Use acme.sh issued Let's Encrypt free digital certificate

Installation -------------- ----------------
curl https://get.acme.sh | SH
# Let alias into force
source ~ / .bashrc


DNS API ------------ ------------- set
in dns operator of the site set up DNS API API KEY / SECRET KEY
such as Ali cloud, where the domain name account # after logging in, enter the following page set https://usercenter.console.aliyun.com/#/manage/ak

Secret # get key and the following two lines

export Ali_Key="sdfsdfsdfljlbjkljlkjsdfoiwje"

export Ali_Secret="jlsdflanljkljlfdsaklkjflsa"

-------------- ------------- requesting the issuance of a certificate
# can apply for multiple domain names can be pan-domain
acme.sh --issue - -dns dns_ali -d smallpay.cn -d * .smallpay.com

#显示得到证书信息
#[Thu Sep 26 12:29:40 CST 2019] Your cert is in /root/.acme.sh/*.smallpay.com/*.smallpay.com.cer
#[Thu Sep 26 12:29:40 CST 2019] Your cert key is in /root/.acme.sh/*.smallpay.com/*.smallpay.com.key
#[Thu Sep 26 12:29:40 CST 2019] The intermediate CA cert is in /root/.acme.sh/*.smallpay.com/ca.cer
#[Thu Sep 26 12:29:40 CST 2019] And the full chain certs is there: /root/.acme.sh/*.smallpay.com/fullchain.cer

------------- acme automatically adds ----- crontab
crontab, will expire automatically checks Continued #
# Crontab-the -l
# 43 0 * * * "/root/.acme. sh "/acme.sh --cron --home" /root/.acme.sh " > / dev / null

Guess you like

Origin www.cnblogs.com/suminem/p/11607003.html