官网网址:https://certbot.eff.org/
在页面上选择相应的版本和工具
这里的环境是ubuntu16.04和nginx
1.先ssh到服务器中
2.安装certbot的需要的环境
sudo apt-get update
sudo apt-get install software-properties-common
sudo add-apt-repository universe
sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update
3.安装certbot
sudo apt-get install certbot python-certbot-nginx
4,下载基于nginx的certbot证书
sudo certbot --nginx
第一次运行时候会有很多步骤
1.填写email
2.选择domain name(域名)或填写域名
3.是否可以通过email发送消息给你
4.输入webroot
5.记不清了
成功后会在/etc/letsencrypt/live/下面生成以你域名命名的文件夹,里面有你的证书文件
5.配置到nginx里面
server {
server_name your_domain_name;
location /media/ {
alias /data/media/;
}
location /static/ {
alias /home/name/project/project/static/;
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/your_domain_name/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/your_domain_name/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = your_domain_name) {
return 301 https://$host$request_uri;
} # managed by Certbot
listen 80;
server_name your_domain_name;
return 404; # managed by Certbot
}
网友评论