi\/\">https:\/\/jeedomiser.fr\/article\/acceder-a-jeedom-depuis-lexterieur-et-en-https-avec-lets-encrypts-sur-son-raspberry-pi\/<\/a><\/li>\n<li><a href=\"https:\/\/easydomoticz.com\/forum\/viewtopic.php?t=4702&amp;start=30\">https:\/\/easydomoticz.com\/forum\/viewtopic.php?t=4702&amp;start=30<\/a><\/li>\n<li>\u00a0<\/li>\n<\/ul>\n<div>\u00a0<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>","protected":false},"excerpt":{"rendered":"<p>Explicaciones, requisitos previos En esta retroalimentaci\u00f3n, uso mi DNS Reverse de Free. Me imagino que es a\u00fan m\u00e1s f\u00e1cil usar un nombre de dominio, pero con la funcionalidad que ofrece Free, el dominio no es indispensable. En el resto de esta p\u00e1gina, usar\u00e9 el siguiente DNS inverso: sigalou.hd.free.fr. Tenga en cuenta que este nombre es un [...]<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[14,23],"tags":[],"class_list":["post-774","post","type-post","status-publish","format-standard","hentry","category-domotique","category-jeedom-2"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/posts\/774","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/comments?post=774"}],"version-history":[{"count":0,"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/posts\/774\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/media?parent=774"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/categories?post=774"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/tags?post=774"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}