使用acme.sh签发ecc证书

免费签发zerossl证书,一直现用现搜用法太烦，这次做个记录。

安装acme.sh

curl https://get.acme.sh | sh -s email=my@example.com

或

wget -O -  https://get.acme.sh | sh -s email=my@example.com

my@example.com换成自己邮箱

签发证书

创建证书目录

mkdir -p /etc/nginx/ssl/xxx

将xxx换成自己想要的名字

签发

本机环境使用nginx且已经搭好网站所以使用nginx模式

cd .acme.sh
./acme.sh  --issue --nginx -d xxx.xxx -d www.xxx.xxx  --keylength ec-256 \
--key-file       /etc/nginx/ssl/xxx/key.pem  \
--fullchain-file /etc/nginx/ssl/xxx/cert.pem 

等一会自动签发完会是这样

[Fri Nov  1 02:11:01 PM CST 2024] Your cert is in: /root/.acme.sh/xxx.xxx_ecc/xxx.xxx.cer
[Fri Nov  1 02:11:01 PM CST 2024] Your cert key is in: /root/.acme.sh/xxx.xxx_ecc/xxx.xxx.key
[Fri Nov  1 02:11:01 PM CST 2024] The intermediate CA cert is in: /root/.acme.sh/xxx.xxx_ecc/ca.cer
[Fri Nov  1 02:11:01 PM CST 2024] And the full-chain cert is in: /root/.acme.sh/xxx.xxx_ecc/fullchain.cer
[Fri Nov  1 02:11:01 PM CST 2024] Installing key to: /etc/nginx/ssl/xxx/key.pem
[Fri Nov  1 02:11:01 PM CST 2024] Installing full chain to: /etc/nginx/ssl/xxx/cert.pem

这样就搞定了!

续期

一般情况下自动续期，如果非要续期

acme.sh --renew -d example.com --force --ecc