\n1.\u81ea\u52a8\u5b89\u88c5\uff1a<\/p>\n
wget https:\/\/dl.eff.org\/certbot-auto
\nchmod a+x certbot-auto
\n.\/certbot-auto <\/p>\n
2.\u751f\u6210\u57df\u540d\u8bc1\u4e66
\n .\/certbot-auto certonly –email xxxxx@qq.com –agree-tos –webroot -w \/home\/wwwroot\/xxxxx -d www.xxxxx.com <\/p>\n
Saving debug log to \/var\/log\/letsencrypt\/letsencrypt.log
\nPlugins selected: Authenticator webroot, Installer None
\nObtaining a new certificate
\nPerforming the following challenges:
\nhttp-01 challenge for www.xxxxx.com
\nUsing the webroot path \/home\/wwwroot\/xxxxx for all unmatched domains.
\nWaiting for verification…
\nCleaning up challenges<\/p>\n
IMPORTANT NOTES:
\n – Congratulations! Your certificate and chain have been saved at:
\n \/etc\/letsencrypt\/live\/www.xxxxx.com\/fullchain.pem
\n Your key file has been saved at:
\n \/etc\/letsencrypt\/live\/www.xxxxx.com\/privkey.pem
\n Your cert will expire on 2018-04-21. To obtain a new or tweaked
\n version of this certificate in the future, simply run certbot-auto
\n again. To non-interactively renew *all* of your certificates, run
\n “certbot-auto renew”
\n – If you like Certbot, please consider supporting our work by:<\/p>\n
Donating to ISRG \/ Let’s Encrypt: https:\/\/letsencrypt.org\/donate
\n Donating to EFF: https:\/\/eff.org\/donate-le <\/p>\n
3. \u5982\u679c\u662f\u7528\u7684lnmp\uff0c\u4e00\u5b9a\u8981\u6ce8\u610f\u8fd9\u4e24\u4e2a\u6587\u4ef6\uff1a<\/p>\n
\/usr\/local\/nginx\/conf\/vhost\/www.xxxxx.com.conf #\u4f60\u7684\u57df\u540d\u5bf9\u5e94\u7684\u6587\u4ef6 <\/p>\n
\u8bf7\u628a\u91cc\u9762\u7684\u4ee5\u4e0b\u5185\u5bb9\uff1a
\n location ~ \/\\.
\n {
\n deny all;
\n } <\/p>\n
\u6682\u65f6\u66f4\u6539\u4e3a\uff1a
\n location ~ \/\\.
\n {
\n allow all;
\n } <\/p>\n
\u5426\u5219\u83b7\u53d6\u8ba4\u8bc1\u8bc1\u4e66\u7684\uff0c\u603b\u5931\u8d25\uff0c\u63d0\u793a403 Forbidden\u3002<\/p>\n
\u7136\u540e\u5728\/usr\/local\/nginx\/conf\/vhost\/www.xxxxx.com.conf #\u4f60\u7684\u57df\u540d\u5bf9\u5e94\u7684\u6587\u4ef6\uff0c\u6700\u4e0a\u9762\u6dfb\u52a0\u5982\u4e0b\u5185\u5bb9\uff0c\u6ce8\u610f\u8981\u628axxxx\u7684\u5730\u65b9\u6539\u6210\u4f60\u81ea\u5df1\u7684\u3002<\/p>\n
server
\n {
\n listen 443 ssl;
\n ssl on;
\n server_name www.xxxxx.com xxxxx.com;
\n index index.html index.htm index.php default.html default.htm default.php;
\n root \/home\/wwwroot\/xxxxx;<\/p>\n
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
\n ssl_prefer_server_ciphers on;
\n ssl_certificate \/etc\/letsencrypt\/live\/www.xxxxx.com\/fullchain.pem;
\n ssl_certificate_key \/etc\/letsencrypt\/live\/www.xxxxx.com\/privkey.pem;
\n ssl_session_timeout 5m;<\/p>\n
include none.conf;
\n #error_page 404 \/404.html;
\n include enable-php.conf;
\n } <\/p>\n
\u8fd9\u4e2a\u65f6\u5019\u901a\u8fc7https\u5e94\u8be5\u5c31\u80fd\u8bbf\u95ee\u4f60\u7684\u7f51\u7ad9\u4e86\uff01\u53ef\u4ee5\u901a\u8fc7https:\/\/www.ssllabs.com\/ssltest\/\u6d4b\u8bd5\u4f60\u7f51\u7ad9\u5b89\u5168\u7b49\u7ea7\u3002<\/p>\n
\u51fa\u4e8e\u5b89\u5168\u7b56\u7565\uff0c Let\u2019s Encrypt \u7b7e\u53d1\u7684\u8bc1\u4e66\u6709\u6548\u671f\u53ea\u6709 90 \u5929\uff0c\u6240\u4ee5\u9700\u8981\u6bcf\u9694\u4e09\u4e2a\u6708\u5c31\u8981\u66f4\u65b0\u4e00\u6b21\u5b89\u5168\u8bc1\u4e66\uff0c\u867d\u7136\u6709\u70b9\u9ebb\u70e6\uff0c\u4f46\u662f\u4e3a\u4e86\u7f51\u7edc\u5b89\u5168\uff0c\u8fd9\u662f\u503c\u5f97\u7684\u4e5f\u662f\u5e94\u8be5\u7684\u3002\u597d\u5728 Certbot \u4e5f\u63d0\u4f9b\u4e86\u5f88\u65b9\u4fbf\u7684\u66f4\u65b0\u65b9\u6cd5\u3002<\/p>\n
1.\u6d4b\u8bd5\u4e00\u4e0b\u66f4\u65b0\uff0c\u8fd9\u4e00\u6b65\u6ca1\u6709\u5728\u771f\u7684\u66f4\u65b0\uff0c\u53ea\u662f\u5728\u8c03\u7528 Certbot \u8fdb\u884c\u6d4b\u8bd5<\/p>\n
.\/certbot-auto renew –dry-run
\n \u5982\u679c\u770b\u5230\u5982\u4e0b\u4fe1\u606f\u8bf4\u660e\u6d4b\u8bd5\u6210\u529f\uff1a
\n Congratulations, all renewals succeeded. The following certs have been renewed:
\n \/etc\/letsencrypt\/live\/www.xxxx.com\/fullchain.pem (success) <\/p>\n
2.\u7528 crontab \u5b9a\u65f6\u66f4\u65b0<\/p>\n
# \u7f16\u8f91 crontab
\ncrontab -e
\n# \u6bcf\u9694\u4e24\u4e2a\u67081\u53f7\u7684\u96f6\u70b9\u5c31\u4f1a\u81ea\u52a8\u66f4\u65b0\u8bc1\u4e66\uff0c5\u5206\u949f\u540enginx\u91cd\u65b0\u52a0\u8f7d\u914d\u7f6e\u3002\u6ce8\u610fcertbot-auto\u66f4\u6539\u6210\u4f60\u81ea\u5df1\u7684<\/p>\n
00 00 1 2,4,6,8,10,12 * \/usr\/local\/certbot-auto renew –quiet –no-self-upgrade
\n05 00 1 2,4,6,8,10,12 * lnmp restart <\/p>\n
\u53c2\u8003\u7f51\u7ad9\uff1a <\/p>\n
\u4f7f\u7528Let’s Encrypt\u514d\u8d39SSL\u8bc1\u4e66 ubuntu \u6559\u7a0b<\/a><\/p><\/blockquote>\n