{"id":5667,"date":"2024-11-14T14:48:26","date_gmt":"2024-11-14T06:48:26","guid":{"rendered":"https:\/\/www.hmouse.cn\/?p=5667"},"modified":"2024-11-14T14:48:26","modified_gmt":"2024-11-14T06:48:26","slug":"acme-sh%e8%87%aa%e5%8a%a8%e6%9b%b4%e6%96%b0ssl%e6%96%87%e4%bb%b6%ef%bc%8c%e5%af%bc%e8%87%b4%e6%9c%8d%e5%8a%a1%e5%99%a8%e4%b8%8d%e5%8f%af%e7%94%a8%e9%97%ae%e9%a2%98","status":"publish","type":"post","link":"https:\/\/www.hmouse.cn\/?p=5667","title":{"rendered":"acme.sh\u81ea\u52a8\u66f4\u65b0ssl\u6587\u4ef6\uff0c\u5bfc\u81f4\u670d\u52a1\u5668\u4e0d\u53ef\u7528\u95ee\u9898"},"content":{"rendered":"<p>\u4e4b\u524d\u662f\u901a\u8fc7<a href=\"https:\/\/github.com\/acmesh-official\/acme.sh\" data-pjax=\"#repo-content-pjax-container\" data-turbo-frame=\"repo-content-turbo-frame\">acme.sh<\/a> \u5b9a\u671f\u66f4\u65b0ssl\u6587\u4ef6\uff0c\u4fdd\u8bc1https\u7684\u8bbf\u95ee\uff0c\u4f46\u662f\u65e0\u8bbadocker\u8fd8\u662fnginx\uff0c\u90fd\u6709\u4e2a\u95ee\u9898\u3002\u5982\u679cacme.sh\u66f4\u65b0\u5b8c\uff0c\u670d\u52a1\u5fc5\u987b\u8981\u91cd\u65b0\u542f\u52a8\u624d\u80fd\u8bfb\u5230\uff0c\u4e00\u65e6ssl\u65f6\u95f4\u8fc7\u671f\uff0c\u5f71\u54cd\u4f7f\u7528\uff0c\u6240\u4ee5\u5c31\u5c1d\u8bd5\u66f4\u65b0\u5b8c\u8bc1\u4e66\uff0c\u81ea\u52a8\u91cd\u542f\u670d\u52a1\u3002\u4f46\u662f\u67e5\u4e86\u5f88\u591aacme.sh\u7684hook\u90fd\u6ca1\u7528\uff0c\u6ca1\u529e\u6cd5\u89e6\u53d1\u547d\u4ee4\u3002\u6d4b\u8bd5\u4e86\u534a\u5929\uff0c\u624d\u53d1\u73b0\u89e3\u51b3\u529e\u6cd5\uff1a<\/p>\n<p>\u53c2\u8003url\uff1ahttps:\/\/github.com\/acmesh-official\/acme.sh\/wiki\/%E8%AF%B4%E6%98%8E<\/p>\n<div class=\"markdown-heading\">\n<h2 class=\"heading-element\">Nginx example:<\/h2>\n<p><a id=\"user-content-nginx-example\" class=\"anchor\" href=\"https:\/\/github.com\/acmesh-official\/acme.sh\/wiki\/%E8%AF%B4%E6%98%8E#nginx-example\" aria-label=\"Permalink: Nginx example:\"><\/a><\/div>\n<div class=\"snippet-clipboard-content notranslate position-relative overflow-auto\">\n<pre class=\"notranslate\"><code>acme.sh --install-cert -d example.com \\\r\n--key-file       \/path\/to\/keyfile\/in\/nginx\/key.pem  \\\r\n--fullchain-file \/path\/to\/fullchain\/nginx\/cert.pem \\\r\n--reloadcmd     \"service nginx force-reload\"\r\n<\/code><\/pre>\n<div class=\"zeroclipboard-container position-absolute right-0 top-0\"><\/div>\n<\/div>\n<p>(\u4e00\u4e2a\u5c0f\u63d0\u9192, \u8fd9\u91cc\u7528\u7684\u662f\u00a0<code>service nginx force-reload<\/code>, \u4e0d\u662f\u00a0<code>service nginx reload<\/code>, \u636e\u6d4b\u8bd5,\u00a0<code>reload<\/code>\u00a0\u5e76\u4e0d\u4f1a\u91cd\u65b0\u52a0\u8f7d\u8bc1\u4e66, \u6240\u4ee5\u7528\u7684\u00a0<code>force-reload<\/code>)<\/p>\n<p>Nginx \u7684\u914d\u7f6e\u00a0<code>ssl_certificate<\/code>\u00a0\u4f7f\u7528\u00a0<code>\/etc\/nginx\/ssl\/fullchain.cer<\/code>\u00a0\uff0c\u800c\u975e\u00a0<code>\/etc\/nginx\/ssl\/&lt;domain&gt;.cer<\/code>\u00a0\uff0c\u5426\u5219\u00a0<a href=\"https:\/\/www.ssllabs.com\/ssltest\/\" rel=\"nofollow\">SSL Labs<\/a>\u00a0\u7684\u6d4b\u8bd5\u4f1a\u62a5\u00a0<code>Chain issues Incomplete<\/code>\u00a0\u9519\u8bef\u3002<\/p>\n<p><code>--install-cert<\/code>\u547d\u4ee4\u53ef\u4ee5\u643a\u5e26\u5f88\u591a\u53c2\u6570, \u6765\u6307\u5b9a\u76ee\u6807\u6587\u4ef6. \u5e76\u4e14\u53ef\u4ee5\u6307\u5b9a reloadcmd, \u5f53\u8bc1\u4e66\u66f4\u65b0\u4ee5\u540e, reloadcmd\u4f1a\u88ab\u81ea\u52a8\u8c03\u7528,\u8ba9\u670d\u52a1\u5668\u751f\u6548.<\/p>\n<p>\u540c\u6837\u7684docker\u91cd\u542f\uff0c\u628a<code>reloadcmd     <\/code>\u00a0 \u7684\u547d\u4ee4 \u4fee\u6539\u5373\u53ef\u3002\u540e\u9762\u6d4b\u8bd5\u5f3a\u5236\u66f4\u65b0\uff0c\u4f1a\u628a\u8bc1\u4e66copy\u5230\u5bf9\u5e94\u4f4d\u7f6e\uff0c\u5e76\u6267\u884c\u76f8\u5173\u91cd\u542f\u547d\u4ee4\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4e4b\u524d\u662f\u901a\u8fc7<a href=\"https:\/\/github.com\/acmesh-official\/acme.sh\" data-pjax=\"#repo-content-pjax-container\" data-turbo-frame=\"repo-content-turbo-frame\">acme.sh<\/a> \u5b9a\u671f\u66f4\u65b0ssl\u6587\u4ef6\uff0c\u4fdd\u8bc1https\u7684\u8bbf\u95ee\uff0c\u4f46\u662f\u65e0\u8bbadocker\u8fd8\u662fnginx\uff0c\u90fd\u6709\u4e2a\u95ee\u9898\u3002\u5982\u679cacme.sh\u66f4\u65b0\u5b8c\uff0c\u670d\u52a1\u5fc5\u987b\u8981\u91cd\u65b0\u542f\u52a8\u624d\u80fd\u8bfb\u5230\uff0c\u4e00\u65e6ssl\u65f6\u95f4\u8fc7\u671f\uff0c\u5f71\u54cd\u4f7f\u7528\uff0c\u6240\u4ee5\u5c31\u5c1d\u8bd5\u66f4\u65b0\u5b8c\u8bc1\u4e66\uff0c\u81ea\u52a8\u91cd\u542f\u670d\u52a1\u3002\u4f46\u662f\u67e5\u4e86\u5f88\u591aacme.sh\u7684hook\u90fd\u6ca1\u7528\uff0c\u6ca1\u529e\u6cd5\u89e6\u53d1\u547d\u4ee4\u3002\u6d4b\u8bd5\u4e86\u534a\u5929\uff0c\u624d\u53d1\u73b0\u89e3\u51b3\u529e\u6cd5\uff1a<\/p>\n<p>\u53c2\u8003url\uff1ahttps:\/\/github.com\/acmesh-official\/acme.sh\/wiki\/%E8%AF%B4%E6%98%8E<\/p>\n<div class=\"markdown-heading\">\n<h2 class=\"heading-element\">Nginx example:<\/h2>\n<p><a id=\"user-content-nginx-example\" class=\"anchor\" href=\"https:\/\/github.com\/acmesh-official\/acme.sh\/wiki\/%E8%AF%B4%E6%98%8E#nginx-example\" aria-label=\"Permalink: Nginx example:\"><\/a><\/div>\n<div class=\"snippet-clipboard-content notranslate position-relative overflow-auto\">\n<pre class=\"notranslate\"><code>acme.sh --install-cert -d example.com \\\r\n--key-file       \/path\/to\/keyfile\/in\/nginx\/key.pem  \\\r\n--fullchain-file \/path\/to\/fullchain\/nginx\/cert.pem \\\r\n--reloadcmd     \"service nginx force-reload\"\r\n<\/code><\/pre>\n<div class=\"zeroclipboard-container position-absolute right-0 top-0\"><\/div>\n<\/div>\n<p>(\u4e00\u4e2a\u5c0f\u63d0\u9192, \u8fd9\u91cc\u7528\u7684\u662f\u00a0<code>service nginx force-reload<\/code>, \u4e0d\u662f\u00a0<code>service nginx reload<\/code>, \u636e\u6d4b\u8bd5,\u00a0<code>reload<\/code>\u00a0\u5e76\u4e0d\u4f1a\u91cd\u65b0\u52a0\u8f7d\u8bc1\u4e66, \u6240\u4ee5\u7528\u7684\u00a0<code>force-reload<\/code>)<\/p>\n<p>Nginx \u7684\u914d\u7f6e\u00a0<code>ssl_certificate<\/code>\u00a0\u4f7f\u7528\u00a0<code>\/etc\/nginx\/ssl\/fullchain.cer<\/code>\u00a0\uff0c\u800c\u975e\u00a0<code>\/etc\/nginx\/ssl\/&lt;domain&gt;.cer<\/code>\u00a0\uff0c\u5426\u5219\u00a0<a href=\"https:\/\/www.ssllabs.com\/ssltest\/\" rel=\"nofollow\">SSL Labs<\/a>\u00a0\u7684\u6d4b\u8bd5\u4f1a\u62a5\u00a0<code>Chain issues Incomplete<\/code>\u00a0\u9519\u8bef\u3002<\/p>\n<p><code>--install-cert<\/code>\u547d\u4ee4\u53ef\u4ee5\u643a\u5e26\u5f88\u591a\u53c2\u6570, \u6765\u6307\u5b9a\u76ee\u6807\u6587\u4ef6. \u5e76\u4e14\u53ef\u4ee5\u6307\u5b9a reloadcmd, \u5f53\u8bc1\u4e66\u66f4\u65b0\u4ee5\u540e, reloadcmd\u4f1a\u88ab\u81ea\u52a8\u8c03\u7528,\u8ba9\u670d\u52a1\u5668\u751f\u6548.<\/p>\n<p>\u540c\u6837\u7684docker\u91cd\u542f\uff0c\u628a<code>reloadcmd     <\/code>\u00a0 \u7684\u547d\u4ee4 \u4fee\u6539\u5373\u53ef\u3002\u540e\u9762\u6d4b\u8bd5\u5f3a\u5236\u66f4\u65b0\uff0c\u4f1a\u628a\u8bc1\u4e66copy\u5230\u5bf9\u5e94\u4f4d\u7f6e\uff0c\u5e76\u6267\u884c\u76f8\u5173\u91cd\u542f\u547d\u4ee4\u3002<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[263,404,261],"class_list":{"0":"post-5667","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"hentry","6":"category-5","7":"tag-acme-sh","8":"tag-ssl","10":"category-5-id","11":"post-seq-1","12":"post-parity-odd","13":"meta-position-corners","14":"fix"},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=\/wp\/v2\/posts\/5667","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5667"}],"version-history":[{"count":1,"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=\/wp\/v2\/posts\/5667\/revisions"}],"predecessor-version":[{"id":5668,"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=\/wp\/v2\/posts\/5667\/revisions\/5668"}],"wp:attachment":[{"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5667"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5667"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5667"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}