linux/acme.sh

takegpt.cn安装证书

安装证书

# 安装acme.sh
wget -O -  https://get.acme.sh | sh -s email=my@example.com

# 使用zerossl证书
acme.sh --set-default-ca --server zerossl

单域名

acme.sh --issue -d takegpt.cn  -w /data/wwwroot/www.takegpt.cn
acme.sh --issue -d ai.takegpt.cn --nginx

acme.sh --install-cert -d ai.takegpt.cn \
--key-file       /root/.acme.sh/takegpt.cn_ecc/takegpt.cn.key  \
--fullchain-file /root/.acme.sh/takegpt.cn_ecc/fullchain.cer \
--reloadcmd     "service nginx force-reload"

泛域名

# test
curl -X GET "https://api.cloudflare.com/client/v4/user/tokens/verify" \
 -H "Authorization: Bearer UtENaR8dVvYhDS0oqzHpdpE4y4vHls1NnToKkiP2" \
 -H "Content-Type:application/json"

# https://dash.cloudflare.com/profile
export CF_Key="UtENaR8dVvYhDS0oqzHpdpE4y4vHls1NnToKkiP2"
export CF_Email="zz1036@qq.com"


# cloudflare
acme.sh   --issue   --dns cloudflare -d takegpt.cn  -d *.takegpt.cn

acme.sh --install-cert -d ai.takegpt.cn \
--key-file       /path/to/keyfile/in/nginx/key.pem  \
--fullchain-file /path/to/fullchain/nginx/cert.pem \
--reloadcmd     "service nginx force-reload"

acme.sh --install-cert -d example.com \
--key-file       /youdata/ssl/nginx/yourdomain.key  \
--fullchain-file /youdata/ssl/nginx/fullchain.cer \
--reloadcmd     "sudo nginx -s reload"


[Wed Mar 29 11:52:33 CST 2023] Your cert is in: /root/.acme.sh/takegpt.cn_ecc/takegpt.cn.cer
[Wed Mar 29 11:52:33 CST 2023] Your cert key is in: /root/.acme.sh/takegpt.cn_ecc/takegpt.cn.key
[Wed Mar 29 11:52:33 CST 2023] The intermediate CA cert is in: /root/.acme.sh/takegpt.cn_ecc/ca.cer
[Wed Mar 29 11:52:33 CST 2023] And the full chain certs is there: /root/.acme.sh/takegpt.cn_ecc/fullchain.cer

更新证书

# renew
acme.sh --renew -d example.com --force --ecc

# crontab
56 * * * * "/root/.acme.sh"/acme.sh --cron --home "/root/.acme.sh" > /dev/null

#1 升级证书记录

Steps to reproduce

Debug log

takegpt.cn安装证书

相关项目