使用 letsencrypt 启用 SSL - Y.J.S

使用 letsencrypt 启用 SSL

Jan 22, 2017

Let’s Encrypt 是一个免费、自动化、开放的 CA（证书颁发机构），让我们利用它来启用对 nginx 服务的 Web 应用程序的 SSL 访问。

Download certbot tool

$ wget https://dl.eff.org/certbot-auto
$ chmod a+x certbot-auto
$ ./certbox-auto

Get certificate for your domain name

$ ./certbot-auto certonly --nginx -d <domain.name>

Find and verify that privkey.pem and fullchain.pem exists

/etc/letsencrypt/live/<domain.name>/privkey.pem
/etc/letsencrypt/live/<domain.name>/fullchain.pem

Config on nginx

server {
    listen   80;
    listen   443 ssl;
    server_name  domain.name;
    ssl_certificate  /etc/letsencrypt/live/domain.name/fullchain.pem;
    ssl_certificate_key  /etc/letsencrypt/live/domain.name/privkey.pem;
    location / {
        proxy_pass http://0.0.0.0:8080;
        include /etc/nginx/proxy_params;
    }
}

Renew or update certificate

./certbot-auto renew

参考资料

ssl

🇨🇳 🇯🇵 📍 ⌚