Let’s Encrypt-SSL 证书申请

2017-5-26 更新 https://zerossl.com/free-ssl

2016-1-30 更新: https://www.sslforfree.com

安装

apt-get update
apt-get install git
git clone https://github.com/letsencrypt/letsencrypt
cd letsencrypt

运行

先停止 nginx 再运行

service nginx stop
./letsencrypt-auto certonly --standalone --email mail@mail.com -d bpplpp.com -d www.bpplpp.com

完成(2016-6-12 测试,有效期 90 天)

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at
 /etc/letsencrypt/live/bpplpp.com/fullchain.pem. Your cert will
 expire on 2016-09-10\. To obtain a new or tweaked version of this
 certificate in the future, simply run letsencrypt-auto again. To
 non-interactively renew *all* of your certificates, run
 "letsencrypt-auto renew"
 - If you like Certbot, please consider supporting our work by:

 Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate
 Donating to EFF: https://eff.org/donate-le

生成证书路径:

/etc/letsencrypt/live/bpplpp.com/fullchain.pem & privkey.pem
# fullchain.pem(等同.cert)
# privkey.pem(等同.key)

最后 nginx 配置 SSL,启动 nginx,完成。

续期

./letsencrypt-auto --renew certonly --email mail@mail.com -d bpplpp.com -d www.bpplpp.com