ssl 申请免费证书
certbot certonly --webroot \ -w /var/www/html/bx-site/ -d http://xx-xx.xx.com/ \ --register-unsafely-without-email \ --agree-tos \ --preferred-challenges http
国内的内网穿透
https://blog.csdn.net/a1035434631/article/details/108010819
ngrok
frp
https://blog.csdn.net/weixin_43213815/article/details/121336968
lanproxy
goproxy
npx
证书相关软件安装
https://zhuanlan.zhihu.com/p/585464819
指定地址创建证书
sudo certbot --nginx -d example.com -d www.example.com
sudo certbot --nginx -d violet-net.com -d violet-net.com
## centos
https://zhuanlan.zhihu.com/p/437166547
openssl x509 -in /etc/letsencrypt/live/www.zftlwgl.cn/fullchain.pem -noout -dates
certbot --nginx -d example.com -d www.example.com
sudo certbot --nginx -d rongfn.cn -d doc.example.com
### CentOS下用Certbot部署Nginx的HTTPS
https://blog.csdn.net/u014681799/article/details/116055531
# sudo certbot --nginx -d rongfn.cn -d doc.example.com --config /www/server/nginx/conf/nginx.conf
certbot certonly --standalone --email 372088783@qq.com -d rongfn.cn
certbot certonly --standalone --email 372088783@qq.com -d rongfn.cn
certbot certonly --standalone --email 372088783@qq.com -d doc.rongfn.cn
certbot certonly --standalone --email 372088783@qq.com -d mwms.rongfn.cn
certbot certonly --standalone --email 372088783@qq.com -d testlw.rongfn.cn
sudo certbot --nginx -d testlw.rongfn.cn --config /www/server/nginx/conf/nginx.conf
sudo certbot --nginx -d www.zftlwgl.cn --config /www/server/nginx/conf/nginx.conf
certbot certonly --standalone --email 372088783@qq.com -d www.zftlwgl.cn --config /www/server/nginx/conf/nginx.conf
certbot certonly --standalone --email 372088783@qq.com -d www.zftlwgl.cn --config /www/server/nginx/conf/nginx.conf
listen 80;
listen [::]:80;
listen 443 ssl;
listen [::]:443 ssl;
ssl_certificate /etc/letsencrypt/live/www.zftlwgl.cn/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/www.zftlwgl.cn/privkey.pem;
certbot certonly --standalone --email my@qq.com -d pe-ony.com certbot certonly --standalone --email my@qq.com -d violet-net.com certbot certonly --standalone --email my@qq.com -d wfyskins.com certbot certonly --standalone --email my@qq.com -d long-jiang.com
/certbot-auto renew
Certificate Name: long-jiang.com Serial Number: 4df9aafa2f9b9595591b6f2b69645a72fae Key Type: RSA Domains: long-jiang.com Expiry Date: 2025-03-29 13:36:01+00:00 (VALID: 89 days) Certificate Path: /etc/letsencrypt/live/long-jiang.com/fullchain.pem Private Key Path: /etc/letsencrypt/live/long-jiang.com/privkey.pem listen 80; listen [::]:80; listen 443 ssl; listen [::]:443 ssl; ssl_certificate /etc/letsencrypt/live/long-jiang.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/long-jiang.com/privkey.pem;
Certificate Name: pe-ony.com Serial Number: 30429cbd03c73d4f3bbca1b0b9614e0247a Key Type: RSA Domains: pe-ony.com Expiry Date: 2025-03-29 13:36:22+00:00 (VALID: 89 days) Certificate Path: /etc/letsencrypt/live/pe-ony.com/fullchain.pem Private Key Path: /etc/letsencrypt/live/pe-ony.com/privkey.pem listen 80; listen [::]:80; listen 443 ssl; listen [::]:443 ssl; ssl_certificate /etc/letsencrypt/live/pe-ony.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/pe-ony.com/privkey.pem; Certificate Name: violet-net.com Serial Number: 494fe10e17e50834dff710d88c4c6ae21e6 Key Type: RSA Domains: violet-net.com Expiry Date: 2025-03-29 13:36:33+00:00 (VALID: 89 days) Certificate Path: /etc/letsencrypt/live/violet-net.com/fullchain.pem Private Key Path: /etc/letsencrypt/live/violet-net.com/privkey.pem
listen 80;
listen [::]:80;
listen 443 ssl;
listen [::]:443 ssl;
ssl_certificate /etc/letsencrypt/live/violet-net.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/violet-net.com/privkey.pem;
Certificate Name: wfyskins.com Serial Number: 38eaddfc0cdea1e01248c81cdc8af5636c9 Key Type: RSA Domains: wfyskins.com Expiry Date: 2025-03-29 13:36:41+00:00 (VALID: 89 days) Certificate Path: /etc/letsencrypt/live/wfyskins.com/fullchain.pem Private Key Path: /etc/letsencrypt/live/wfyskins.com/privkey.pem listen 80; listen [::]:80; listen 443 ssl; listen [::]:443 ssl; ssl_certificate /etc/letsencrypt/live/wfyskins.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wfyskins.com/privkey.pem;
查看证书
certbot certificates
Certificate Name: mwms.rongfn.cn Serial Number: 66156bb50541609043b3f44af39b06f581d Key Type: RSA Domains: mwms.rongfn.cn Expiry Date: 2026-05-14 01:24:52+00:00 (VALID: 89 days) Certificate Path: /etc/letsencrypt/live/mwms.rongfn.cn/fullchain.pem Private Key Path: /etc/letsencrypt/live/mwms.rongfn.cn/privkey.pem
listen 443 ssl; listen [::]:443 ssl;
ssl_certificate /etc/letsencrypt/live/mwms.rongfn.cn/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/mwms.rongfn.cn/privkey.pem;