🌑

帮帮技术站

acme.sh 自动签发ssl

  1. godaddy自动签发
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    acme.sh方式生成证书

    (ROOT运行)

    https://github.com/acmesh-official/acme.sh/wiki/%E8%AF%B4%E6%98%8E

    curl https://get.acme.sh | sh -s email=chengdukm@gmail.com

    ~/.acme.sh/acme.sh --uninstall rm -rf ~/.acme.sh


    export GD_Key="1111111" export GD_Secret="222222"

    <回调的时候,证书签名必须和域名一样> acme.sh --issue --dns dns_gd -d test.com -d *.test.com acme.sh --issue --dns dns_gd -d *.test.com

    ~/.acme.sh/acme.sh --install-cert -d *.test.com --ecc --key-file /usr/local/openresty/nginx/conf/certs/test.com_key.pem --fullchain-file /usr/local/openresty/nginx/conf/certs/test.com_fullchain.pem

  1. 腾讯云签发
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

参见:
https://github.com/acmesh-official/acme.sh/wiki/%E8%AF%B4%E6%98%8E

2023年更新-支出腾讯云解析DNS添加

https://r2wind.cn/articles/20230914.html

ROOT用户执行:

curl https://get.acme.sh | sh -s email=chengdukm@gmail.com

大陆用户:
git clone https://gitee.com/neilpang/acme.sh.git
cd acme.sh
./acme.sh --install -m chengdukm@gmail.com

升级
~/.acme.sh/acme.sh --upgrade
卸载
~/.acme.sh/acme.sh --uninstall

**** 注意 腾讯云和DNSPOD不一样 ****
export Tencent_SecretId="AKIDELH1Zt1yi12121212"
export Tencent_SecretKey="qTr1zmMispY3M23233232323"

~/.acme.sh/acme.sh --issue --dns dns_tencent -d bbb.ltd -d *.bbb.ltd


mkdir /usr/local/openresty/ssl
复制并加载openresty(ROOT)

~/.acme.sh/acme.sh --install-cert -d bbb.ltd --key-file /usr/local/openresty/ssl/bbb.ltd.key.pem --fullchain-file /usr/local/openresty/ssl/bbb.ltd.fullchain.pem --reloadcmd "systemctl reload openresty"

— Jan 15, 2024

Search