centos-apache https泛域名申请

1，安装 EPEL repo

• RHEL/CentOS 6:

   yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-6.noarch.rpm

• RHEL/CentOS 7:

   yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm

2，安装Certbot

sudo yum install certbot python2-certbot-apache

3，泛域名创建命令

• 按照提示，把给出的解析信息通过域名管理完成txt解析

sudo certbot certonly  --preferred-challenges dns -d "*.example.com" -d example.com --manual

4，自动更新有效期

echo "0 0,12 * * * root python -c 'import random; import time; time.sleep(random.random() * 3600)' && certbot renew -q" | sudo tee -a /etc/crontab > /dev/null