ACME

Github

GitHub - acmesh-official/acme.sh: A pure Unix shell script ACME client for SSL / TLS certificate automationGitHub

说明GitHub

acme.sh --set-default-ca --server google

# regenerate hmac and key
gcloud publicca external-account-keys create
acme.sh --server https://dv.acme-v02.api.pki.goog/directory --register-account  --accountemail  --eab-kid  --eab-hmac-key 

bash acme.sh --issue --dns -d lado.online --yes-I-know-dns-manual-mode-enough-go-ahead-please
bash acme.sh --renew -d lado.online --yes-I-know-dns-manual-mode-enough-go-ahead-please

bash acme.sh --issue --dns -d ddns.lado.online --yes-I-know-dns-manual-mode-enough-go-ahead-please
bash acme.sh --renew -d ddns.lado.online --yes-I-know-dns-manual-mode-enough-go-ahead-please

bash /root/.acme.sh/acme.sh --issue --dns dns_ali -d lado.online
bash /root/.acme.sh/acme.sh --issue --dns dns_ali -d ddns.lado.online

bash /root/.acme.sh/acme.sh --renew -d lado.online --force
bash /root/.acme.sh/acme.sh --renew -d ddns.lado.online --force

bash /root/.acme.sh/acme.sh --install-cert -d lado.online --cert-file /etc/apache2/cert/lado.online.pem --key-file /etc/apache2/cert/lado.online.key --fullchain-file /etc/apache2/cert/fullchain.pem --reloadcmd "service apache2 force-reload"


bash /root/.acme.sh/acme.sh --install-cert -d lado.online --cert-file /etc/apache2/cert/lado.online_ecc/lado.online.pem --key-file /etc/apache2/cert/lado.online_ecc/lado.online.key --fullchain-file /etc/apache2/cert/lado.online_ecc/fullchain.pem
bash /root/.acme.sh/acme.sh --install-cert -d ddns.lado.online --cert-file /etc/apache2/cert/ddns.lado.online_ecc/ddns.lado.online.cer --key-file /etc/apache2/cert/ddns.lado.online_ecc/ddns.lado.online.key --fullchain-file /etc/apache2/cert/ddns.lado.online_ecc/fullchain.cer --reloadcmd "service apache2 force-reload"

Google Cert

使用 ACME.SH 申请 Google CA SSL 证书 - V2EXV2EX

使用 acme 申请 Google CA SSL 证书 - 小兔博客32mb.net