申请lets encrypt https证书并配置nginx

1. 使用git下载脚本
 git clone https://github.com/letsencrypt/letsencrypt
 
2. 进入到脚本所在目录
 cd letsencrypt
 
3. 查看 letsencrypt-auto 工具的用法
 ./letsencrypt-auto --help

4.执行./letsencrypt-auto --help后，是否显示完整帮助信息，
如果
①.出现Could not install OS dependencies
执行package-cleanup --dupes
package-cleanup --cleandupes
package-cleanup --problems
yum update
②.出现let’s Encrypt 证书之安装故障 Could not bind to IPv4 or IPv6.
请关闭nginx服务，执行

5../letsencrypt-auto certonly --standalone --email [email protected] -d www.17zhujiu.com 获取证书【邮箱，域名填写自己的】
生成证书

 

6.配置nginx
    # HTTPS server
    
    server {
        listen       443 ssl;
        server_name  www.17zhujiu.com;

        ssl_certificate      /etc/letsencrypt/live/www.17zhujiu.com/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/www.17zhujiu.com/privkey.pem;
	
	ssl_protocols SSLv3 TLSv1;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;

        location / {
            root   html;
            index  index.html index.htm;
        }
    }

 

注：443端口服务器是否开启

 

 

7.启动nginx

/home/nginx/sbin/nginx -s reload

8.测试是否成功