Added documentation for acme.sh

This commit is contained in:
ckykenken 2019-01-16 13:38:16 +08:00 committed by Michael (Parker) Parker
parent 6f7d862510
commit 19955f55b7

View File

@ -1,6 +1,8 @@
# Creating SSL Certificates # Creating SSL Certificates
This tutorial briefly covers creating new SSL certificates for your panel and daemon using LetsEncrypt™. To This tutorial briefly covers creating new SSL certificates for your panel and daemon using LetsEncrypt™.
begin, we will be installing certbot, a simple script that will automatically renew our certificates and allow much
## Method 1: Using Certbot
To begin, we will be installing certbot, a simple script that will automatically renew our certificates and allow much
cleaner creation of them. The command below is for Ubuntu distributions, but you can always check [Certbot's official cleaner creation of them. The command below is for Ubuntu distributions, but you can always check [Certbot's official
site](https://certbot.eff.org/) for installation instructions. site](https://certbot.eff.org/) for installation instructions.
@ -10,7 +12,7 @@ sudo apt update
sudo apt install certbot sudo apt install certbot
``` ```
## Creating a Certificate ### Creating a Certificate
After installing certbot, we need to then generate a certificate. There are a couple ways to do that, but the After installing certbot, we need to then generate a certificate. There are a couple ways to do that, but the
easiest is to have letsencrypt spin-up a temporary web-server to do this. In order for this to work, you will easiest is to have letsencrypt spin-up a temporary web-server to do this. In order for this to work, you will
first need to stop NGINX or Apache. first need to stop NGINX or Apache.
@ -26,10 +28,10 @@ that you've already configured the webservers to use SSL).
certbot certonly -d example.com certbot certonly -d example.com
``` ```
## Auto Renewal ### Auto Renewal
You'll also probably want to configure automatic renewal by adding the command below to a cronjob that runs daily. You'll also probably want to configure automatic renewal by adding the command below to a cronjob that runs daily.
You can add the command below to that crontab. For advanced users, we suggest installing and using [acme.sh](https://acme.sh) You can add the command below to that crontab. For advanced users, we suggest installing and using [acme.sh](https://acme.sh)
which provides more options, and is much more powerful than certbot. which provides more options (see below), and is much more powerful than certbot.
``` text ``` text
certbot renew certbot renew