SSL-free SSL voucher request

Open the SSL for free web site (https://www.sslforfree.com), fill in the input box with the domain name you want to apply let's Encrypt voucher, you can use blank to separate different URLs, for example [ Subdomain.domain.com domain.com Other.com] (this has not been tried), click on the right side of the [Create free SSL Certificate] to continue.

Two

There are three ways to verify your Web site, where you choose to use manual verification, [manually verification]: Click [Manually Verify Domain] below to continue.

Three

Follow the steps for manual verification [Upload verification Files],
1. Click the Download file #1 link in step 1 to download the verification file
2. Upload the verification file to the server and confirm that the link in step 5 will be accessed normally, click
[Download SSL Certificate].

Four
If verified, the SSL credentials for the requested Web site are started. When the voucher is generated, you can see [Get notified of expiration], because the voucher is valid for only one day, so you can set up a set of Email and password here, before the voucher expires (about a week) to get notice, Avoid missing extended (renew) time.

Click [Download all SSL Certificate files] To download the voucher file compression package, you can see Private.key, CA_BUNDLE.CRT and certificate.crt three files after decompression!

V. Modify the configuration of the domain name (nginx, for example)

• HTTP jump to HTTPS configuration

Server { 
listen 80; 
server_name my.domain.com; 
index index.html; 
Return 301  https://serv< Span id= "mathjax-span-7" class= "Mi" >e rn am e request_uri ;  
}

server {
Listen 443 SSL;
server_name my.domain.com;
Index index.html;
Access_log Logs/access_my_domain_com.log;
SSL_CERTIFICATE/ETC/SSL/MY_DOMAIN_COM/CERTIFICATET.CRT; #对应压缩包里的certificatet. crt
Ssl_certificate_key/etc/ssl/my_domain_com/private.key; #对应压缩包里的private. Key
Location/{
root/opt/vhosts/my_domian_com;
}
}

• Http,https can also access the configuration

server {
Listen 80;
Listen 443 SSL;
server_name my.domain.com;
Index index.html;
SSL_CERTIFICATE/ETC/SSL/MY_DOMAIN_COM/CERTIFICATET.CRT; #对应压缩包里的certificatet. crt
Ssl_certificate_key/etc/ssl/my_domain_com/private.key; #对应压缩包里的private. Key
Access_log Logs/access_my_domain_com.log;
Location/{
root/opt/vhosts/my_domian_com;
}
}

• Verify that the modified configuration file is correct

$./nginx-t-c/usr/local/nginx/conf/nginx.conf
The configuration file/usr/local/nginx/conf/nginx.conf syntax is ok# verified by
./nginx-s Reload #重新加载nginx配置

SSL-free SSL voucher request