Shulou(Shulou.com)06/03 Report--

Application for https Certificate

Apply for a free https certificate through Let' s Encrypt

Official website

First of all, before doing it, you can go to certbot to have a look, I think it is still very necessary!

Install certbot

Yum install epel-release-yyum install certbot wildcard certificate request command

The command will verify the owner of the domain name, that is, add a TXT record to the domain name console. Certbot certonly-d * .test.com-- manual-- preferred-challenges dns-- server https://acme-v02.api.letsencrypt.org/directory

When finished, the directory where the domain name is located will be displayed.

4. Automatic renewal

Echo "00,12 * root python-c 'import random; import time; time.sleep (random.random () * 3600)' & & certbot renew" | sudo tee-a / etc/crontab > / dev/null

It is renewed 30 days before the expiration by default, and can be manually configured if it does not meet the requirement.

/ etc/letsencrypt/renewal/test.conf

5. Certificate cleaning

If you don't want it or need to clean it up for some other reason, just execute the following command

Rm-rf / etc/letsencrypt/live/www.example.com/rm-rf / etc/letsencrypt/archive/www.example.com/rm / etc/letsencrypt/renewal/www.example.com.conf

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.