使用acme.sh申请免费通配符证书

安装证书

此步非必要,可直接使用上面生成的证书文件,但需要额外设置使用证书的应用在证书重新生成后重新加载新证书以生效。

acme.sh --install-cert -d xxx.vip --key-file /usr/local/nginx/ssl/xxx.vip.key --fullchain-file /usr/local/nginx/ssl/xxx.vip.pem --reloadcmd "systemctl force-reload nginx.service"

证书配置文件 ~/.acme.sh/xxx.vip/xxx.vip.conf中就会多出相关项:

Le_ReloadCmd中的值为 base64 加密的的值,解析出来即为命令中指定的reloadcmd命令,用于在证书更新后重新加载Nginx应用。

《使用acme.sh申请免费通配符证书》有4条评论

  1. I am really impressed with your writing skills
    and also with the layout on your blog. Is this a paid theme or did you
    customize it yourself? Either way keep up
    the excellent quality writing, it’s rare to see a
    nice blog like this one today.

    回复
  2. I’m curious to find out what blog platform you are utilizing?
    I’m experiencing some small security problems with my latest blog and I’d like to find something more
    safeguarded. Do you have any suggestions?

    回复

发表评论

error: Content is protected !!