https证书配置

a min to read post

使用acme.sh生成https证书

# 安装，需要修改email为自己的邮箱
curl https://get.acme.sh | sh -s email=my@example.com

# standalone需要安装socat
apt-get install  socat -y
# 生成证书
acme.sh --issue -d left2east.com --standalone
#复制到nginx目录下
cp /root/.acme.sh/left2east.com_ecc/left2east.com.cer /etc/nginx/ssl/
cp /root/.acme.sh/left2east.com_ecc/left2east.com.key /etc/nginx/ssl/

nginx配置

    listen 443 ssl;
    listen 80;
    server_name www.left2east.com;

    ssl_certificate /etc/nginx/ssl/left2east.com.cer;
    ssl_certificate_key /etc/nginx/ssl/left2east.com.key;
Published At