{"id":53,"date":"2022-01-12T12:31:52","date_gmt":"2022-01-12T04:31:52","guid":{"rendered":"https:\/\/blog.tonyleong.top\/?p=53"},"modified":"2022-01-13T12:21:29","modified_gmt":"2022-01-13T04:21:29","slug":"acme%e7%94%b3%e8%af%b7%e5%85%8d%e8%b4%b9ssl%e8%af%81%e4%b9%a6-nginx%e6%b3%95","status":"publish","type":"post","link":"https:\/\/blog.tonyleong.top\/?p=53","title":{"rendered":"Acme\u7533\u8bf7\u514d\u8d39SSL\u8bc1\u4e66\u2014\u2014nginx\u6cd5"},"content":{"rendered":"\n

\u8981\u901a\u8fc7https\u8bbf\u95ee\u6211\u4eec\u90e8\u7f72\u7684\u7f51\u7ad9\u65f6\uff0c\u5c31\u8981\u7528\u5230SSL\u8bc1\u4e66\uff0c\u5229\u7528acme\u811a\u672c<\/a>\u53ef\u4ee5\u5f88\u65b9\u4fbf\u5feb\u6377\u5730\u7533\u8bf7\u5230\u514d\u8d39\u7684SSL\u8bc1\u4e66\u3002<\/p>\n\n\n\n

\u51c6\u5907\u5de5\u4f5c\uff1a\u5177\u6709\u516c\u7f51IP\u7684\u670d\u52a1\u5668\u4e00\u53f0\uff1b\u57df\u540d\u4e00\u4e2a\uff08\u5df2\u89e3\u6790\u597d\u7684\uff09<\/p>\n\n\n\n

\n

\u4e00\u3001\u5b89\u88c5acme<\/h2>\n\n\n\n

\u56e0\u4e3aacme\u66f4\u6539\u4e86\u9ed8\u8ba4\u7684CA\u4e3aZeroSSL\uff0c\u9700\u8981\u90ae\u4ef6\u6ce8\u518c\uff0c\u5c06\u4e0b\u5217my@example.com\u6539\u4e3a\u81ea\u5df1\u7684\u90ae\u4ef6\u5730\u5740<\/p>\n\n\n\n

curl https:\/\/get.acme.sh | sh -s email=my@example.com<\/code><\/pre>\n\n\n\n
\u65ad\u5f00\u7ec8\u7aef\u91cd\u65b0\u8fde\u63a5\u670d\u52a1\u5668<\/p>\n<\/div><\/div>\n\n\n\n
\n
\u4e8c\u3001\u66f4\u6539nginx\u914d\u7f6e<\/h2>\n\n\n\n
\u5907\u4efd \/etc\/nginx\/ \u76ee\u5f55\u4e0b\u7684nginx.conf\u4e3anginx.conf1\uff0c\u65b0\u5efa\u4e00\u4e2anginx.conf\uff0c\u8f93\u5165\u4ee5\u4e0b\u5185\u5bb9\uff0c\u5e76\u5c06example.com\u66f4\u6539\u4e3a\u4f60\u81ea\u5df1\u7684\u57df\u540d\uff0c\u4fdd\u5b58<\/p>\n\n\n\n
user  root;\nworker_processes  1;\nerror_log  \/var\/log\/nginx\/error.log warn;\npid        \/var\/run\/nginx.pid;\nevents {\n    worker_connections  1024;\n}\nhttp {\n    include       \/etc\/nginx\/mime.types;\n    default_type  application\/octet-stream;\n    log_format  main  '$remote_addr - $remote_user [$time_local] \"$request\" '\n                      '$status $body_bytes_sent \"$http_referer\" '\n                      '\"$http_user_agent\" \"$http_x_forwarded_for\"';\n    access_log  \/var\/log\/nginx\/access.log  main;\n    sendfile        on;\n    #tcp_nopush     on;\n    keepalive_timeout  120;\n    client_max_body_size 20m;\n    #gzip  on;\n    server {\n        listen       80;\n        server_name  example.com;\n        root \/usr\/share\/nginx\/html;\n        index index.php index.html index.htm;\n    }\n}<\/code><\/pre>\n\n\n\n
\u91cd\u542fnginx\uff0c\u5e76\u5728\u6d4f\u89c8\u5668\u4e2d\u8f93\u5165\u4f60\u7684\u57df\u540d\uff0c\u67e5\u770b\u662f\u5426\u6b63\u5e38\u52a0\u8f7d”Welcome to nginx”\u9875\u9762<\/p>\n\n\n\n
systemctl restart nginx<\/code><\/pre>\n\n\n\n
\n
<\/div>\n<\/div>\n<\/div><\/div>\n\n\n\n
\n
\u4e09\u3001\u7533\u8bf7\u8bc1\u4e66<\/h2>\n\n\n\n
acme.sh --issue -d example.com --nginx<\/code><\/pre>\n\n\n\n
\u8fd9\u4e00\u6b65\u6267\u884c\u65f6\u95f4\u53ef\u80fd\u6bd4\u8f83\u957f\uff0c\u8010\u5fc3\u7b49\u5f85<\/p>\n<\/div><\/div>\n\n\n\n
\n
\u56db\u3001\u5b89\u88c5\u8bc1\u4e66<\/h2>\n\n\n\n
\u8981\u7279\u522b\u6ce8\u610f\u4e0a\u4e00\u6b65\u7533\u8bf7\u5b8c\u540e\uff0c\u4e0d\u8981\u4f7f\u7528~\/.acme.sh\/<\/strong>\u4e0b\u7684\u8bc1\u4e66\uff0c\u9700\u8981\u5b89\u88c5\u8bc1\u4e66\u5230\u6307\u5b9a\u7684\u4f4d\u7f6e\uff0c\u5b89\u88c5\u8def\u5f84 \/usr\/local\/etc\/nginx\/ssl\/ \u53ef\u4ee5\u6839\u636e\u81ea\u5df1\u60c5\u51b5\u4fee\u6539<\/p>\n\n\n\n
acme.sh --install-cert -d example.com \\\n--key-file       \/usr\/local\/etc\/nginx\/ssl\/key.pem  \\\n--fullchain-file \/usr\/local\/etc\/nginx\/ssl\/cert.pem \\\n--reloadcmd     \"service nginx force-reload\"<\/code><\/pre>\n\n\n\n
\u73b0\u5728\u5c31\u53ef\u4ee5\u4eab\u7528\u4f60\u7684SSL\u8bc1\u4e66\u4e86\uff01<\/p>\n<\/div><\/div>\n\n\n\n
\n
\u4e94\u3001\u81ea\u52a8\u66f4\u65b0\uff08\u53ef\u9009\uff09<\/h2>\n\n\n\n
acme\u6bcf60\u5929\u4f1a\u81ea\u52a8\u7eed\u7b7e\u8bc1\u4e66\u3002\u53ef\u4ee5\u8bbe\u7f6e\u81ea\u52a8\u66f4\u65b0\u4ee5\u83b7\u53d6\u6700\u65b0\u7684\u811a\u672c\uff1a<\/p>\n\n\n\n
acme.sh --upgrade --auto-upgrade<\/code><\/pre>\n\n\n\n
\u5982\u679c\u60f3\u8981\u53d6\u6d88\uff1a<\/p>\n\n\n\n
acme.sh --upgrade --auto-upgrade 0<\/code><\/pre>\n<\/div><\/div>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
\u5229\u7528acme\u5feb\u901f\u7533\u8bf7\u514d\u8d39SSL\u8bc1\u4e66\uff0c\u53ef\u81ea\u52a8\u7eed\u7ea6\uff01<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[4,3],"class_list":["post-53","post","type-post","status-publish","format-standard","hentry","category-linux","tag-ssl","tag-3"],"jetpack_featured_media_url":"","jetpack-related-posts":[],"jetpack_likes_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pdDIcV-R","_links":{"self":[{"href":"https:\/\/blog.tonyleong.top\/index.php?rest_route=\/wp\/v2\/posts\/53","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.tonyleong.top\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.tonyleong.top\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.tonyleong.top\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.tonyleong.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=53"}],"version-history":[{"count":7,"href":"https:\/\/blog.tonyleong.top\/index.php?rest_route=\/wp\/v2\/posts\/53\/revisions"}],"predecessor-version":[{"id":64,"href":"https:\/\/blog.tonyleong.top\/index.php?rest_route=\/wp\/v2\/posts\/53\/revisions\/64"}],"wp:attachment":[{"href":"https:\/\/blog.tonyleong.top\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=53"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.tonyleong.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=53"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.tonyleong.top\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=53"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}