I heard that let's encrypt has already started public beta, so immediately began to try. Let's Encrypt is a new digital certification authority that automates the process of eliminating the complexity of creating and installing certificates, and provides free SSL/TLS certificates for websites.
The following is the process of using Let's Encrypt:
Get the client and execute
--note that the Python version requires >=2.7git clone https://github.com/letsencryp
Concept
What is Container?Www.docker.com/resources/what-containerWww.docker.com/why-docker
What is let ' s Encrypt?Let's Encrypt is a free, automated, and open Certificate authority.
Installation
Installing Dockerdocs.docker.com/install/linux/docker-ce/ubuntu/
Get imagesdocker pull linuxserver/letsencrypt
Details of the main characters and how to use:
Hub.docker.com/r/linuxserver/letsencryp
I heard that let's encrypt has already started public beta, so immediately began to try. Let's Encrypt is a new digital certification authority that automates the process of eliminating the complexity of creating and installing certificates, and provides free SSL/TLS certificates for websites.
The following is the process of using Let's Encrypt:
Get the client and execute
--note that the Python version requires >=2.7git clone https://github.com/letsencryp
CENTOS7 configuration Nginx Support HTTPS access
1. Install git and BC
yum-y Install git BC
2. Install Nginx
1. Preparation:
Yum install-y gcc-c++ pcre pcre-devel zlib zlib-devel OpenSSL openssl-devel
2. Download:
wget https://nginx.org/download/nginx-1.11.6.tar.gz
3. Decompression:
Tar zxvf nginx-1.11.6.tar.gz
4. Compile and install:
CD nginx-1.11.6
./configure--with-ipv6--with-http_ssl_module make make
install
3. Request an SSL certificate
1. Download Let ' s Encrypt
g
-compatible versions, especially debian environment compatibility is better than CentOS.
For example, CentOS 6 64-bit environments do not support GIT, for more information, see "Linux CentOS 6 64-bit system installation Git tool environment tutorial" and "9 steps to upgrade CentOS 5 to Python 2.7.
The simplest is that the Debian environment is not supported. You can run "apt-get-y install git" to directly install the support. If CentOS runs "yum-y install git-core" directly.
The specific problem
, the IIS site obtains the SSL certificate, generally uses the certify this automation tool to be convenient many.Another common way is to use tools Letsencrypt-win-simpleDownload the latest version of Letsencrypt-win-simple:Links not found: https://github.com/Lone-Coder/letsencrypt-win-simple/releasesThe latest version is: L
that's how Linux should learn 2018-05-11 .Lab Environment: CentOS Linux release 7.3.1611 (Core)Kernel version: Linux version 3.10.0-514.el7.x86_64Nginx version: Nginx-1.13.0Let's encrypt is a free, automated, open certification authority. Sponsored by many companies and organizations such as Mozilla, Cisco, Chrome, Facebook, and Akamai, the security is stable and reliable. Specific information can go to Letsencrypt official website for more details.T
. So if for the present Situation. I made a map to map this path to one of the Nginx Directories. Location ~/.well-known {access_log Logs/eapa_access.log main;Root html;Index index.html index.htm; }4.2. generate the certificate and use The./certbot-auto certonly command to generate the Certificate. Parameter description:-w specifies Webroot (that is, the root directory configured in 4.1), and-d specifies the domain name, which can be multiple. -w-d is a paired occurrence, and multiple certific
Nginx uses let's encrypt https certificate and enables http2 usage recordsLet's encrypt usage record
Certbot installation instructions
The document on certbot's official website about centos6 and 7 found a python problem during the installation process. python 2.6 installed in centos6 fails to run with python 2.6; python 2.7 is provided in centos7. If pip is not installed, you need to install it manually. After pip is installed, certbot on 6 and 7 can run normally.Download python
Https://www.
domain. key-subj "/CN = yoursite.com"> domain. csr
If you have multiple domain names, such as www.xxx.com and xxx.com, run the following statement:1 openssl req-new-sha256-key domain. key-subj "/"-reqexts SAN-config
My wiki. ioin. in is a Single Domain Name Certificate, So execute the following statement:
Let's Encrypt has a variety of methods to verify whether you are the owner of the domain name, And the acme-tiny Tool uses the simplest method, that is, http File verification.Simply put, a
First install omnibus Gitlab, refer tohttps://about.gitlab.com/downloads/Refer to the following two articles in conjunction with configuration:https://certbot.eff.org/#centosrhel7-nginxhttps://webnugget.de/setting-up-gitlab-with-free-ssl-certs-from-lets-encrypt-on-ubuntu-14-04/1. Install the Certbot.$ sudo yum install epel-release$ sudo yum install Certbot2. Configure Gitlab:$ vi/etc/gitab/gitlab.rbChange the following configuration items:external_url "http://gityu.com/"nginx[‘redirect_http_to_h
the topic with a user name and password test .mosquitto_sub -h localhost -t test -u "sammy" -P "password"The connection will be established and wait for the message to arrive. Keep this command line open because we will periodically send a test message to it.Try to publish the message again using the user name and password:mosquitto_pub -h localhost -t "test" -m "hello world" -u "sammy" -P "password"This message will be sent successfully as in step 1. We succeeded in adding password protection
In recent months, I believe that all the big domain/host forum students should find a lot in GoDaddy's domain name stolen complaint paste, the reason for the theft is mostly delayed phishing e-mails in the fake GoDaddy official website, thus being hacked to get the account password. And Namecheap also issued a security warning article the day before yesterday to remind users to change the password. The article mentions that in recent days, NAMECHEAP's
This article is reproduced from: https://typecodes.com/web/lnmppositivessl.html
The SSL certificate installation is not related to the blog program (whether it is WordPress or Typecho, etc.), but only to the type of server (such as Nginx, Apache, or IIS).
----------Instructions----------
system: Aliyun CentOS 6.5
Environment: LNMP (just configure Nginx server on line)
operation tool: SECURECRT 7.0
Blog Program: Typecho 14.10
SSL certificate pr
installed650) this.width=650; "src=" Https://s2.51cto.com/wyfs02/M00/9A/D1/wKiom1lbC1zha2-9AACOj719T3A383.jpg "title=" Screenshot3940.jpg "alt=" Wkiom1lbc1zha2-9aacoj719t3a383.jpg "/>installation process, you need to manually confirm whether the installation, enter Y confirmation. Also need to accept the official agreement, enter a return.Note: The firewall needs to open HTTPS port when applying# firewall-cmd--permanent--zone=public--add-service=https# Firewall-cmd--reloadAfter successful appli
1. Get let ' s Encryptclone https://github.com/letsencrypt/letsencryptcd letsencryptchmod +x letsencrypt-auto2. Execute Installation Certificate-a webroot --webroot-path=/home/www/demo.com --email [emailprotected] -d -d www.demo.comReplace directories, mailboxes, and domain names with your ownIt means the installation certificate is successful!and can see the directory of the certificate:/etc/
the completion of this directory will be emptied3. Obtaining a CertificateIf the above steps are normal, the shell script will show the following information:and chain have been saved at/etc/letsencrypt/live/网站域名/fullchain.pem...4. Generate DhparamsUsing the OpenSSL tool to generate dhparamsopenssl dhparam -out /etc/ssl/certs/dhparams.pem 20485. Configure NginxOpen the Nginx server configuration file by adding the following settings:listen 443ssl on;
control.4, I use is the webroot way, oneself constructs an nginx server, configures the Location field, as follows:(1), using RPM installation Nginxsudo yum-y install Nginx(2), edit nginx configuration file, modify the following parameters:In the HTTP segment scope(3), after modifying the Nginx configuration file, use the NGINX-T command, test the configuration file syntax:sudo nginx-t #返回OK indicates a successful configuration file modification(4), start the Nginx servicesudo nginxnetstat-anpl
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.