domain validation ssl certificate

-signkeypassport.abc.com.key-outpassport.abc.com.crt[[email protected]keys]#catpassport.abc.com.crtpassport.abc.com.key|tee Passport.abc.com.pemAccording to the above method to generate www.test.com admin.abc.com certificate file, each site will eventually have a PEM file generationConfigure the configuration file for Haproxy:frontendhttp_serverbind:80 bind:443sslcrt/etc/haproxy/keys/www.test.com.pemcrt /etc/haproxy/keys/admin.test.com.pemcrt/etc/hapr

1. Install Certificate Services (it will generate a CRT file in C drive)2. Get the CRT files generated in the C drive3. Import the file into the IdM JDK via KeytoolKeytool-importcert-trustcacerts-keystore D:\201.work\11. Company technical documents \ Auxiliary Tools \jdk1.6\jre\lib\security\cacerts-alias Caroot -file Ssoad02.one.com_ca.crt-storepass "Changeit"Keytool–delete-alias Caroot–keystore C:\progra~1\java\jdk1.6.0_23\jre\lib\security\cacertsKey

You can add SSL through the WIN-ACME tool on a Windows Server server1. Download the tool firstHttps://github.com/PKISharp/win-acme/releasesThe latest version can beBaidu Network Disk HTTPS://PAN.BAIDU.COM/S/12IFBIA6WH9JVH5PKKQ9YWW2, enter the server, download decompression, directly run Letsencrypt.exeYou may be prompted to download a package and install it directly3, follow the instructions to step one step4, this free