免费生成Nginx的Https使用的SSL证书

1、打开Free SSL Certificates Provider and ACME Tools 需要先注册

2、选择通配符证书，可以是二级或则三级通配符

例如：*.yourdomain.com 或则*.yourdomain.com.cn

3、打开生成页面，一直下一步，会生成一个_xxxx.yourdomain.com.key的文件

4、安装工具，安装后需要重新进入linux才能使用

可以参考：ACME v2证书自动化快速入门

curl https://get.acme.sh | sh -s email=yourEmail[root@localhost ~]# curl https://get.acme.sh | sh -s email=lenkty@live.cn% Total    % Received % Xferd  Average Speed   Time    Time     Time  CurrentDload  Upload   Total   Spent    Left  Speed
100  1032    0  1032    0     0    498      0 --:--:--  0:00:02 --:--:--   499% Total    % Received % Xferd  Average Speed   Time    Time     Time  CurrentDload  Upload   Total   Spent    Left  Speed
100  214k  100  214k    0     0  23645      0  0:00:09  0:00:09 --:--:-- 21315
[Tue Dec  6 14:34:58 CST 2022] Installing from online archive.
[Tue Dec  6 14:34:58 CST 2022] Downloading https://github.com/acmesh-official/acme.sh/archive/master.tar.gz
[Tue Dec  6 14:35:04 CST 2022] Extracting master.tar.gz
[Tue Dec  6 14:35:04 CST 2022] It is recommended to install socat first.
[Tue Dec  6 14:35:04 CST 2022] We use socat for standalone server if you use standalone mode.
[Tue Dec  6 14:35:04 CST 2022] If you don't use standalone mode, just ignore this warning.
[Tue Dec  6 14:35:04 CST 2022] Installing to /root/.acme.sh
[Tue Dec  6 14:35:04 CST 2022] Installed to /root/.acme.sh/acme.sh
[Tue Dec  6 14:35:04 CST 2022] Installing alias to '/root/.bashrc'
[Tue Dec  6 14:35:04 CST 2022] OK, Close and reopen your terminal to start using acme.sh
[Tue Dec  6 14:35:04 CST 2022] Installing alias to '/root/.cshrc'
[Tue Dec  6 14:35:04 CST 2022] Installing alias to '/root/.tcshrc'
[Tue Dec  6 14:35:04 CST 2022] Installing cron job
no crontab for root
no crontab for root
[Tue Dec  6 14:35:04 CST 2022] Good, bash is found, so change the shebang to use bash as preferred.
[Tue Dec  6 14:35:05 CST 2022] OK
[Tue Dec  6 14:35:05 CST 2022] Install success!
[root@localhost ~]# acme.sh --issue -d *.dev.acadsoc.com  --dns dns_dp --server https://acme.freessl.cn/v2/DV90/directory/prplmhlees74erhlho6t
-bash: acme.sh: command not found
[root@localhost ~]# exit

生成证书

acme.sh --issue -d yourdomain.com  --dns dns_dp --server https://acme.freessl.cn/v2/DV90/directory/prplmhlees74erhlho6t

5、生成nginx证书

acme.sh --install-cert -d example.com \
--key-file       /etc/nginx/cert/key.pem  \
--fullchain-file /etc/nginx/cert/key/cert.pem \
--reloadcmd     "service nginx force-reload"

*/path/to/keyfile/in/nginx注意这个路径要真实存在

然后cd /path/to/keyfile/in/nginx 这个路径，可以把证书放在其它nginx项目使用

nginx https一般配置

 server {listen 443 ssl;#填写绑定证书的域名server_name yourdomain.com;#证书文件名称ssl_certificate  cert/cert.pem;#私钥文件名称ssl_certificate_key cert/key.pem;ssl_session_timeout 5m;ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;ssl_protocols TLSv1 TLSv1.1 TLSv1.2;ssl_prefer_server_ciphers on;location / {proxy_pass http://127.0.0.1:8080;index / ;proxy_set_header HOST $host;proxy_set_header X-Forwarded-Proto $scheme;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;add_header 'Access-Control-Allow-Origin' '*';add_header 'Access-Control-Allow-Credentials' 'true';}}

免费生成Nginx的Https使用的SSL证书相关推荐

七牛云如何配置免费 https 阿里云SSL证书
七牛云如何配置免费 https 阿里云SSL证书七牛云注册链接:https://s.qiniu.com/yaQ3am 一.情况是这么个情况我之前有个项目是走的 https,这个项目作了一些印刷品, ...
nginx启动报错：nginx: [emerg] https protocol requires SSL support in /usr/local/nginx/conf/ngi
nginx: [emerg] https protocol requires SSL support in /usr/local/nginx/conf/nginx 这个错误是由于配置了https代理但 ...
腾讯云服务器配置https 部署安装ssl证书
腾讯云服务器配置https 部署安装ssl证书配置:CentOS 7 我是使用nginx服务器对Vue项目进行挂载,所以这里主要说明nginx服务器如何配置https服务如何安装nginx Ngi ...
Nginx下配置Comodo Essential SSL证书
Nginx下配置Comodo Essential SSL证书 Comodo 官网:http://www.comodo.cn/ Comodo 证书官网: http://www.instantssl.cn ...
在Nginx/Tengine服务器上安装SSL证书
在Nginx/Tengine服务器上安装SSL证书阿里云SSL证书服务支持下载证书安装到Nginx/Tengine服务器上,本文介绍了证书安装的具体操作. 背景信息本文档以CentOS 7.Ngi ...
php curl 不验证ssl,PHP Curl https跳过ssl证书认证报错记录及解决
PHP Curl https跳过ssl证书认证报错记录及解决 function get($url = '', $cookie = '') { $ch = curl_init(); curl_setop ...
python怎么爬虫https的内容_爬虫15 python 如何处理HTTPS请求访问 SSL证书验证
1 https和SSL之间是什么关系 https和SSL之间是什么关系:https就是在http上面加了一层ssl协议,在http站点上部署SSL数字证书就变成了https. 现在随处可见 https ...
从零开始在 FreeNAS 的 Jail 上安装 NextCloud 并配置 Nginx 作为网页服务器而且设置SSL证书使用 https 访问以及 oc_filecache 修复方法、优化方法
笔者由于FreeNAS(TrueNAS)的ZFS文件系统的功能,想在上面架设NextCloud.本来FreeNAS也自带了NextCloud插件,可是由于国内网络环境的原因,死活安装不上.在某歌一番后 ...
https 自签名SSL证书
介绍 TLS或称传输层安全性,及其前身SSL(代表安全套接字层)是用于将正常流量包装在受保护的加密包装中的Web协议. 使用这种技术,服务器可以在服务器和客户端之间安全地发送流量,而不会被外部各方拦截 ...

免费生成Nginx的Https使用的SSL证书

免费生成Nginx的Https使用的SSL证书相关推荐

最新文章

热门文章