https免费证书安装-Let's Encrypt

1. yum -y install yum-utils
2. yum-config-manager --enable rhui-REGION-rhel-server-extras rhui-REGION-rhel-server-optional
3. sudo yum install certbot python2-certbot-nginx
4. sudo certbot certonly --webroot -w 域名的web目录 -d 域名
5. 输入邮箱 回车
6. 选择A 回车
7. 输入N 回车 是否给你的邮箱发送推送消息
8. nginx配置文件
   1. ssl on;   
   2. ssl_certificate /etc/letsencrypt/live/域名/fullchain.pem;  
   3. ssl_certificate_key /etc/letsencrypt/live/域名/privkey.pem;  
   4. ssl_session_timeout 5m;  
   5. ssl_protocols SSLv2 SSLv3 TLSv1;  
   6.  ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;  
   7. ssl_prefer_server_ciphers on;
9. 增加定时任务(证书3个月过期，2个月更新) 15 2 * */2 * certbot renew