申请 Let's Encrypt 的 SSL 证书
标签
数学/密码学/证书/TLS/SSL
数学/密码学/证书/TLS/HTTPS
数学/密码学/证书/TLS/域名证书
数学/密码学/证书/LetsEncrypt
命令行/openssl
操作系统/Debian
操作系统/CentOS
操作系统/Debian/Debian-11
操作系统/CentOS/CentOS-8
操作系统/CentOS/CentOS-7
字数
231 字
阅读时间
2 分钟
CentOS 7/8
shell
sudo dnf install certbot python3-certbot-dns-cloudflareshell
mkdir -p .secrets/certbot && echo -e 'dns_cloudflare_email = <Cloudflare 电子邮箱>\ndns_cloudflare_api_key = <API Key>' > .secrets/certbot/cloudflare.inishell
chmod 700 .secrets
chmod 600 .secrets/certbot
chmod 600 .secrets/certbot/cloudflare.inishell
sudo certbot certonly --cert-name <证书文件名称> --dns-cloudflare --dns-cloudflare-credentials ~/.secrets/certbot/cloudflare.ini --server https://acme-v02.api.letsencrypt.org/directory -d "<域名>"Debian 11
shell
sudo apt install certbotshell
sudo apt -y install python3-certbot-dns-cloudflare使用 Global Key
shell
mkdir -p .secrets/certbot && echo -e 'dns_cloudflare_email = \ndns_cloudflare_api_key = ' > .secrets/certbot/cloudflare.inishell
vim .secrets/certbot/cloudflare.ini
dns_cloudflare_email = <Cloudflare 电子邮箱>
dns_cloudflare_api_key = <API Key>shell
chmod 700 .secrets
chmod 600 .secrets/certbot
chmod 600 .secrets/certbot/cloudflare.inishell
sudo certbot certonly --cert-name <证书文件名称> --dns-cloudflare --dns-cloudflare-credentials ~/.secrets/certbot/cloudflare.ini --server https://acme-v02.api.letsencrypt.org/directory -d "<域名>"使用限制的 API 令牌
API 令牌需要 DNS 编辑权限
shell
sudo apt install python3-pipshell
sudo pip3 install cloudflareshell
mkdir -p .secrets/certbot && echo -e 'dns_cloudflare_api_token = ' > .secrets/certbot/cloudflare.inishell
vim .secrets/certbot/cloudflare.ini
dns_cloudflare_api_token = <API Token>shell
chmod 700 .secrets
chmod 700 .secrets/certbot
chmod 600 .secrets/certbot/cloudflare.inishell
sudo certbot certonly --cert-name <证书文件名称> --dns-cloudflare --dns-cloudflare-credentials ~/.secrets/certbot/cloudflare.ini --server https://acme-v02.api.letsencrypt.org/directory -d "<域名>"延伸阅读
https://certbot.eff.org/instructions?ws=nginx&os=centosrhel8https://snapcraft.io/docs/installing-snap-on-centos
絢香猫