0x01 鍓嶈█

濡備粖鐢宠SSL璇佷功鐨勯棬妲涜秺鏉ヨ秺浣庯紝浠庨偅涓畨鍗撻粯璁や笉淇′换鐨凷tartSSL锛屽埌鏌愬疂涓婂嚑鍧椾竴骞寸殑鍚勭璇佷功锛屽啀鍒版矁閫氱殑SSL璇佷功锛岀敋鑷砪loudflare鐨勪竴閿甋SL锛屼笉闇€瑕佸灏戦挶鍜屾椂闂村嵆鍙粰鑷繁绔欏墠闈㈠姞涓€涓彁鍗囬€兼牸鐨勫皬缁块攣锛岃繖绡囨枃绔犲氨灏嗗憡璇変綘濡備綍姝ｇ‘鐨勭敵璇稬et's encrypt鐨勫厤璐筍SL璇佷功銆?/span>

聽

0x02 鍑嗗

璇风‘璁や綘宸茬粡鍑嗗濂戒簡浠ヤ笅鍑犱釜蹇呴渶鍝侊細

1.涓€涓繍琛岀潃浠讳綍Linux鍙戣鐗堢殑vps锛圖ebian鏈€濂斤紝褰撶劧鍏朵粬鐨勪篃鏃犳墍璋擄級

2.涓€涓煙鍚?/span>

3.涓€鍙拌仈缃戠殑鐢佃剳锛堝杺

聽

0x03 鐢宠

棣栧厛锛屽皢闇€瑕佺敵璇风殑鍩熷悕瑙ｆ瀽鍒颁綘鐨剉ps鐨刬p锛堟敞鎰忥細Let's encrypt鐨勫厤璐筍SL璇佷功涓嶆敮鎸佹硾鍩熷悕锛屾墍浠ラ渶瑕佸皢浣犳墍鏈夋兂鐢宠璇佷功鐨勫瓙鍩熷悕閮借В鏋愯繃鍘伙級锛岀劧鍚庤繛鎺ヤ笂vps鐨勭粓绔紝鎵ц浠ヤ笅鍛戒护鏉ヨ幏寰楃敵璇峰伐鍏凤細

git聽clone聽https://github.com/letsencrypt/letsencrypt
cd聽letsencrypt

锛堝娌℃湁瀹夎git璇疯嚜琛岄€氳繃yum鎴朼pt-get瀹夎锛?/p>

杩欐椂闇€瑕佸厛鏆傚仠鎺墂eb鏈嶅姟骞跺紑鏀鹃槻鐏锛堣繖姝ュ叿浣撴墽琛岀殑鎿嶄綔璇锋牴鎹疄闄呮儏鍐佃嚜琛屼慨鏀癸級

service聽nginx聽stop
service聽iptables聽stop

瀹屾垚杩欎竴姝ュ悗灏卞彲浠ュ紑濮嬬敵璇疯瘉涔︿簡锛屾墽琛屼笅鍒楀懡浠?/p>

./letsencrypt-auto聽certonly聽--standalone聽-d聽example.com聽-d聽www.example.com

锛堟瘡涓?d鍙傛暟鍚庨潰璺熶竴涓煙鍚嶏紝闇€瑕佺敵璇峰嚑涓煙鍚嶇殑璇佷功灏辫窡鍑犱釜锛岄渶瑕佺‘璁よ繖浜涘煙鍚嶉兘瑙ｆ瀽鍒板綋鍓峷ps鐨刬p涓婏級

鎵ц鍚庝細鑷姩瀹夎杩愯鐜锛屽苟瑕佹眰浣犺緭鍏ラ偖绠憋紝骞跺悓鎰忓崗璁紝鎸夌収鎻愮ず璧板氨琛屻€?/p>

瀹屾垚鍚庝細鏈夊涓嬫彁绀猴細

Congratulations!聽Your聽certificate聽and聽chain聽have聽been聽saved聽at
/etc/letsencrypt/live/example.com/fullchain.pem.聽Your聽cert聽will
expire聽on聽xxxx-xx-xx.聽To聽obtain聽a聽new聽version聽of聽the聽certificate聽in
the聽future,聽simply聽run聽Let's聽Encrypt聽again.

杩欐椂浣犵殑璇佷功灏辩敵璇峰ソ浜嗭紝鍘诲畠鎻愮ず鐨勭洰褰曢噷锛宖ullchain.pem鍗充负璇佷功鏂囦欢锛宲rivate.pem鍗充负绉侀挜

娉ㄦ剰锛氱敵璇峰埌鐨勮瘉涔︽湁鏁堟湡3涓湀锛屽埌鏈熷悗闇€瑕佺敤濡備笅鍛戒护閲嶆柊缁湡锛?/p>

./letsencrypt-auto聽renew

聽

0x04 鍚庣画

鎺ヤ笅鏉ュ氨鏄幓閮ㄧ讲SSL璇佷功鍒版湇鍔″櫒涓婏紝鍏蜂綋鎿嶄綔鍥犱娇鐢ㄧ殑鏈嶅姟鍣ㄨ蒋浠惰€屽紓锛屾湰鏂囧皢涓嶅啀澶氳銆?/span>

鏈€鍚庢晥鏋滃鍥撅細