默认证书：

切换 Let’s Encrypt

acme.sh –set-default-ca –server letsencrypt

切换 Buypass

acme.sh –set-default-ca –server buypass

切换 ZeroSSL

acme.sh –set-default-ca –server zerossl

切换 SSL.com

acme.sh –set-default-ca –server ssl.com

切换 Google Public CA

acme.sh –set-default-ca –server google

通过 acme.sh 获取的 SSL/TLS 证书到 Nginx：
1.安装acme.sh
curl https://get.acme.sh | sh
git clone https://gitee.com/neilpang/acme.sh.git（git clone –depth 1 https://gitee.com/neilpang/acme.sh.git）
cd acme.sh/

./acme.sh –install (-m my@example.com)
crontab -e(定时任务)
2 0 * * * “/root/.acme.sh”/acme.sh –cron –home “/root/.acme.sh” > /dev/null

cd ~/.acme.sh/

GitHub：
viki
dnsapi
Ctrl +f 搜索

11. Use Aliyun domain API to automatically issue cert
    First you need to login to your Aliyun account to get your RAM API key. https://ram.console.aliyun.com/users
    腾讯云获取秘钥：https://console.cloud.tencent.com/cam/capi
    新建秘钥：

export Tencent_SecretId=”AKIDyupfUH8xhLtMi1FQTL0UmrOitukU2QqU”
export Tencent_SecretKey=”pUxDG7lCTXPhmfiDc0JiwAE7udYXLxji”
根域，子域
~/.acme.sh/acme.sh –issue –dns dns_tencent -d osaka2.cn -d *.osaka2.cn

主机记录，类型，值：
_acme-challenge
TXT
xxxxxx

[root@VM-4-14-centos .acme.sh]# ll osaka2.cn
total 28
-rw-r–r– 1 root root 1802 Sep 25 15:17 ca.cer
-rw-r–r– 1 root root 3571 Sep 25 15:17 fullchain.cer
-rw-r–r– 1 root root 1769 Sep 25 15:17 osaka2.cn.cer
-rw-r–r– 1 root root 616 Sep 25 15:17 osaka2.cn.conf
-rw-r–r– 1 root root 960 Sep 25 15:17 osaka2.cn.csr
-rw-r–r– 1 root root 160 Sep 25 15:17 osaka2.cn.csr.conf
-rw——- 1 root root 1675 Sep 23 14:28 osaka2.cn.key

cat fullchain.cer

SSL 证书和密钥路径

宝塔路径，网站设置，配置修改
ssl_certificate /www/server/panel/vhost/cert/osaka2.cn/fullchain.pem;
ssl_certificate_key /www/server/panel/vhost/cert/osaka2.cn/privkey.pem;

ssl_certificate /root/.acme.sh/osaka2.cn/fullchain.cer;
ssl_certificate_key /root/.acme.sh/osaka2.cn/osaka2.cn.key;
将fullchain.cer和oska2.cn.key复制到宝塔

./acme.sh –install-cert -d osaka2.cn -d *.osaka2.cn \
–key-file /www/server/panel/vhost/cert/osaka2.cn/privkey.pem \
–fullchain-file /www/server/panel/vhost/cert/osaka2.cn/fullchain.pem \
–reloadcmd “service nginx force-reload”

参数保存，自动更新才有效

crontab -l

更新，自动更新：
acme.sh –upgrade（–auto-upgrade）
禁用自动升级:
acme.sh –upgrade –auto-upgrade 0

强制更新证书：
acme.sh –renew -d xxx.com –force
acme.sh –renew -d xxx.com –force –ecc
停止更新：

acme.sh –remove -d xxx.com [–ecc]

大陆这里下载安装:
https://gitee.com/neilpang/acme.sh

安装步骤:
根据 How-to-install#3-or-git-clone-and-install

git clone https://gitee.com/neilpang/acme.sh.git
cd acme.sh
./acme.sh –install -m my@example.com

检查定时任务

crontab -l

2 0 * * * “/root/.acme.sh”/acme.sh –cron –home “/root/.acme.sh” > /dev/null

感谢您的来访，获取更多精彩文章请收藏本站。