碎碎念

certbot申请证书比较无脑，不过并不全面，局限性还是比较大的。后面写一篇acme的博客。

使用

Standalone

1

certbot certonly --standalone --agree-tos -m yourmail -n -d yourdoamin

• standalone
  • Use standalone mode to obtain a certificate if you don’t want to use (or don’t currently have) existing server software. The standalone plugin does not rely on any other server software running on the machine where you obtain the certificate.
• --agree-tos
  • Agree to the ACME server’s Subscriber Agreement
• -m EMAIL
  • Email address for important account notifications
• -n
  • Run non-interactively
• -d DOMAINS
  • Comma-separated list of domains to obtain a certificate for

Nginx

1

apt -y install python3-certbot-nginx

1

certbot --nginx

• --nginx
  • The Nginx plugin should work for most configurations. We recommend backing up Nginx configurations before using it (though you can also revert changes to configurations with certbot --nginx rollback). You can use it by providing the --nginx flag on the commandline.

引用

https://eff-certbot.readthedocs.io/en/stable/index.html