nginx LetsEncrypt

Posted 2021-01-03 xiayudashan

linux

certbot https://certbot.eff.org/

 

windows

letsencrypt-win-simple.V1.9.3（个人认为比新版本好用）https://github.com/PKISharp/win-acme/releases/download/v1.9.3/letsencrypt-win-simple.V1.9.3.zip

执行letsencrypt.exe

之后选择M手工方式生成证书和密钥文件

输入域名example.com

输入web root所在目录Enter a site path (the web root of the host for http authentication：x: ginxhtml

成功生成后手工修改nginx配置，在对应server配置项下加入证书密钥配置

listen 443 ssl http2;
ssl_certificate C:\\Users\\Administrator\\AppData\\Roaming\\letsencrypt-win-simple\\httpsacme-v01.api.letsencrypt.org\\example.com-chain.pem;
ssl_certificate_key C:\\Users\\Administrator\\AppData\\Roaming\\letsencrypt-win-simple\\httpsacme-v01.api.letsencrypt.org\\example.com-key.pem;

最后加入定时任务，完成