One
Open the SSL for free web site (https://www.sslforfree.com), fill in the input box you want to apply let's Encrypt Certificate of the domain name, you can use white space to separate different URLs, such as [ Subdomain.domain.com domain.com Other.com] (this has not been tried), click on the right side of the SELECT [Create free SSL certificate] to continue.
Two
There are three ways to verify your Web site, where you choose to use manual authentication, that is, [Manually verification]: Click below [Manually Verify Domain] to continue.
Three
Follow the manual validation steps to explain [Upload verification Files] in turn,
1. Click the Download file #1 link in step 1 to download the validation files
2. Upload the verification file to the server, confirm the link in step 5 can be normal access, click
[Download SSL certificate].
Four
If authenticated, the SSL credentials for the Web site that are being applied for the build are started. When the voucher is generated, you can see [get notified of expiration], because the voucher is valid for only days, so you can set up a set of Email and password, in the voucher before the expiration (a week or so) to get notice, Lest you miss the extended (renew) time.
Click [Download all SSL certificate files] To download the voucher file compression package, after decompression, you can see the Private.key, Ca_bundle.crt and certificate.crt three files.
V. Modify the domain name configuration (for example, Nginx) HTTP jump to HTTPS configuration
server {
Listen 80;
server_name my.domain.com;
Index index.html;
return https://servername Server_namerequest_uri;
}
server {
Listen 443 SSL;
server_name my.domain.com;
Index index.html;
Access_log Logs/access_my_domain_com.log;
SSL_CERTIFICATE/ETC/SSL/MY_DOMAIN_COM/CERTIFICATET.CRT #对应压缩包里的certificatet. CRT
Ssl_certificate_key/etc/ssl/my_domain_com/private.key #对应压缩包里的private. Key
Location/{
root/opt/vhosts/my_domian_com;
}
Http,https can also access the configuration
server {
Listen 80;
Listen 443 SSL;
server_name my.domain.com;
Index index.html;
SSL_CERTIFICATE/ETC/SSL/MY_DOMAIN_COM/CERTIFICATET.CRT #对应压缩包里的certificatet. CRT
Ssl_certificate_key/etc/ssl/my_domain_com/private.key #对应压缩包里的private. Key
Access_log Logs/access_my_domain_com.log;
Location/{
root/opt/vhosts/my_domian_com;
}
Verify that the modified configuration file is correct
$./nginx-t-c/usr/local/nginx/conf/nginx.conf
The configuration file/usr/local/nginx/conf/nginx.conf syntax I s ok# validation through
./nginx-s Reload #重新加载nginx配置