[转]OneinStack自动部署Let’s Encrypt证书

Let’s Encrypt是一个由电子前哨基金会、Mozilla基金会、Akamai、密歇根大学、思科联合发起的一个项目。它旨在为站长提供一个免费的、完全自 动化的证书申请过程,从而让整个互联网都能享受到HTTPS加密。Let’s Encrypt的证书申请过程非常简单、安全、快速、自动化并且免费。Let’s Encrypt是一个中间CA,它的CA证书由IdenTrust签发。IdenTrust是一个Root CA,受到所有主流浏览器的信任。从2015年10月后,Let’s Encrypt的中间CA证书被chrome、Firefox、Microsoft Edge、Safari和Opera所信任。

最近官方做了调整,简化了获取证书的难度,并将项目名改为了certbot,以前叫letsencrypt。certbot可以自动化的申请,安装和更新证书。

OneinStack已经内置Let’s Encrypt证书,vhost.sh绑定域名时自动申请、绑定、自动续期(默认90天)一步到位,教程如下:

安装

wget http://mirrors.linuxeye.com/oneinstack.tar.gz
tar xzf oneinstack.tar.gz
cd oneinstack
./addons.sh

如下图:

出现绿色Let’s Encrypt client install successfully!即表示certbot安装成功,如下图:

使用证书

vhost.sh绑定域名ssl选择y,Let’s Encrypt选择y

./vhost.sh

注:绑定域名后会自动在crontab添加相应自动续期脚本。

分享到:

130 条评论

昵称
  1. I’m gone to convey my little brother, that he should also visit this webpage on regular
    basis to obtain updated from most up-to-date gossip.

  2. Pretty nice post. I just stumbled upon your blog and wished to say
    that I have truly enjoyed surfing around your blog posts.
    In any case I will be subscribing to your rss feed
    and I hope you write again soon!

  3. I always emailed this weblog post page to all my friends, since if like to read it afterward my friends will
    too.

  4. Hello! I simply would like to offer you a big thumbs up for the excellent information you have here on this post.
    I am returning to your website for more soon.

  5. There is definately a great deal to learn about this issue.

    I love all of the points you made.

  6. Thanks for sharing your info. I really appreciate your efforts and I
    am waiting for your next write ups thank you once again.

  7. Hi there, I enjoy reading through your article.
    I wanted to write a little comment to support you.

  8. It’s remarkable designed for me to have a web page,
    which is good designed for my knowledge. thanks admin

  9. Howdy! Quick question that’s totally off topic. Do you know
    how to make your site mobile friendly? My blog looks weird when browsing from my apple iphone.
    I’m trying to find a template or plugin that might be able to correct this
    problem. If you have any recommendations, please share.
    Thanks!

  10. What’s up, just wanted to tell you, I liked this post. It was helpful.

    Keep on posting!