typora/note/工具集/acme免费SSL证书.md

1、安装blog-heysq-1255479807.cos.ap-beijing.myqcloud.com/blog buypass证书

/root/.acme.sh/acme.sh --install-cert -d heysq.com --key-file       /root/nginx/conf/ssl_file/image_heysq_com/key.pem  --fullchain-file /root/nginx/conf/ssl_file/image_heysq_com/cert.pem

2、安装heysq.com 泛域名 lets encrypt 证书

/root/.acme.sh/acme.sh --install-cert -d heysq.com \
--key-file     /root/nginx/conf/ssl_file/heysq_com/key.pem \
--fullchain-file /root/nginx/conf/ssl_file/heysq_com/cert.pem \
--reloadcmd "service nginx force-reload"

3、注册buypass账号

/root/.acme.sh/acme.sh  --server https://api.buypass.com/acme/directory         --register-account  --accountemail xxx@163.com

4、申请buypass证书-腾讯dns pod 解析

export DP_Id=111111
export DP_Key=xxxxxxxxxxxxxxxxx
/root/.acme.sh/acme.sh --issue --dns dns_dp -d heysq.com -d blog-heysq-1255479807.cos.ap-beijing.myqcloud.com/blog --server https://api.buypass.com/acme/directory

5. 签发安装buypass证书

# 签发证书
acme.sh --issue -d igit.heysq.com --days 175 --dns dns_dp --server https://api.buypass.com/acme/directory --force
# 安装证书
acme.sh --install-cert -d igit.heysq.com --key-file /etc/gitlab/ssl/key.pem --fullchain-file /etc/gitlab/ssl/cert.pem