给网站添加https支持

openssl genrsa 4096 > account.key

  

openssl genrsa 4096 > domain.key

 

openssl req -new -sha256 -key domain.key -subj "/" -reqexts SAN -config <(cat /etc/pki/tls/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS:www.zmfei4.com")) > domain.csr

 

wget https://raw.githubusercontent.com/diafygi/acme-tiny/master/acme_tiny.py

  

python acme_tiny.py --account-key ./account.key --csr ./domain.csr --acme-dir /var/challenges/ > ./signed.crt

  

wget -O - https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem > intermediate.pem

  

cat signed.crt intermediate.pem > chained.pem

  

 

 

 

posted @ 2020-03-24 17:45  公子若不胖天下谁胖  阅读(168)  评论(0)    收藏  举报