{"id":23,"date":"2025-04-14T19:21:18","date_gmt":"2025-04-14T11:21:18","guid":{"rendered":"https:\/\/blog.newskita.eu.org\/?p=23"},"modified":"2025-04-14T19:24:33","modified_gmt":"2025-04-14T11:24:33","slug":"%e7%94%b3%e8%af%b7%e5%9f%9f%e5%90%8d%e8%af%81%e4%b9%a6","status":"publish","type":"post","link":"https:\/\/blog.newskita.eu.org\/index.php\/2025\/04\/14\/%e7%94%b3%e8%af%b7%e5%9f%9f%e5%90%8d%e8%af%81%e4%b9%a6\/","title":{"rendered":"\u7533\u8bf7\u57df\u540d\u8bc1\u4e66"},"content":{"rendered":"\n<p class=\"is-style-text-display\"><\/p>\n\n\n\n<p><a href=\"mailto:1.\u4e0b\u8f7d\u5e76\u914d\u7f6eacme.sh\u73af\u5883\uff08demo@mydomain.com\">1.\u4e0b\u8f7d\u5e76\u914d\u7f6eacme.sh\u73af\u5883\uff08demo@mydomain.com<\/a> \u4fee\u6539\u6210\u4f60\u7684\u90ae\u7bb1\uff09<\/p>\n\n\n\n<p>curl https:\/\/get.acme.sh | sh -s email=demo@mydomain.com\u5982\u679c\u51fa\u73b0 Install success \u7c7b\u4f3c\u5b57\u6837\u5219\u8bf4\u660e\u914d\u7f6e\u6210\u529f\uff1b\u5982\u679c\u90ae\u7bb1\u5199\u9519\u4e86\uff0c\u53ef\u4ee5\u7f16\u8f91 $HOME\/.acme.sh\/account.conf \u8fdb\u884c\u4fee\u6539\u3002<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>2.\u67e5\u770b\u662f\u5426\u5f00\u542f\u81ea\u52a8\u7eed\u671f<\/p>\n\n\n\n<p>crontab -l<br>\u5982\u679c\u51fa\u73b0 \u201c\/root\/.acme.sh\u201d\/acme.sh \u2013cron \u2013home \u201c\/root\/.acme.sh\u201d &gt; \/dev\/null<br>\u7c7b\u4f3c\u5b57\u6837\u5219\u8868\u660e\u5df2\u7ecf\u5f00\u542f\u81ea\u52a8\u7eed\u671f<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>3.\u4f7f\u73af\u5883\u914d\u7f6e\u7acb\u5373\u751f\u6548source ~\/.bashrc4.\u914d\u7f6e\u8bc1\u4e66\u7533\u8bf7\u6e90 \uff08zerossl letsencrypt buypass ssl.com google\uff09\u5efa\u8baezerossl\uff0c\u56e0\u4e3aletsencrypt\u8d8a\u6765\u8d8a\u4e0d\u88ab\u4fe1\u4efb\u3002acme.sh &#8211;set-default-ca &#8211;server zerossl\u5982\u679c\u51fa\u73b0 Changed default CA to: https:\/\/acme.zerossl.com\/v2\/DV90 \u7c7b\u4f3c\u5b57\u6837\u5219\u8bf4\u660e\u5207\u6362\u6210\u529f<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>\u8bc1\u4e66\u7533\u8bf7\u5206\u4e3a\u4e24\u79cd<\/p>\n\n\n\n<p> \u624b\u52a8\u7533\u8bf7<\/p>\n\n\n\n<p>\u6b65\u9aa41.<\/p>\n\n\n\n<p>acme.sh &#8211;issue &#8211;dns -d mydomain.com -d *.mydomain.com &#8211;yes-I-know-dns-manual-mode-enough-go-ahead-please<\/p>\n\n\n\n<p>\u8fd4\u56de\u4fe1\u606f<\/p>\n\n\n\n<p>Domain: \u2018acme-challenge.mydomain.com\u2019TXT value: \u2018\u6821\u9a8c\u7801\u2019\u8fd9\u4e2aTXT\u51fa\u73b0\u51e0\u6b21\u5c31\u6dfb\u52a0\u51e0\u6761acme-challenge\u7684TXT\u89e3\u6790\u8bb0\u5f55\u5927\u7ea6\u8fc710\u5206\u949f\u5de6\u53f3(\u8ddf\u57df\u540d\u6258\u7ba1\u5546\u6709\u5173)<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>\u6b65\u9aa42<\/p>\n\n\n\n<p><a href=\"http:\/\/acme.sh\">acme.sh<\/a> &#8211;renew &#8211;dns -d <a href=\"http:\/\/mydomain.com\">mydomain.com<\/a> -d *.<a href=\"http:\/\/mydomain.com\">mydomain.com<\/a> &#8211;yes-I-know-dns-manual-mode-enough-go-ahead-please<br>\u5982\u679c\u51fa\u73b0 Cert success \u7c7b\u4f3c\u5b57\u6837\u5219\u8868\u660e\u7533\u8bf7\u6210\u529f\u3002<br>\u751f\u6210\u7684\u8bc1\u4e66\u6587\u4ef6\u90fd\u5728\u4ee5\u4e0b\u76ee\u5f55\u4e2d<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>$HOME\/.<a href=\"http:\/\/acme.sh\/mydomain.com_ecc\/mydomain.com.key\">acme.sh\/mydomain.com_ecc\/mydomain.com.key<\/a>&nbsp;&nbsp; Key\u6587\u4ef6<br>$HOME\/.<a href=\"http:\/\/acme.sh\/mydomain.com_ecc\/mydomain.com.cer\">acme.sh\/mydomain.com_ecc\/mydomain.com.cer<\/a><br>$HOME\/.<a href=\"http:\/\/acme.sh\/mydomain.com_ecc\/ca.cer\">acme.sh\/mydomain.com_ecc\/ca.cer<\/a><br>$HOME\/.<a href=\"http:\/\/acme.sh\/mydomain.com_ecc\/fullchain.cer\">acme.sh\/mydomain.com_ecc\/fullchain.cer<\/a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \u5b8c\u6574\u8bc1\u4e66\u94fe<br>\u4e00\u822c\u53ea\u9700\u8981\u7528\u5230<a href=\"http:\/\/mydomain.com\">mydomain.com<\/a>.key \u548c fullchain.cer<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>\u81ea\u52a8\u7533\u8bf7<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>acme.sh\u4ee3\u7801\u4e2d https:\/\/github.com\/acmesh-official\/acme.sh\/tree\/master\/dnsapi \u63d0\u4f9b\u4e86\u5f88\u591a\u57df\u540d\u6258\u7ba1\u5546API\u63a5\u53e3\uff0c\u4e00\u822csh\u6587\u4ef6\u5f00\u5934\u7684\u51e0\u884c\u4f1a\u6709\u9700\u8981\u63d0\u4f9b\u7684\u53d8\u91cf\u4fe1\u606f<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>\u8fd9\u91cc\u4ee5cloudflare\u4e3a\u4f8b \u9700\u8981\u63d0\u4f9b\u7684\u73af\u5883\u53d8\u91cf\u5982\u4e0b:<\/p>\n\n\n\n<p>export CF_Token=&#8221;&#8221;<\/p>\n\n\n\n<p>export CF_Account_ID=&#8221;&#8221;<\/p>\n\n\n\n<p>export CF_Zone_ID=&#8221;&#8221;<\/p>\n\n\n\n<p>\u6216<\/p>\n\n\n\n<p>export CF_Key=&#8221;&#8221;<\/p>\n\n\n\n<p>export CF_Email=&#8221;&#8221;<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>\u7136\u540e\u6267\u884c<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>acme.sh &#8211;issue &#8211;dns dns_cf -d <a href=\"http:\/\/mydomain.com\">mydomain.com<\/a> -d *.mydomain.com<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>\u540c\u6837\u4f1a\u51fa\u73b0 success \u7c7b\u4f3c\u5b57\u6837\u7684\u8fd4\u56de\u4fe1\u606f<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>\u624b\u52a8\u7533\u8bf7\u548c\u81ea\u52a8\u7533\u8bf7\u751f\u6210\u7ed3\u679c\u4e00\u6837\uff0c\u8bc1\u4e66\u90fd\u5728\u540c\u4e00\u4e2a\u4f4d\u7f6e\u3002\u8fd9\u4e2atls\u8bc1\u4e66\u7533\u8bf7\u6210\u529f\u540e\uff0c\u53ef\u4ee5\u8fd0\u7528\u5230\u5404\u79cdtls\u7684\u573a\u666f\u4e2d\uff0c\u4e0d\u9700\u8981\u518d \u5ffd\u7565\u8bc1\u4e66\u6821\u9a8c \u7b49\u64cd\u4f5c\uff0c\u5ba2\u6237\u7aef\u670d\u52a1\u7aef\u505a\u5230\u5b8c\u5168\u53ef\u4fe1\u3002<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>\u8fd9\u4e2a\u8bc1\u4e66\u662f90\u5929\u4e00\u7eed\uff0c\u4e00\u5b9a\u8981\u51c6\u65f6\u68c0\u67e5\uff0c\u770b\u662f\u5426\u81ea\u52a8\u7eed\u671f\u6210\u529f\u3002$HOME\u662f\u73af\u5883\u53d8\u91cf\u6307\u5411\u7684\u662f\u7528\u6237\u4e3b\u76ee\u5f55\uff0c\u4e00\u822c\u4e3a\/root\u4eca\u5929\u4e3b\u8981\u4ecb\u7ecd\u7684\u662f\u5982\u4f55\u7533\u8bf7\u53ef\u4fe1\u8bc1\u4e66\u548c\u81ea\u52a8\u7eed\u671f\uff0c\u5982\u679c\u6709\u628a\u8bc1\u4e66\u90e8\u7f72\u5230nginx\u7b49\u573a\u666f\u9700\u6c42\u7684\u5efa\u8bae\u53bb https:\/\/github.com\/acmesh-official\/acme.sh \u67e5\u770b\u76f8\u5e94\u6587\u6863\u3002<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>1.\u4e0b\u8f7d\u5e76\u914d\u7f6eacme.sh\u73af\u5883\uff08demo@mydomain.com \u4fee\u6539\u6210\u4f60\u7684\u90ae\u7bb1\uff09 curl https: [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,1],"tags":[],"class_list":["post-23","post","type-post","status-publish","format-standard","hentry","category-3","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/blog.newskita.eu.org\/index.php\/wp-json\/wp\/v2\/posts\/23","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.newskita.eu.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.newskita.eu.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.newskita.eu.org\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.newskita.eu.org\/index.php\/wp-json\/wp\/v2\/comments?post=23"}],"version-history":[{"count":1,"href":"https:\/\/blog.newskita.eu.org\/index.php\/wp-json\/wp\/v2\/posts\/23\/revisions"}],"predecessor-version":[{"id":24,"href":"https:\/\/blog.newskita.eu.org\/index.php\/wp-json\/wp\/v2\/posts\/23\/revisions\/24"}],"wp:attachment":[{"href":"https:\/\/blog.newskita.eu.org\/index.php\/wp-json\/wp\/v2\/media?parent=23"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.newskita.eu.org\/index.php\/wp-json\/wp\/v2\/categories?post=23"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.newskita.eu.org\/index.php\/wp-json\/wp\/v2\/tags?post=23"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}