• Feeds

  • 是时候支持HTTPS了:免费SSL证书letsencrypt配置教程

    今天抽空将 blog 增加了 HTTPS 支持,并停止了原来的 HTTP 服务。

    由于证书仅网站域名需要,因此使用了免费的 Let’s Encrypt 证书服务。

    根据维基百科的说明,Let’s Encrypt 是一个于2015年三季度推出的数字证书认证机构,将通过旨在消除当前手动创建和安装证书的复杂过程的自动化流程,为安全网站提供免费的SSL/TLS证书。Let’s Encrypt 是由互联网安全研究小组(ISRG,一个公益组织)提供的服务。主要赞助商包括电子前哨基金会,Mozilla 基金会,Akamai 以及思科。

    2015年12月3日,该服务进入公测阶段,正式面向公众。

    2016年4月12日,该项目正式离开Beta阶段。

    到2016年9月9日,Let’s Encrypt 已经发放 1000 万张证书。因此对于大部分中小型网站来说,是一个值得考虑的选择。

    letsencrypt

    HTTPS 启用及配置的主要步骤如下,假设你已经有一个正常运行的 HTTP 网站。

    1. 打开 https://certbot.eff.org/ 选择对应操作系统与 Web 服务器,选完后出现响应的平台说明。由于我的系统运行在 nginx 及 Ubuntu,选完之后出现的说明地址是 https://certbot.eff.org/#ubuntuxenial-nginx

    2. 执行命令,并根据需要修改相应域名参数。

    $ sudo apt-get install letsencrypt
    $ letsencrypt certonly --webroot -w /var/www/timyang.net -d timyang.net -d www.timyang.net
    

    3. 修改 nginx
    将 80 端口相关配置改成 443 端口,并增加相关配置

    # listen       80;
    listen 443 ssl;
    server_name timyang.net www.timyang.net;
    
    ssl_certificate /etc/letsencrypt/live/timyang.net/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/timyang.net/privkey.pem;
    

    再增加 80 端口自动跳转

    server {
        listen 80;
        server_name timyang.net www.timyang.net;
        return 301 https://$host$request_uri;
    }
    

    4. 重启 nginx,并用 chrome 访问,如果 URL 地址之前出现锁标记,则说明设置成功。
    如果页面中还包含有嵌入的 HTTP 元素,chrome 会仍然显示 i 标记,通过点击 i 之后的元素说明逐个修复即可。

    timyang-https

    另外注意 Let’s Encrypt 每次只有 90 天有效期,但可以通过脚本进行更新

    测试运行

    $ sudo letsencrypt renew --dry-run --agree-tos
    

    如果运行成功,建议将正式更新脚本加到 cron 脚本中,一劳永逸。

    $ sudo letsencrypt renew
    

    虽然 Let’s Encrypt 是一个免费的服务,但对 letsencrypt 使用感到满意的朋友,还可以去他们网站进行赞助。

    如想及时阅读Tim Yang的文章,可通过页面右上方扫码订阅最新更新。

    « | »

    651 Comments  »

    1. Thank you for informative post.
      https://technobullion.com/

    2. If you’re determined to do anything, you’ll figure it out. If not, you’ll come up with a defense. Go here to read more posts that are similar. https://uslifesstyle.com/

    3. Thank you for sharing this valuable information
      Elizabeth Ann Weber

    4. Thank you for sharing this valuable information
      Obit Buzz

    5. Thank you for the helpful post!
      Dorothy Bowles Ford

    6. Wow, that’s incredible! contact us
      Dorothy Bowles Ford

    7. Thank you for sharing this valuable information
      Grace Charis Age

    8. Thanks for sharing this article ! it’s really useful
      Bart Springtime Wife

    9. Thank you for this wonderful blog
      Thomas Sullivan Roadkill Story

    10. This is very informative and intersting, thanks for sharing.
      Edgardo Canales Net Worth

    11. Such a very useful article
      James Earl Jones Wife

    12. Thank you for the helpful post!
      Elsa Jean Net Worth

    13. Thank you for sharing this valuable information!
      Alex Fine Net Worth

    14. Thank you for sharing this post.
      King Javien Conde

    15. I hope you will share something more.
      Will Sonbuchner Wife

    16. This is very informative and intersting, thanks for sharing.
      Paul Inouye Wife

    17. This is the rally nice post thx
      Paul inouye wife

    18. Thank you for sharing this valuable information!
      Margie Washichek

    19. This is very informative and intersting, thanks for sharing: Layla Jenner

    20. Thank you for the helpful post!
      sophia Hardison

    21. This is the really nice post thx!
      Kris Tyson Poster

    22. Thank you for sharing this post I hope you will share something more: Spm Net Worth

    23. I appreciate your useful post: Zach Justice

    24. Thank you for sharing this is really interesting and educational: Mark Kelly Wife

    25. Thank you for the helpful post: Keilani Bautista

    26. I’m grateful that you shared this important knowledge: Andre Darque

    27. This is the really nice post thx: Sandra Janowski

    28. Thank you for sharing this valuable information: Michelle Smallmon Spouse

    29. I really like your blog it is very helpful and informative content good work keep it up: Tokyo Toni Net Worth

    30. Thanks for the extremely great post: Gina Carano Husband

    31. Thank you for sharing this valuable information: Ice Spice Age

    32. Thank you for the helpful post: Jose Stemkens

    33. I’m grateful that you shared this important knowledge: Melissa Sinkevics

    34. This is the really nice post thx: Mary Joan Schutz

    35. Thank you very much for this wonderful topic: Margie Washichek Age

    36. This is the really nice post thx: Constantine Yankoglu

    Leave a Comment