Linux脚本申请证书

来源:互联网 发布:每天一杯速溶咖啡 知乎 编辑:程序博客网 时间:2024/05/22 11:18
1、下载文件
wget https://raw.githubusercontent.com/xdtianyu/scripts/master/lets-encrypt/letsencrypt.sh
wget https://raw.githubusercontent.com/xdtianyu/scripts/master/lets-encrypt/letsencrypt.conf
2、授权
chmod +x letsencrypt.sh
3、下载插件
yum install python-argparse
4、运行
./letsencrypt.sh letsencrypt.conf

login.xiaomilaile.com/.well-known/acme-challenge9AVVF3uwWfpiq7CQtkpCG5SeMApVVPG3KNkBdaQ871A 



大神写的脚本:
http://www.111cn.net/sys/linux/103559.htm

就是有个域名验证的问题
他会生成一个文件 然后会去访问 需要访问到这个文件就算域名验证成功 你看那个网址上有说明的 







就这样做就可以申请到let's encrypt证书,也不用通过网站申请


一般会以这么个结尾来访问生成的验证域名文件


参考Nginx配置

 server {        listen 443 ssl;        server_name heqf.com;       # ssl_certificate     /data/nginx/conf/1_www.heqf.com_bundle.crt;        #ssl_certificate_key /data/nginx/conf/2_www.heqf.com_bundle.key;        ssl_certificate     /opt/letsencrypt/example.chained.crt;        ssl_certificate_key /opt/letsencrypt/example.com.key;          location / {            root  /data/nginx/html/heqfweb1_0;            index login.html;         }        location /local-command {              proxy_pass http://11.11.11.11:8011/command;        }        location /local-getUrl {              proxy_pass http://11.11.11.11:8011/getUrl;        }location /local-interface {              proxy_pass http://11.11.11.11:8011/interface;        }location ^~ /uap-html/ {      proxy_pass http://user.heqf.com/;}                location /uap-interface {              proxy_pass http://user.heqf.com:8091/interface;        }location /msg-a201 {              proxy_pass http://heqf.com;        }location /msg-a202 {              proxy_pass http://heqf.com;        }location /msg-a101 {              proxy_pass http://11.11.11.11;        }location /msg-a102 {              proxy_pass http://11.11.11.11;        }location ^~ /aliyun/ {            proxy_pass http://heqf.img-cn-beijing.aliyuncs.com/;        }               location ^~ /file-view {            proxy_pass http://11.11.11.11:3300/upload_url;        }        location ^~ /.well-known/acme-challenge/{              proxy_pass http://heqf.com:9099/.well-known/acme-challenge/;        }        error_page   500 502 503 504  /50x.html;        location = /50x.html {            root   html;       }    }

server {        listen       80;        server_name  localhost;rewrite ^(.*)$  https://$host$1 permanent;        #charset koi8-r;         charset utf-8;        #access_log  logs/host.access.log  main;        location / {            root  /data/nginx/html/heqf1_0;           # index  index.html index.htm;             index login.html;        }        error_page   500 502 503 504  /50x.html;        location = /50x.html {            root   html;        }location ^~ /.well-known/acme-challenge/{              proxy_pass http://heqf.com:9099/.well-known/acme-challenge/;        }           }



1 0
原创粉丝点击