差别
这里会显示出您选择的修订版和当前版本之间的差别。
| 后一修订版 | 前一修订版 | ||
| itwiki:acme-cert [2024/01/04 02:21] – 创建 ovwx@live.io | itwiki:acme-cert [Unknown date] (当前版本) – 移除 - 外部编辑 (Unknown date) 127.0.0.1 | ||
|---|---|---|---|
| 行 1: | 行 1: | ||
| - | ===== ACME.SH 证书工具 ===== | ||
| - | |||
| - | ACME 是一个使用纯 BASH SHELL 写的用于 Let's encrypt 等免费SSL证书的签发、续签工具 | ||
| - | |||
| - | 项目地址：[[https:// | ||
| - | |||
| - | ==== ACME 安装 ==== | ||
| - | |||
| - | < | ||
| - | |||
| - | curl -k https:// | ||
| - | |||
| - | </ | ||
| - | |||
| - | ==== 安装 socat ==== | ||
| - | |||
| - | 当作为独立服务器申请证书时，需要使用 socat 运行一个简易Web服务器 | ||
| - | |||
| - | < | ||
| - | |||
| - | yum install socat | ||
| - | |||
| - | </ | ||
| - | |||
| - | ==== 重载 .bashrc ==== | ||
| - | |||
| - | < | ||
| - | . / | ||
| - | < | ||
| - | |||
| - | ===== 签发证书 ===== | ||
| - | |||
| - | 使用 CloudFlare APIKEY | ||
| - | |||
| - | ==== 找到 Cloudflare 密钥 ==== | ||
| - | < | ||
| - | # | ||
| - | export CF_Zone_ID=" | ||
| - | # | ||
| - | |||
| - | Multi-Domain | ||
| - | export CF_Key=" | ||
| - | export CF_Email=" | ||
| - | |||
| - | </ | ||
| - | |||
| - | 当为主域名或者泛域名申请证书时，需要使用 '' | ||
| - | 该数据非常重要，不能外泄，这两个数据可以在 Cloudflare 的 DNS 的控制台那里找到 | ||
| - | |||
| - | ==== 签发证书 ==== | ||
| - | < | ||
| - | |||
| - | ==== 刷新证书 ==== | ||
| - | |||
| - | < | ||
| - | $acmedir/ | ||
| - | "/ | ||
| - | </ | ||
| - | |||
| - | 在多台服务器上使用证书：需在一台服务器上签发了证书之后，将整个 " | ||
| - | |||
| - | 证书位置 | ||
| - | < | ||
| - | # Your cert is in: / | ||
| - | # Your cert key is in: / | ||
| - | # The intermediate CA cert is in: ~/ | ||
| - | # And the full chain certs is there: ~/ | ||
| - | </ | ||
| - | |||
| - | ==== 移除证书 ==== | ||
| - | |||
| - | < | ||
| - | |||
| - | ==== 安装证书到特定目录 ==== | ||
| - | < | ||
| - | acme.sh --issue --dns dns_cf -d domain.com -d *.domain.com \ | ||
| - | --installcert \ | ||
| - | --key-file / | ||
| - | --fullchain-file / | ||
| - | --reloadcmd "nginx -s reload" | ||
| - | </ | ||
| - | |||
| - | ===== 查看证书信息 ===== | ||
| - | |||
| - | 查看证书信息 | ||
| - | |||
| - | < | ||
| - | |||
| - | 查看Key信息 | ||
| - | |||
| - | < | ||
| - | openssl rsa -noout -text -in server.key | ||
| - | openssl ec -noout -text -in server.key # | ||
| - | </ | ||
| - | |||
| - | 查看证书请求信息 | ||
| - | |||
| - | < | ||
| - | |||