共计 1499 个字符,预计需要花费 4 分钟才能阅读完成。
阅读 https://www1.hi.cn/docs/best-practice/secure-aapanel-https
总结起来就是一段 SSH 命令:
- email=”[email protected]” # 记得修改成你的邮箱
- ip=$(curl -s -4 ip.sb)
- webroot=$(cat $((grep -r ” “$ip /www/server/panel/vhost/nginx/ || grep -r “default_server” /www/server/panel/vhost/nginx/) | grep server_name | awk ‘{print $1}’ | cut -d ‘:’ -f1) | egrep ‘root ‘ | awk ‘{print $2}’ | cut -d ‘;’ -f1)
-
- if [-z “$webroot”]; then
- echo “ 请先创建 1 个 IP 站点或者设置 1 个默认站点!”
- exit 1
- fi
-
- export LE_WORKING_DIR=/root/.acme.sh
-
- /bin/cp -rf /www/server/panel/ssl/privateKey.pem /www/server/panel/ssl/privateKey.pem.bak
- /bin/cp -rf /www/server/panel/ssl/certificate.pem /www/server/panel/ssl/certificate.pem.bak
- /bin/cp -rf /www/server/panel/vhost/cert/$ip/privkey.pem /www/server/panel/vhost/cert/$ip/privkey.pem.bak
- /bin/cp -rf /www/server/panel/vhost/cert/$ip/fullchain.pem /www/server/panel/vhost/cert/$ip/fullchain.pem.bak
-
- /root/.acme.sh/acme.sh –register-account
- –email $email
- –server https://acme.hi.cn/directory &&
-
- /root/.acme.sh/acme.sh –issue
- -d $ip –webroot $webroot
- –server https://acme.hi.cn/directory
- –force &&
-
- echo “ 复制宝塔面板证书 ” &&
- /bin/cp -rf /root/.acme.sh/$ip/$ip.key /www/server/panel/ssl/privateKey.pem &&
- /bin/cp -rf /root/.acme.sh/$ip/fullchain.cer /www/server/panel/ssl/certificate.pem &&
-
- echo “True” > /www/server/panel/data/ssl.pl &&
-
- bt reload &&
-
- echo “ 安装站点证书(如有)” &&
- /bin/cp -rf /root/.acme.sh/$ip/$ip.key /www/server/panel/vhost/cert/$ip/privkey.pem &&
- /bin/cp -rf /root/.acme.sh/$ip/fullchain.cer /www/server/panel/vhost/cert/$ip/fullchain.pem &&
-
- bt reload &&
-
- echo “ 成功续期 ”
复制代码
|
网友回复:
注册 : ECC 通配符 10 块一年是吧
帝玺 SSL: 沪 ICP 备 20022337 号 -17
iks: 前排占个坑再说,马克