Let's Encrypt-SSL 证书申请

2019-5-18 更新 https://freessl.cn + https://myssl.com
2017-5-26 更新 https://zerossl.com/free-ssl
2016-1-30 更新 https://www.sslforfree.com

安装

apt-get update
apt-get install git
git clone https://github.com/letsencrypt/letsencrypt
cd letsencrypt

运行

先停止 nginx 再运行

service nginx stop
./letsencrypt-auto certonly --standalone --email mail@mail.com -d leejon.com -d www.leejon.com

完成（2016-6-12 测试，有效期 90 天）

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at
 /etc/letsencrypt/live/www.leeyr.com/fullchain.pem. Your cert will
 expire on 2016-09-10\. To obtain a new or tweaked version of this
 certificate in the future, simply run letsencrypt-auto again. To
 non-interactively renew *all* of your certificates, run
 "letsencrypt-auto renew"
 - If you like Certbot, please consider supporting our work by:

 Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate
 Donating to EFF: https://eff.org/donate-le

生成证书路径：

/etc/letsencrypt/live/www.leeyr.com/fullchain.pem & privkey.pem
# fullchain.pem（等同.cert）
# privkey.pem（等同.key）

最后 nginx 配置 SSL，启动 nginx，完成。

续期

./letsencrypt-auto --renew certonly --email mail@mail.com -d leeyr.com -d www.leeyr.com