站長資訊網
        最全最豐富的資訊網站

        centos7+nginx使用Certbot讓網站擁有https

        certbot官網

        1.獲取certbot-auto

          ####  下載  wget https://dl.eff.org/certbot-auto    ####  給予權限  chmod a+x ./certbot-auto

        2.使用

          #### 請改為自己的域名  ./certbot-auto --server https://acme-v02.api.letsencrypt.org/directory -d "*.xxx.com" -d "xxx.com" --manual --preferred-challenges dns-01 certonly    ####  出現如下 輸入郵箱  Enter email address (used for urgent renewal and security notices) (Enter 'c' to  cancel):     ####  輸入A同意  Please read the Terms of Service at  https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must  agree in order to register with the ACME server at  https://acme-v02.api.letsencrypt.org/directory  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  (A)gree/(C)ancel:     ####  輸入Y同意  Would you be willing to share your email address with the Electronic Frontier  Foundation, a founding partner of the Let's Encrypt project and the non-profit  organization that develops Certbot We'd like to send you email about our work  encrypting the web, EFF news, campaigns, and ways to support digital freedom.  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  (Y)es/(N)o:     ####  輸入Y確認  NOTE: The IP of this machine will be publicly logged as having requested this  certificate. If you're running certbot in manual mode on a machine that is not  your server, please ensure you're okay with that.    Are you OK with your IP being logged  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  (Y)es/(N)o:     ####  域名添加TXT解析  添加對應的域名和值 添加好后回車繼續  Please deploy a DNS TXT record under the name  xxxx.xxxx.com with the following value:    xxxxxxxx    Before continuing, verify the record is deployed.  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  Press Enter to Continue    ####  出現如下即成功  IMPORTANT NOTES:   - Congratulations! Your certificate and chain have been saved at:     /etc/letsencrypt/live/xxxxx.com/fullchain.pem     Your key file has been saved at:     /etc/letsencrypt/live/xxxxx.com/privkey.pem     Your cert will expire on 2018-12-28. To obtain a new or tweaked     version of this certificate in the future, simply run certbot-auto     again. To non-interactively renew *all* of your certificates, run     "certbot-auto renew"   - Your account credentials have been saved in your Certbot     configuration directory at /etc/letsencrypt. You should make a     secure backup of this folder now. This configuration directory will     also contain certificates and private keys obtained by Certbot so     making regular backups of this folder is ideal.   - If you like Certbot, please consider supporting our work by:       Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate     Donating to EFF:                    https://eff.org/donate-le

        3.nginx配置

          server {          listen   80;          listen 443 ssl spdy;          server_name xxx.xxx.com;          ssl on;          ssl_certificate /etc/letsencrypt/live/xxx.xxx.com/fullchain.pem;          ssl_certificate_key /etc/letsencrypt/live/xxx.xxx.com/privkey.pem;          ssl_session_cache shared:SSL:20m;          ssl_session_timeout  10m;          ssl_protocols TLSv1 TLSv1.1 TLSv1.2;          ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE:!kEDH;          ssl_prefer_server_ciphers on;          ssl_stapling on;          ssl_stapling_verify on;          ssl_trusted_certificate /etc/letsencrypt/live/xxx.xxx.com/chain.pem;           #啟用 HSTS 用于通知瀏覽器強制使用 https 通信          add_header Strict-Transport-Security "max-age=31536000";          resolver 8.8.8.8 8.8.4.4;                    #強制跳轉https          if ($scheme != 'https') {             return 301 https://$server_name$request_uri;          }                    ........     }
        贊(0)
        分享到: 更多 (0)
        網站地圖   滬ICP備18035694號-2    滬公網安備31011702889846號
        主站蜘蛛池模板: 永久免费精品影视网站| 999精品视频| 国产成人精品免费视| 亚洲国产精品人人做人人爱| 91精品视频在线| 99精品无人区乱码在线观看| 尤物国精品午夜福利视频| 久久精品无码av| 国产精品v欧美精品v日本精| 精品视频一区二区三区免费| 国产精品亚洲精品日韩已满| 无码国产精品一区二区免费3p | 久久这里只有精品视频99| 99re久久精品国产首页2020| 人妻精品久久久久中文字幕69| 四虎成人精品在永久在线| 国产午夜亚洲精品理论片不卡| 久久这里只有精品首页| 538国产精品一区二区在线| 久久国产精品99国产精| 亚洲精品国产精品乱码视色| 在线亚洲精品福利网址导航| 久久五月精品中文字幕| 久久99精品国产麻豆婷婷| 国产精品一区二区久久精品无码| 99久久伊人精品综合观看| 亚洲国产精品不卡在线电影| 欧美视频精品一区二区三区 | 99久久国产综合精品五月天喷水| 99爱在线精品免费观看| 精品国产第一国产综合精品 | 精品视频无码一区二区三区| 色一乱一伦一图一区二区精品| 在线精品动漫一区二区无广告| 亚洲av午夜国产精品无码中文字| 亚洲七七久久精品中文国产| 在线精品自拍无码| 久久久久99精品成人片试看| 久久香综合精品久久伊人| 久久99国产综合精品| 国产成人精品日本亚洲专|