Let's Encrypt SSL 证书配置详解

$ git clone https://github.com/Neilpang/acme.sh.git
$ cd ./acme.sh
$ ./acme.sh --install

# 脚本会自动建立别名
# Installing alias to '/home/ubuntu/.profile'

# 文件位于 ~/.acme.sh/

$ acme.sh  --issue \
    -d mydomain.com \
    -d www.mydomain.com  \
    --webroot /home/wwwroot/mydomain.com/

# ECC证书

$ acme.sh --issue \
    -w /home/wwwroot/example.com \
    -d example.com \
    -d www.example.com \
		--keylength ec-256

$ acme.sh --install-cert \
    -d login.khs1994.com \
    --key-file /data/etc/nginx/conf.d/lets-acme/login.khs1994.com.key \
    --fullchain-file /data/etc/nginx/conf.d/lets-acme/login.khs1994.com.cer \
		--ecc

$ git clone https://github.com/letsencrypt/letsencrypt

$ cd letsencrypt

$ ./letsencrypt-auto certonly --email 邮箱 \
    -d 域名 -d 域名 \
		--webroot -w 网站目录完整路径 \
		--agree-tos

ssl_certificate /etc/letsencrypt/live/域名/fullchain.pem;    
ssl_certificate_key /etc/letsencrypt/live/域名/privkey.pem;