ACME免费证书使用小记

curl https://get.acme.sh | sh
wget -O -  https://get.acme.sh | sh
curl https://raw.githubusercontent.com/Neilpang/acme.sh/master/acme.sh | INSTALLONLINE=1  sh
wget -O -  https://raw.githubusercontent.com/Neilpang/acme.sh/master/acme.sh | INSTALLONLINE=1  sh

cd /.acme.sh
acme.sh --issue -d example.com --dns \
 --yes-I-know-dns-manual-mode-enough-go-ahead-please

到域名DNS解析服务商处添加域名的TXT解析

acme.sh --renew -d example.com \
  --yes-I-know-dns-manual-mode-enough-go-ahead-please

ssl_certificate /etc/nginx/ssl/fullchain.cer;
ssl_certificate_key /etc/nginx/ssl/*.example.com.key;

./acme.sh  --installcert  -d  *.example.com   \
        --key-file   /docker/nginx/ssl/*.example.com.key \
        --fullchain-file /docker/nginx/ssl/fullchain.cer

service nginx restart