网站证书过期后N天的处理方式

451次阅读

共计 928 个字符，预计需要花费 3 分钟才能阅读完成。

1、移除现有的证书与配置文件
1.1、acme.sh --remove -d you.domain.com

2、申请证书与配置网站路径
2.1、acme.sh --issue -d you.domain.com --webroot /var/html/you.domain.com

[Monday, June 16, 2025 PM02:08:25 CST] Your cert is in: /root/.acme.sh/you.domain.com_ecc/you.domain.com.cer

[Monday, June 16, 2025 PM02:08:25 CST] Your cert key is in: /root/.acme.sh/you.domain.com_ecc/you.domain.com.key

[Monday, June 16, 2025 PM02:08:25 CST] The intermediate CA cert is in: /root/.acme.sh/you.domain.com_ecc/ca.cer

[Monday, June 16, 2025 PM02:08:25 CST] And the full-chain cert is in: /root/.acme.sh/you.domain.com_ecc/fullchain.cer

3、配置 nginx 文件
3.1、找到 you.domain.com.conf
3.2、修改或添加真实的证书路径（在 443 下方）

        root  /var/html/you.domain.com;

ssl_certificate /root/.acme.sh/you.domain.com_ecc/fullchain.cer;

ssl_certificate_key /root/.acme.sh/you.domain.com_ecc/you.domain.com.key;

4、重启 lnmp 或 nginx 服务
4.1、lnmp restart
4.2、sudo systemctl restart nginx

正文完

发表至：軟件技巧

近三天内

0