acme证书安装，免费给网站配置https证书

最新推荐文章于 2024-09-13 22:08:49 发布

Venvis

最新推荐文章于 2024-09-13 22:08:49 发布

阅读量4.3k

点赞数 4

分类专栏： linux 文章标签： linux https 运维服务器

本文链接：https://blog.csdn.net/qq_31628559/article/details/124179635

版权

linux 专栏收录该内容

15 篇文章 0 订阅

订阅专栏

该博客详细介绍了如何通过acme.sh脚本，结合GoDaddy DNS API，自动化申请并配置SSL证书的过程。步骤包括下载脚本、设置环境变量、使用DNSAPI申请证书、修改Nginx配置以及设置定时任务更新证书。教程中还展示了成功申请证书后的输出示例。

摘要由CSDN通过智能技术生成

1.下载脚本

curl  https://get.acme.sh | sh

2.配置环境变量

alias acme.sh=~/.acme.sh/acme.sh

3.使用dns api方式申请

需要登陆 https://developer.godaddy.com/keys 申请key
拿到key后将key替换以下命令执行：

export GD_Key="这里放key"
export GD_Secret="这里放secret"
acme.sh --issue --dns dns_gd -d xxx.com -d '*.xxx.com'  --debug
acme.sh --issue --dns dns_gd -d xxx.com -d www.xxx.com

上面想xxx.com替换为真实想配置的域名
如出现以下结果则表示执行成功：

[Thu May  6 15:56:24 CST 2021] Cert success.
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
[Thu May  6 15:56:24 CST 2021] Your cert is in  /root/.acme.sh/xxx.com/xxx.com.cer 
[Thu May  6 15:56:24 CST 2021] Your cert key is in  /root/.acme.sh/xxx.com/xxx.com.key 
[Thu May  6 15:56:24 CST 2021] The intermediate CA cert is in  /root/.acme.sh/xxx.com/ca.cer 
[Thu May  6 15:56:24 CST 2021] And the full chain certs is there:  /root/.acme.sh/xxx.com/fullchain.cer

4.修改nginx

server {
        listen 443 ssl;
        server_name  www.xxx.com;
        root  /home/www/xxx;
        error_log  /home/wwwlogs/xxx.error.log;
        access_log  /home/wwwlogs/xxx.acc.log;
        # 修改下面两行代码后面的证书路径即可
        ssl_certificate /root/.acme.sh/xxx.com/fullchain.cer;
        ssl_certificate_key /root/.acme.sh/xxx.com/xxx.com.key;
        location / {
            index  index.html index.htm;
        }
         location /nginx_status
        {
            stub_status on;
            access_log   on;
        }

        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
            expires      30d;
        }

        location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

        location ~ /.well-known {
            allow all;
        }

        location ~ /\.
        {
            deny all;
        }
}
server {
        listen 80;
        server_name www.xxx.com;
        if ($host = www.xxx.com) {
             return 301 https://$host$request_uri;
        }
        if ($host = xxx.com) {
             return 301 https://www.$host$request_uri;
        }
}

5.定时任务更新证书

53 0 * * * /root/.acme.sh/acme.sh --cron --home /root/.acme.sh --force > /dev/null

至此证书配置完成！