dnf install epel-release dnf upgrade dnf install certbot # 生成通配符證書，xxx.com 替換為自己的域名 certbot certonly -d *.xxx.com --manual --preferred-challenges dns --server https://acme-v02.api.letsencrypt.org/directorySaving debug log to /var/log/letsencrypt/letsencrypt.log Enter email address (used for urgent renewal and security notices)(Enter 'c' to cancel): # 輸入郵箱，用于緊急更新和安全通知- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Please read the Terms of Service at https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf. You must agree in order to register with the ACME server. Do you agree? - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - (Y)es/(N)o: # 是否同意 Let's Encrypt 協(xié)議要求- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Would you be willing, once your first certificate is successfully issued, to share your email address with the Electronic Frontier Foundation, a founding partner of the Let's Encrypt project and the non-profit organization that develops Certbot? We'd like to send you email about our work encrypting the web, EFF news, campaigns, and ways to support digital freedom. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - (Y)es/(N)o: # 是否分享你的郵箱Account registered. Requesting a certificate for *.xxx.com- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Please deploy a DNS TXT record under the name: _acme-challenge.xxx.com. with the following value: g9dxW0UylBMDlLoX2XIDxdsftUjBe8uCZ2wZLdqK6xcBefore continuing, verify the TXT record has been deployed. Depending on the DNS provider, this may take some time, from a few seconds to multiple minutes. You can check if it has finished deploying with aid of online tools, such as the Google Admin Toolbox: https://toolbox.googleapps.com/apps/dig/#TXT/_acme-challenge.xxx.com. Look for one or more bolded line(s) below the line ';ANSWER'. It should show the value(s) you've just added. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press Enter to Continue # 要求配置 DNS TXT 記錄，從而校驗(yàn)域名所有權(quán)，也就是判斷證書申請(qǐng)者是否有域名的所有權(quán)。 # 上面輸出要求給 http://_acme-challenge.xxx.cn 配置一條 TXT 記錄，在沒有確認(rèn) TXT 記錄生效之前不要回車執(zhí)行。Successfully received certificate. Certificate is saved at: /etc/letsencrypt/live/xxx.com/fullchain.pem Key is saved at: /etc/letsencrypt/live/xxx.com/privkey.pem This certificate expires on 2023-02-12. These files will be updated when the certificate renews.NEXT STEPS: - This certificate will not be renewed automatically. Autorenewal of --manual certificates requires the use of an authentication hook script (--manual-auth-hook) but one was not provided. To renew this certificate, repeat this same certbot command before the certificate's expiry date.- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - If you like Certbot, please consider supporting our work by:* Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate* Donating to EFF: https://eff.org/donate-le - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -crontab -e # 編輯定時(shí)任務(wù) 0 */12 * * * certbot renew --quiet --renew-hook "/etc/init.d/nginx reload"

總結(jié)

以上是生活随笔為你收集整理的Let‘s Encrypt 安装配置教程的全部?jī)?nèi)容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網(wǎng)站內(nèi)容還不錯(cuò)，歡迎將生活随笔推薦給好友。