SSL 证书申请流程

2022-09-18 约 197 字预计阅读 1 分钟 | 编辑

SSL 证书申请流程

简单申请，记录下

使用 acme - dns 方式申请

设置 CA

1
2
3
docker run --rm  -it  \
  -v $PWD/acme:/acme.sh  \
  neilpang/acme.sh  --set-default-ca --server letsencrypt

1
2
3
docker run --rm  -it  \
  -v $PWD/acme:/acme.sh  \
  neilpang/acme.sh  --register-account -m ***@gmail.com

申请证书

1
2
3
docker run --rm  -it  \
  -v $PWD/acme:/acme.sh  \
  neilpang/acme.sh  --issue -d "*.wxiang.cc"  --dns --yes-I-know-dns-manual-mode-enough-go-ahead-please

Ps: 测试 TXT 是否成功 -> https://toolbox.googleapps.com/apps/dig

更新证书

1
2
3
docker run --rm  -it  \
  -v $PWD/acme:/acme.sh  \
  neilpang/acme.sh  --renew -d "*.wxiang.cc"  --dns --yes-I-know-dns-manual-mode-enough-go-ahead-please

导出证书(nginx)

1
2
3
4
5
6
docker run --rm  -it  \
  -v $PWD/acme:/acme.sh  \
  neilpang/acme.sh --install-cert -d "*.wxiang.cc" \
  --cert-file /acme.sh/certs/cert \
  --key-file /acme.sh/certs/key \
  --fullchain-file /acme.sh/certs/fullchain

Nginx 配置

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
server{
    listen 443 ssl;
    server_name *.wxiang.cc;
    index  index.php index.html index.htm;

    ssl_certificate /etc/nginx/certs/cert;
    ssl_certificate_key /etc/nginx/certs/key;

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Range $http_range;
        proxy_set_header If-Range $http_if_range;
        proxy_redirect off;
        proxy_pass http://alist:5244;
        # the max size of file to upload
        client_max_body_size 20000m;
    }  
}

server {
    listen       80;
    server_name  *.wxiang.cc;
    return 301 https://$server_name$request_uri;
}

目录

SSL 证书申请流程

SSL 证书申请流程

使用 acme - dns 方式申请