教程

HTTPS 简介及使用官方工具 Certbot 配置 Let’s Encrypt SSL 安全证书详细教程

26564 views218
By
Share

本文内容较长，因为涵盖背景知识、基本概念和完整的实操过程，如果一步步照着做的话，应该就可以一次配置成功。不想要了解背景知识的同学可以直接跳到实操过程，六步即可使用 Let's Encrypt 官方工具 Certbot 配置 SSL 安全证书。

♦背景知识

已经了解过的同学或计算机相关专业的同学直接略过，跳到第三节。

1、http 和 https 是什么？

简单来说，http 是一个传输网页内容的协议，比如你看到的 http 开头的网站 http://www.163.com，其网页上的文字、图片、 CSS 、 JS 等文件都是通过 http 协议传输到我们的浏览器，然后被我们看到。

http-https

而 https 可以理解为“ HTTP over SSL/TLS ”，好端端的 http 为什么需要“ over SSL/TLS ”呢，因为 http 是明文传输的，通过 http 协议传输的内容很容易被偷看和篡改，为了安全（你肯定不想被人偷看或者篡改网页内容吧，比如网站银行密码什么的。）就为 http 协议再加上了一层 SSL/TLS 安全协议，所以就有了 https 。

2、SSL/TLS 是什么？

“ HTTP over SSL/TLS ”字面意思就是带“安全套接层”的 http 协议，内心纯洁的同学也可以理解为“带安全套的 http ”，因为带了安全套，所以当然会比较安全（/(ㄒoㄒ)/~~）。其中 SSL 是“ Secure Sockets Layer ” 的缩写，是“安全套接层”的意思。 TLS 是 "Transport Layer Security" 的缩写，是 " 传输层安全协议 " 的意思。 SSL 和 TLS 是同一个东西的不同阶段，理解为同一个东西也行，都是安全协议就对了。

enabling-ssl-https

3、为什么要部署 https？

说到底，就是 https 更安全。甚至为了安全，一个专业可靠的网站， https 是必须的。 Firefox 和 Chrome 都计划将没有配置 SSL 加密的 http 网站标记为不安全（貌似 Firefox 50 已经这么干了），目前它们也正在联合其他相关的基金会与公司推动整个互联网 https 化，现在大家访问的一些主要的网站。如 Google 多年前就已经全部启用 https ，国内的淘宝、搜狗、知乎、百度等等也全面 https 了。甚至 Google 的搜索结果也正在给予 https 的网站更高的排名和优先收录权。

4、怎么部署 https 呢？

你只需要有一张被信任的 CA （ Certificate Authority ）也就是证书授权中心颁发的 SSL 安全证书，并且将它部署到你的网站服务器上。一旦部署成功后，当用户访问你的网站时，浏览器会在显示的网址前加一把小绿锁，表明这个网站是安全的，当然同时你也会看到网址前的前缀变成了 https ，不再是 http 了。

httpvshttps

5、怎么获得 SSL 安全证书呢？

理论上，我们自己也可以签发 SSL 安全证书，但是我们自己签发的安全证书不会被主流的浏览器信任，所以我们需要被信任的证书授权中心（ CA ）签发的安全证书。而一般的 SSL 安全证书签发服务都比较贵，比如 Godaddy 、 GlobalSign 等机构签发的证书一般都需要20美金一年甚至更贵，不过为了加快推广 https 的普及， EEF 电子前哨基金会、 Mozilla 基金会和美国密歇根大学成立了一个公益组织叫 ISRG （ Internet Security Research Group ），这个组织从 2015 年开始推出了 Let's Encrypt 免费证书。这个免费证书不仅免费，而且还相当好用，所以我们就可以利用 Let's Encrypt 提供的免费证书部署 https 了。那么怎么获得 Let's Encrypt 安全证书，并且将它部署在自己的网站服务器上呢？这就是这篇文章要讲的内容了。

注：对 https  、数字证书及 CA 的工作原理感兴趣的同学可以阅读编程随想的系列文章。

♦ Let's Encrypt 及 Certbot 简介

前面已经介绍过， Let's Encrypt 是 一个叫 ISRG （ Internet Security Research Group ，互联网安全研究小组）的组织推出的免费安全证书计划。参与这个计划的组织和公司可以说是互联网顶顶重要的先驱，除了前文提到的三个牛气哄哄的发起单位外，后来又有思科（全球网络设备制造商执牛耳者）、 Akamai 加入，甚至连 Linux 基金会也加入了合作，这些大牌组织的加入保证了这个项目的可信度和可持续性。

lets-encrypt

尽管项目本身以及有该项目签发的证书很可信，但一开始 Let's Encrypt 的安全证书配置起来比较麻烦，需要手动获取及部署。存在一定的门槛，没有一些技术底子可能比较难搞定。然后有一些网友就自己做了一些脚本来优化和简化部署过程。其中有一个网友 xdtianyu 做了一个可以快速获取及更新证书的 letsencrypt.sh 脚本被广泛使用，地址如下：

https://raw.githubusercontent.com/xdtianyu/scripts/master/lets-encrypt/letsencrypt.sh

首先要感谢 xdtianyu 同学的努力付出。我之前用的也是这个脚本，不知道是不是姿势不对，虽然顺利地按照流程装上了，但用 SSLlabs 检测我配的网站还是不太安全，在很多浏览器上都被标注为“不安全”。当时因为忙也没有太多时间折腾和细究，不过后来 ISRG 的发起者 EFF （电子前哨基金会）为 Let's Encrypt 项目发布了一个官方的客户端 Certbot ，利用它可以完全自动化的获取、部署和更新安全证书。这真是非常容易、方便呀，所以我们就可以直接使用官方客户端，不需要再使用第三方的工具了。虽然第三方工具也可以使用，但是官方工具更权威，风险也更小，而且遇到问题也更容易解决，毕竟有官方的支持。何况 Certbot 确实非常方便，也比所有的第三方工具都更方便，何乐而不用呢?

♦官方客户端 Certbot 使用方法

Certbot 的官方网站是 https://certbot.eff.org/ ，打开这个链接选择自己使用的 web server 和操作系统，EFF 官方会给出详细的使用方法，如下图，不过我觉得这样还是太复杂，太麻烦，所以建议读者朋友可以不用看这个网站，按照我的方法走一遍即可。我自己的个人网站（ https://wenqixiang.com ）和本站（ https://linuxstory.org ）都是按此方法配置，以下以本网站域名（ linuxstory.org ）举例。

certbot

假定运行环境：Debian 8.0 64 位（本教程同样适用于 Debian 、 Ubuntu 、 CentOS 、 Arch Linux 、）， Web 服务器是 Nginx 1.10 ，当前工作目录为 /home/linuxstory 家目录。如果是从零开始配置服务器，推荐使用 Debian 8 + lnmp 作为网站环境。

1、获取 Certbot 客户端

wget https://dl.eff.org/certbot-auto
chmod a+x ./certbot-auto
./certbot-auto --help

2、配置 nginx 、验证域名所有权

在虚拟主机配置文件（ /usr/local/nginx/conf/vhost/linuxstory.org.conf ）中添加如下内容，这一步是为了通过 Let's Encrypt 的验证，验证 linuxstory.org 这个域名是属于我的管理之下。（具体解释可见下一章“一些补充说明”的“ certbot 的两种工作方式”）

location ^~ /.well-known/acme-challenge/ {
   default_type "text/plain";
   root     /home/wwwroot/linuxstory.org/;
}

location = /.well-known/acme-challenge/ {
   return 404;
}

3、重载 nginx

配置好 Nginx 配置文件，重载使修改生效（如果是其他系统 nginx 重载方法可能不同）

sudo nginx -s reload

4、生成证书

./certbot-auto certonly --webroot -w /home/wwwroot/linuxstory.org -d  linuxstory.org

中间会有一些自动运行及安装的软件，不用管，让其自动运行就好，有一步要求输入邮箱地址的提示，照着输入自己的邮箱即可，顺利完成的话，屏幕上会有提示信息。

此处有坑！如果顺利执行请直接跳到第五步，我在自己的服务器上执行多次都提示

connection :: The server could not connect to the client for DV :: DNS query timed out

发现问题出在 DNS 服务器上，我用的是 DNSpod ，无法通过验证，最后是将域名的 DNS 服务器临时换成 Godaddy 的才解决问题，通过验证，然后再换回原来的 DNSpod 。

证书生成成功后，会有 Congratulations 的提示，并告诉我们证书放在 /etc/letsencrypt/live 这个位置

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at
   /etc/letsencrypt/live/linuxstory.org/fullchain.pem. Your cert
   will expire on 2017-02-011. To obtain a new version of the
   certificate in the future, simply run Let's Encrypt again.

5、配置 Nginx（修改 /usr/local/nginx/conf/vhost/linuxstory.org.conf），使用 SSL 证书

listen 443 ssl;
server_name linuxstory.org www.linuxstory.org;
index index.html index.htm index.php;
root  /home/wwwroot/linuxstory.org;
 
ssl_certificate      /etc/letsencrypt/live/linuxstory.org/fullchain.pem;
ssl_certificate_key  /etc/letsencrypt/live/linuxstory.org/privkey.pem;

上面那一段是配置了 https 的访问，我们再添加一段 http 的自动访问跳转，将所有通过 http://www.linuxstory.org 的访问请求自动重定向到 https://linuxstory.org

server {
    listen 80;
    server_name linuxstory.org www.linuxstory.org;
    return 301 https://$server_name$request_uri;
}

6、重载 nginx，大功告成，此时打开网站就可以显示绿色小锁了

sudo nginx -s reload

♦后续工作

出于安全策略， Let's Encrypt 签发的证书有效期只有 90 天，所以需要每隔三个月就要更新一次安全证书，虽然有点麻烦，但是为了网络安全，这是值得的也是应该的。好在 Certbot 也提供了很方便的更新方法。

1、测试一下更新，这一步没有在真的更新，只是在调用 Certbot 进行测试

./certbot-auto renew --dry-run

如果出现类似的结果，就说明测试成功了（总之有 Congratulations 的字眼）

Congratulations, all renewals succeeded. The following certs have been renewed:  
   /etc/letsencrypt/live/linuxstory.org/fullchain.pem (success)
** DRY RUN: simulating 'certbot renew' close to cert expiry
** (The test certificates above have not been saved.)

2、手动更新的方法

./certbot-auto renew -v

3、自动更新的方法

./certbot-auto renew --quiet --no-self-upgrade

♦一些补充说明解释

1、certbot-auto 和 certbot

certbot-auto 和 certbot 本质上是完全一样的；不同之处在于运行 certbot-auto 会自动安装它自己所需要的一些依赖，并且自动更新客户端工具。因此在你使用 certbot-auto 情况下，只需运行在当前目录执行即可

./certbot-auto

2、certbot的两种工作方式

certbot （实际上是 certbot-auto ） 有两种方式生成证书：

  • standalone 方式： certbot 会自己运行一个 web server 来进行验证。如果我们自己的服务器上已经有 web server 正在运行 （比如 Nginx 或 Apache ），用 standalone 方式的话需要先关掉它，以免冲突。
  • webroot 方式： certbot 会利用既有的 web server，在其 web root目录下创建隐藏文件， Let's Encrypt 服务端会通过域名来访问这些隐藏文件，以确认你的确拥有对应域名的控制权。

本文用的是 webroot 方式，也只推荐 webroot 方式，这也是前文第二步验证域名所有权在 nginx 虚拟主机配置文件中添加 location 段落内容的原因。

呜呼，安得 SSL 安全证书千万张，大庇天下网站安全俱欢颜！希望互联网早日进入 https 普及化。

本文链接: https://linuxstory.org/deploy-lets-encrypt-ssl-certificate-with-certbot

LinuxStory 原创教程，转载请注明出处，否则必究相关责任。

对这篇文章感觉如何？

太棒了
0
不错
0
爱死了
0
不太好
0
感觉很糟
0
bootingman，是“booting” 加上 “man”的一个合成词。 术语“booting（引导）”是“bootstrapping”的简写，描述计算机从零开始启动的过程，同时也表示一个古老的谚语“通过自力更生而出人头地“。 “引导”的思想在于一个困难的、复杂的目标可以通过一个小的动作开始，然后以这个小的动作为基础，一步一步地达到期望目标而完成。这也是我想做和正在做的。
    Previous
    Next

    You may also like

    218 Comments

    1. I appreciate your creativity and the effort you put into every post. Keep up the great work!

      回复

    2. I’m often to blogging and i really appreciate your content. The article has actually peaks my interest. I’m going to bookmark your web site and maintain checking for brand spanking new information.

      回复

    3. It means so much to receive positive feedback and know that my content is appreciated. I strive to bring new ideas and insights to my readers.

      回复

    4. This post was exactly what I needed to read today Your words have provided me with much-needed clarity and reassurance

      回复

    5. naturally like your web site however you need to take a look at the spelling on several of your posts. A number of them are rife with spelling problems and I find it very bothersome to tell the truth on the other hand I will surely come again again.

      回复

    6. I can’t get enough of your insightful articles and engaging stories. Thank you for sharing your passion with the world!

      回复

    7. Your blog has helped me become a better version of myself Your words have inspired me to make positive changes in my life

      回复

    8. Your articles always make me think and reflect on my own life Thank you for prompting me to be introspective and make positive changes

      回复

    9. Thank you for your sharing. I am worried that I lack creative ideas. It is your article that makes me full of hope. Thank you. But, I have a question, can you help me?

      回复

    10. This is my first time pay a quick visit at here and i am really happy to read everthing at one place

      回复

    11. This blog has become a part of my daily routine I start my mornings with a cup of coffee and your latest post

      回复

    12. Your blog post was fantastic, thanks for the great content!

      回复

    13. Love this blog! The content is always so relevant and insightful, keep up the great work!

      回复

    14. As someone who struggles with mental health, I appreciate the support and empathy displayed in your blog It means a lot to know I’m not alone

      回复

    15. Your passion for what you do is evident in every post It’s inspiring to see someone truly fulfilling their purpose and making a positive impact

      回复

    16. Great information shared.. really enjoyed reading this post thank you author for sharing this post .. appreciated

      回复

    17. Hey there are using WordPress for your blog platform?

      I’m new to the blog world but I’m trying to get started and create my own. Do you require
      any html coding knowledge to make your own blog? Any help would be
      really appreciated!

      回复

    18. For the reason that the admin of this site is working, no uncertainty very quickly it will be renowned, due to its quality contents.

      回复

    19. I appreciate how this blog promotes self-growth and personal development It’s important to continuously strive to become the best version of ourselves

      回复

    20. awesome

      回复

    21. Your blog is a great source of positivity and inspiration in a world filled with negativity Thank you for making a difference

      回复

    22. I truly admire how you tackle difficult topics and address them in a respectful and thought-provoking manner

      回复

    23. I am truly thankful to the owner of this web site who has shared this fantastic piece of writing at at this place.

      回复

    24. Your blog has quickly become one of my favorites I always look forward to your new posts and the insights they offer

      回复

    25. Thank you for addressing such an important topic in this post Your words are powerful and have the potential to make a real difference in the world

      回复

    26. The positivity and optimism conveyed in this blog never fails to uplift my spirits Thank you for spreading joy and positivity in the world

      回复

    27. This was beautiful Admin. Thank you for your reflections.

      回复

    28. I love how you incorporate personal stories and experiences into your posts It makes your content relatable and authentic

      回复

    29. Your writing is so eloquent and heartfelt It’s impossible not to be moved by your words Thank you for sharing your gift with the world

      回复

    30. Your blog has become a part of my daily routine Your words have a way of brightening up my day and lifting my spirits

      回复

    31. Siz de bilgiye bir adım daha yaklaşmak için aşağıdaki bağlantıyı ziyaret edebilirsiniz:

      回复

    32. I love how this blog covers a variety of topics, making it appeal to a diverse audience There is something for everyone here!

      回复

    33. Welcome to Joystore.com.bd, Bangladesh’s premier open marketplace where diversity meets convenience. We are a dynamic platform that connects passionate sellers with eager buyers, offering an extensive range of products to suit every need and preference. From electronics to fashion, home essentials to unique handmade crafts, Joystore is your one-stop destination for quality and variety.

      回复

    34. It’s clear that you have a deep understanding of this topic and your insights and perspective are invaluable Thank you for sharing your knowledge with us

      回复

    35. Your positive and uplifting words are like a ray of sunshine on a cloudy day Thank you for spreading light and positivity in the world

      回复

    36. This design is spectacular! You most certainly know how to keep a reader entertained.
      Between your wit and your videos, I was almost moved to start my own blog (well, almost…HaHa!) Excellent
      job. I really enjoyed what you had to say, and more than that, how you presented it.
      Too cool!

      回复

    37. Interesting and nice article, thanks for your effort!

      回复

    38. I appreciate you sharing this blog post. Thanks Again. Cool.

      回复

    39. Auram Terapi Auram terapi, kıbrıs auram, JAAS (Jean Adrian Arınma Sistemi), Thetahealing

      回复

    40. Thank you for sharing your personal experiences and stories It takes courage to open up and you do it with such grace and authenticity

      回复

    41. I’m often to blogging and i really appreciate your content. The article has actually peaks my interest. I’m going to bookmark your web site and maintain checking for brand spanking new information.

      回复

    42. Share with us in the comments your favorite blog posts of all time!

      回复

    43. Ankara Robotik Kodlama Eğitim programları öğrencilerin devam ettiği eğitim kademeleri dikkate alınarak ilkokul, ortaokul ve lise kademeleri için altı haftayı kapsayacak şekilde ayrı ayrı hazırlanmıştır. Öğrencilerimizin aldıkları eğitim ile bilimsel düşünce ve davranışlarla estetik değerleri birleştiren, üretken, sorun çözen, kendini geliştirmiş bireyler olarak yetişmeleri, yetenekleri ve yaratıcılıklarını erken yaşta fark ederek en üst düzeyde kullanmaları ve eğitim deneyimleri doğrultusunda farklı beceriler edinmelerini sunuyoruz.

      回复

    44. Very best article, thanks!

      回复

    45. Teknoloji Kıbrıs Teknoloji Kıbrıs, Kıbrıs teknoloji, teknolojikibris, elektronik eşyalar, Kıbrıs ucuz ev eşyası, teknolojik aksesuar kıbrıs

      回复

    46. Dijital Ajans | Deluxe Bilişim seo hizmeti,sosyal medya ajansı,kurumsal seo hizmeti,yazılım desteği, wordpress site kurulumu, eticaret site kurulumu,,sosyal medya ajans

      回复

    47. Your words have resonated with us and we can’t wait to read more of your amazing content. Thank you for sharing your expertise and passion with the world.

      回复

    48. I appreciate your creativity and the effort you put into every post. Keep up the great work!

      回复

    49. The recent developments in renewable energy tech are truly inspiring. Seeing solar panels become more efficient and affordable shows how innovation can help address climate change while creating new economic opportunities. It’s wonderful to see technology and environmental stewardship working hand in hand.

      回复

    50. I want to express my appreciation for the writer of this blog post. It’s clear they put a lot of effort and thought into their work, and it shows. From the informative content to the engaging writing style, I thoroughly enjoyed reading it.

      回复

    51. This blog post hit all the right notes!

      回复

    52. It means so much to receive positive feedback and know that my content is appreciated. I strive to bring new ideas and insights to my readers.

      回复

    53. Evkazan giriş adresi için hemen ziyaret et.

      回复

    54. Your posts are so beautifully written and always leave me feeling inspired and empowered Thank you for using your talents to make a positive impact

      回复

    55. Your writing is so refreshing and authentic It’s like having a conversation with a good friend Thank you for opening up and sharing your heart with us

      回复

    56. Thank you for the awesome content, it’s always appreciated

      回复

    57. Every time I read a new post, I feel like I’ve learned something valuable or gained a new perspective. Thank you for consistently putting out such great content!

      回复

    58. I am truly thankful to the owner of this web site who has shared this fantastic piece of writing at at this place.

      回复

    59. Teknoloji Kıbrıs Teknoloji Kıbrıs, Kıbrıs teknoloji, teknolojikibris, elektronik eşyalar, Kıbrıs ucuz ev eşyası, teknolojik aksesuar kıbrıs

      回复

    60. HMG Trading | Beyaz Eşya İndirimli Fiyatlarıbeyaz eşya ürünleri, Mutfak aletleri, bilgisayar parçaları, teknolojik ürünler, Donanım, Klima Kıbrıs, Kıbrıs Tv fiyatı

      回复

    61. เราคือผู้ให้บริการ ปั้มไลค์ IG ฟรี ชั้นนำที่มุ่งมั่นช่วยให้คุณสร้างความโดดเด่นในโลกออนไลน์ ไม่ว่าคุณจะเป็นนักสร้างคอนเทนต์ อินฟลูเอนเซอร์ หรือธุรกิจที่ต้องการขยายฐานผู้ติดตาม เราพร้อมนำเสนอเครื่องมือและบริการที่ง่าย ปลอดภัย และมีประสิทธิภาพเพื่อให้คุณเพิ่มไลค์ในโพสต์ Instagram อย่างไม่ยุ่งยาก

      回复

    62. Arkadaşlarımın tavsiyesiyle güvenilir bet siteleri denedim, çok memnun kaldım.

      回复

    63. I just wanted to take a moment to express my gratitude for the great content you consistently produce. It’s informative, interesting, and always keeps me coming back for more!

      回复

    64. Infolife, teknoloji, yaşam, sağlık, ticaret ve eğitim gibi birçok kategoride pratik bilgiler ve rehberlik sunan, hayatı kolaylaştıran bilgi platformudur.

      回复

    65. I couldn’t stop scrolling and reading, your content is truly one-of-a-kind. Thank you for all the time and effort you put into creating such amazing content.

      回复

    66. Love this appreciation for great content

      回复

    67. Very well presented. Every quote was awesome and thanks for sharing the content. Keep sharing and keep motivating others.

      回复

    68. I appreciate you sharing this blog post. Thanks Again. Cool.

      回复

    69. Bu güzel bilgilendirmeler için teşekkür ederim.

      回复

    70. What type of content would you like to see more of in the future? Let us know in the comments!

      回复

    71. Awesome! Its genuinely remarkable post, I have got much clear idea regarding from this post

      回复

    72. This blog post hit all the right notes!

      回复

    73. Son zamanlarda yabancı bahis siteleri ararken bu siteyi buldum, gerçekten memnun kaldım.

      回复

    74. This blog is a great mix of informative and entertaining content It keeps me engaged and interested from start to finish

      回复

    75. Let’s spread the love! Tag a friend who would appreciate this post as much as you did.

      回复

    76. I truly appreciate your technique of writing a blog. I added it to my bookmark site list and will

      回复

    77. You have a way of explaining complex topics in a straightforward and easy to understand manner Your posts are always a pleasure to read

      回复

    78. Your blog has become a source of guidance and support for me Your words have helped me through some of my toughest moments

      回复

    79. güvenilir bet siteleri konusunda gerçekten kaliteli hizmet sunuyorlar.

      回复

    80. Your passion for this topic shines through in your writing It’s clear that you put a lot of effort and thought into your posts Thank you for sharing your knowledge with us

      回复

    81. Kıvırcık saç modelleri ve bakımı için hemen ziyaret et.

      回复

    82. Your honesty and vulnerability in sharing your personal experiences is truly admirable It takes courage to open up and I applaud you for it

      回复

    83. Uzun zamandır yabancı bahis siteleri konusunda böyle güvenilir bir site bulamamıştım.

      回复

    84. Telefon numarası sorgulama ve yorumlar için hemen ziyaret et.

      回复

    85. Pool Light Replacement – poollightreplacement.com

      回复

    86. Telefon numarası sorgulama için hemen ziyaret et.

      回复

    87. Let’s spread the love! Tag a friend who would appreciate this post as much as you did.

      回复

    88. Your posts always speak to me on a personal level and I believe that is a testament to your authenticity and genuine nature

      回复

    89. TR Firma rehberi ile merak ettiğin tüm firmaları araştır.

      回复

    90. Zey forum ile gündemdeki tüm bilgilere anında ulaş.

      回复

    91. How to Replace Watch Battery – howtoreplacewatchbattery.com

      回复

    92. Firma rehberi ile firmanı ücretsiz tanıt.

      回复

    93. Reset Oil Change Light – resetoilchangelight.com

      回复

    94. Let us know in the comments which of their posts has resonated with you the most.

      回复

    95. How Much Do Police Officers Make In Illinois – howmuchdopoliceofficersmake.com

      回复

    96. Firma rehberi TR ile işletmeni tanıt.

      回复

    97. How To Reset Apps On Lg Tv – howtoresetlgtv.com

      回复

    98. Örgü modelleri ve tarifi için hemen ziyaret et.

      回复

    99. This blog has become a part of my daily routine I start my mornings with a cup of coffee and your latest post

      回复

    100. Your positivity and optimism are contagious It’s evident that you genuinely care about your readers and their well-being

      回复

    101. https://wordpad-download.com

      回复

    102. Firma rehberi ile işletmeni tanıt.

      回复

    103. Fuel Induction Service – fuelinductionservice.com

      回复

    104. Soru dağılımı ve cevapları için takip et.

      回复

    105. İlaç rehberi, fiyatları ve tüm detaylar Bayan Doktor’da…

      回复

    106. Dryer Belt Replacement – dryerbeltreplacement.com

      回复

    107. Yeni ek iş fikirleri için hemen ziyaret et.

      回复

    108. Kocaeli haberlerini anlık takip etmek için hemen ziyaret et.

      回复

    109. Firma Platformu Türkiye’nin en büyük firma rehberidir.

      回复

    110. Have any favorite blog posts or writers? Share them with us in the comments!

      回复

    111. Resetting Firestick Remote – resettingfirestickremote.com

      回复

    112. Tanıtım forumu ile işletmeni hemen tanıt.

      回复

    113. Liftmaster Battery Replacement – liftmasterbatteryreplacement.com

      回复

    114. Knock Sensor Replacement – knocksensorreplacement.com

      回复

    115. Esta es la primera vez que visito este sitio y estoy muy feliz de leer todo en un solo lugar.

      回复

    116. Hocam Ellerinize Sağlık, ceza avukatı ve ceza davası hakkında Detaylı ve Güzel Makale Olmuş.

      回复

    117. It means so much to receive positive feedback and know that my content is appreciated. I strive to bring new ideas and insights to my readers.

      回复

    118. Ders kitabı cevapları için hemen takip et.

      回复

    119. Love this appreciation for great content

      回复

    120. Zey forum ile gündemi takip et.

      回复

    121. Hisse forumu ile sende yatırımına yön ver.

      回复

    122. en iyi eskortlar burada çıtır

      回复

    123. sislikadin

      回复

    124. BTC forum ile kripto dünyasını keşfet.

      回复

    125. Your positive and uplifting words are like a ray of sunshine on a cloudy day Thank you for spreading light and positivity in the world

      回复

    126. Haber Forum ile gündemi takip et.

      回复

    127. Ekonomi forumu ile gündemi takip et.

      回复

    128. Eskortların en güzeli burada anında kapında eskort kadın seksin dorukları burada

      回复

    129. Soru bankası cevapları için hemen ziyaret et.

      回复

    130. Firma sorgulama hizmeti ile tüm merak ettiklerin burada…

      回复

    131. bilgi, rehberlik, teknoloji, sağlık, yaşam, eğitim, ticaret, yemek tarifleri, gezi rehberleri, kültür ve sanat, pratik bilgiler, püf noktaları, günlük yaşam ipuçları, diyet önerileri, spor ve egzersiz, anne ve çocuk, iş ilanları, kariyer rehberi, sürdürülebilir yaşam, minimalizm, ikinci el ürünler, firma rehberi, hayvan dostları, rüya tabirleri, dini bilgiler, burç yorumları, finansal rehberlik, girişimcilik, online eğitim, siber güvenlik, web geliştirme, yapay zeka, mobil uygulamalar, hobi ve el sanatları, oyun rehberi, blog içerikleri, kullanıcı yorumları, yaşam tarzı, bilgi merkezi, infolife

      回复

    132. Dxd Global | Development dxd global, global dxd, deluxe bilisim, deluxe global, IT solutions, web developer, worpress global, wordpress setup

      回复

    133. hey my friend, good webiste. welcome to read our research about online gaming.

      回复

    134. This is exactly what I needed to read today Your words have given me a new perspective and renewed hope Thank you

      回复

    135. Порадьте топ 10 кращих конструкторів сайтів для стартапів.

      回复

    136. I am blown away by the depth and detail in your posts Keep up the excellent work and thank you for sharing your knowledge with us

      回复

    137. I love how this blog celebrates diversity and inclusivity It’s a reminder that we are all unique and should embrace our differences

      回复

    138. Dxd Global | Development dxd global, global dxd, deluxe bilisim, deluxe global, IT solutions, web developer, worpress global, wordpress setup

      回复

    139. This blog is like a safe haven for me, where I can escape the chaos of the world and indulge in positivity and inspiration

      回复

    140. I do not even understand how I ended up here, but I assumed this publish used to be great

      回复

    141. We just wanted to take a moment to acknowledge all the hard work and effort you’ve been putting in lately. Keep up the amazing job, you’re doing great!

      回复

    142. It’s always a joy to stumble upon content that genuinely makes an impact and leaves you feeling inspired. Keep up the great work!

      回复

    143. Your positivity and optimism are contagious It’s impossible to read your blog without feeling uplifted and inspired Keep up the amazing work

      回复

    144. Leave a comment and let us know what your favorite blog post has been so far!

      回复

    145. From start to finish, your content is simply amazing. You have a talent for making complex topics easy to understand and I always come away with valuable insights.

      回复

    146. Your posts always seem to lift my spirits and remind me of all the good in the world Thank you for being a beacon of positivity

      回复

    147. Your writing has a way of resonating with me and making me feel understood Thank you for being a relatable and authentic voice

      回复

    148. Eskort Çapa- en ucuz bakımlı 18 lik çıtır eskortlar

      回复

    149. Share with us in the comments your favorite blog posts of all time!

      回复

    150. Drop a link to your favorite blog post of yours in the comments below, I’d love to read more.

      回复

    151. I love how this blog promotes a healthy and balanced lifestyle It’s a great reminder to take care of our bodies and minds

      回复

    152. Every time I read one of your posts, I come away with something new and interesting to think about. Thanks for consistently putting out such great content!

      回复

    153. There is definately a lot to find out about this subject. I like all the points you made trial 3 days : https://downloads.pythonanywhere.com

      回复

    154. Your blog is a great source of positivity and inspiration in a world filled with negativity Thank you for making a difference

      回复

    155. Well-articulated and full of value. Please check my post at https://mazkingin.com

      回复

    156. This blog is a great resource for anyone looking to live a more mindful and intentional life Thank you for providing valuable advice and tips

      回复

    157. As someone who struggles with mental health, I appreciate the support and empathy displayed in your blog It means a lot to know I’m not alone

      回复

    158. hey my friend, good webiste. welcome to read our research about online gaming.

      回复

    159. Infolife, teknoloji, yaşam, sağlık, ticaret ve eğitim gibi birçok kategoride pratik bilgiler ve rehberlik sunan, hayatı kolaylaştıran bilgi platformudur.

      回复

    160. Your latest blog post was truly inspiring and had some great insights. I can’t wait to see what else you have in store.

      回复

    161. Share your favorite blog post in the comments below!

      回复

    162. Love this blog! The content is always so relevant and insightful, keep up the great work!

      回复

    163. For the reason that the admin of this site is working, no uncertainty very quickly it will be renowned, due to its quality contents about Yunnan Coffee.

      回复

    164. Bahisbu giriş adresi ile sende kazan.

      回复

    165. Bahisbu giriş adresi için hemen ziyaret et.

      回复

    166. Поради щодо вибору CRM для НКО. Які CRM системи найкраще підходять для некомерційних організацій? Чи є спеціалізовані рішення?

      回复

    167. Thank you for the amazing blog post!

      回复

    168. Your passion for what you do is evident in every post It’s inspiring to see someone truly fulfilling their purpose and making a positive impact

      回复

    169. Very well presented. Every quote was awesome and thanks for sharing the content. Keep sharing and keep motivating others. trial 3 days : https://downloads.pythonanywhere.com

      回复

    170. Oil Changed – oilchanged.org

      回复

    171. Betturkey giriş adresi için ziyaret et.

      回复

    172. Blink batteries – blinkbatteries.com

      回复

    173. Jeep remote start – jeepremotestart.com

      回复

    174. C4 transmission – c4transmission.com

      回复

    175. Urfa haberleri için hemen web sitesini ziyaret et.

      回复

    176. Canlı maç izlemek için ziyaret et.

      回复

    177. I have been struggling with this issue for a while and your post has provided me with much-needed guidance and clarity Thank you so much

      回复

    178. The positivity and optimism conveyed in this blog never fails to uplift my spirits Thank you for spreading joy and positivity in the world

      回复

    179. Dxd Global | Development dxd global, global dxd, deluxe bilisim, deluxe global, IT solutions, web developer, worpress global, wordpress setup

      回复

    180. İzmir haberlerini takip etmek için Son Mühür’ü takip et.

      回复

    181. Your passion for what you do is evident in every post It’s inspiring to see someone truly fulfilling their purpose and making a positive impact

      回复

    182. Slot giriş adresi için hemen ziyaret et.

      回复

    183. Key Fob Battery – keyfobbattery.org

      回复

    184. Your honesty and vulnerability in sharing your personal experiences is truly admirable It takes courage to open up and I applaud you for it

      回复

    185. Pretty! This has been a really wonderful post. Many thanks for providing these details.trial 3 days : https://downloads.pythonanywhere.com

      回复

    186. SMS Onay hizmeti için hemen ziyaret et. En uygun fiyatlar burada…

      回复

    187. Your posts always provide me with a new perspective and encourage me to look at things differently Thank you for broadening my horizons

      回复

    188. Welcome to the best casino in TW.

      回复

    189. […] 本文链接: https://linuxstory.org/deploy-lets-encrypt-ssl-certificate-with-certbot […]

      回复

    190. […] https://linuxstory.org/deploy-lets-encrypt-ssl-certificate-with-certbot/zh-tw/ […]

      回复

    191. 作为一名负责的游客，必须写下到此一游

      回复

    192. […] 我们还将安装此 certbot 以自动续订 Let’s Encrypt 的证书。（译者注：想了解更多内容，可阅读HTTPS 简介及使用官方工具 Certbot 配置 Let’s Encrypt SSL 安全证书详细教程 | Linu…。） […]

      回复

    193. […] 《HTTPS 简介及使用官方工具 Certbot 配置 Let’s Encrypt SSL 安全证书详细教程》 […]

      回复

    194. […] certbot有一个依赖python-cryptography，要求版本>=7.0，然而apt-get里的最高版本只有6.1，使用pip手动安装，apt-get又无法识别，只能另寻他路。 搜索了一下，看到这篇文章，EFF官方还搞了一个客户端certbot-auto，wget下来之后运行自动下载依赖，这次安装倒没有碰到什么兼容性问题，但这个东西似乎不支持Cloudflare DNS插件的安装。 […]

      回复

    195. […] https://linuxstory.org/deploy-lets-encrypt-ssl-certificate-with-certbot […]

      回复

    196. 这篇文章有点误人子弟，环境不同跟着你会走很大的弯路，浪费很多时间。
      事实上，跟着官网，选择好自己的环境，按提示去做非常容易，几分钟就搞定了。

      回复

    197. […] HTTPS 简介及使用官方工具 Certbot 配置 Let’s Encrypt SSL 安全证书详细教程 […]

      回复

    198. […] LinuxStory 原创教程: https://linuxstory.org/deploy-lets-encrypt-ssl-certificate-with-certbot/ […]

      回复

    199. 大佬，你的域名已经标注为不安全拉~~~~

      回复

    200. […] HTTPS 简介及使用官方工具 Certbot 配置 Let’s Encrypt SSL 安全证书详细教程 […]

      回复

    201. […] certbot有一个依赖python-cryptography，要求版本>=7.0，然而apt-get里的最高版本只有6.1，使用pip手动安装，apt-get又无法识别，只能另寻他路。 搜索了一下，看到这篇文章，EFF官方还搞了一个客户端certbot-auto，wget下来之后运行自动下载依赖，这次安装倒没有碰到什么兼容性问题。 […]

      回复

    202. 大佬，怎么样才能创建www.xxx.com这样的证书呢，现在只能创建xxx.com这样的
      另外，证书怎么样才能删除二次重新创建呢

      回复

    203. 博主，我用的是lnmp1.4版本，不会自动更新证书，能帮我看看原因吗？

      回复

    204. […] cerbot项目地址 通用教程 […]

      回复

    205. […] cerbot项目地址 通用教程 […]

      回复

    206. […] HTTPS 简介及使用官方工具 Certbot配置Let’sEncrypt SSL安全证书详细教程 […]

      回复

    207. 博主，打扰下，我按您的方式配置完毕，目前网站首页已可用 HTTPS 访问并且显示安全，但同时产生了另外几个问题。

      重启 nginx 时提示 “conflicting server name “site.com” on 0.0.0.0:80, ignored”
      原 HTTP 链接未自动跳转到 HTPS
      网站内页使用 HTTPS 访问时返回 404

      系统是 CentOS 6，Nginx 配置文件在此 https://1drv.ms/t/s!AtnAYMg0k1P1gox2NsLlHHvlI904ew ，能否帮忙看下

      回复

    208. […] HTTPS 简介及使用官方工具 Certbot 配置 Let’s Encrypt SSL 安全证书详细教程 […]

      回复

    209. […] HTTPS 简介及使用官方工具 Certbot 配置 Let’s Encrypt SSL 安全证书详细教程 […]

      回复

    210. 你好 博主 我也是按照您的方法申请好了证书 但是提示证书无效 错误代码: SSL_ERROR_BAD_CERT_DOMAIN

      回复

    211. […] 申请一个证书，极力推荐Let’s Encrypt，免费而且可以认证。申请方法见这篇文章。 […]

      回复

    212. […] HTTPS 简介及使用官方工具 Certbot 配置 Let’s Encrypt SSL 安全证书详细教程 […]

      回复

    213. 你好博主，我按照你的教程部署了，但是浏览器提示不安全，服务器的证书和域名信息不相符

      回复

    214. […] https://linuxstory.org/deploy-lets-encrypt-ssl-certificate-with-certbot […]

      回复

    215. 步骤清晰准确，我按照你提供的步骤已经成功部署ssl证书了。 唯一不足的就是90天后要手动更新一次证书，但为了安全，忍了~

      回复

    216. […] 来源： LinuxStory  https://linuxstory.org/deploy-lets-encrypt-ssl-certificate-with-certbot/ […]

      回复

    217. 你好版主，这段时间我一直为部署ssl而烦恼，我的服务器环境是ubuntu16.0.4 + lamp环境，试了很多次，在网上找了很多文章都不能正确安装配置letsencrypt,希望能等到版主的帮助，我的电子邮箱：zxmatline@163.com.，非常感谢

      回复

      1. 你好，请问你遇到的问题是什么？可否描绘一下？

        回复

    Leave a reply

    您的邮箱地址不会被公开。 必填项已用 * 标注

    这个站点使用 Akismet 来减少垃圾评论。了解你的评论数据如何被处理。

    More in:教程

    教程

    PuTTY 使用综合指南：SSH 连接 Linux

    无论您是经验丰富的开发人员还是初学者，想在您的计算机和远程 Linux 服务器之间建立安全连接，PuTTY 是一个值得信赖的工具。让我们深入了解如何在 Windows 操作系统上利用 PuTTY 进行 […]
    By odd
    教程

    在 Ubuntu 像22.04 LTS Linux 安装 JUnit 5

    JUnit 不仅简单而且是一种有效的方法来编写和执行 Java 应用程序的单元测试,因此它是开源类别中使用最广泛的测试框架。 JUnit的最新版本5发布时带来了许多改进。 所以,如果你使用Ubuntu […]
    By odd