{"id":169,"date":"2026-03-28T07:44:25","date_gmt":"2026-03-27T23:44:25","guid":{"rendered":"https:\/\/blog.aifa.ink\/?p=169"},"modified":"2026-04-06T22:34:27","modified_gmt":"2026-04-06T14:34:27","slug":"%e5%ae%9d%e5%a1%94%e9%9d%a2%e6%9d%bf%e4%b8%8assl%e8%af%81%e4%b9%a6%e8%87%aa%e5%8a%a8%e7%bb%ad%e7%ad%be%e6%95%99%e7%a8%8b-%e9%80%9a%e8%bf%87acme-sh%e5%ae%9e%e7%8e%b0","status":"publish","type":"post","link":"https:\/\/blog.aifa.ink\/index.php\/2026\/03\/28\/%e5%ae%9d%e5%a1%94%e9%9d%a2%e6%9d%bf%e4%b8%8assl%e8%af%81%e4%b9%a6%e8%87%aa%e5%8a%a8%e7%bb%ad%e7%ad%be%e6%95%99%e7%a8%8b-%e9%80%9a%e8%bf%87acme-sh%e5%ae%9e%e7%8e%b0\/","title":{"rendered":"\u5b9d\u5854\u9762\u677f\u4e0assl\u8bc1\u4e66\u81ea\u52a8\u7eed\u7b7e\u6559\u7a0b–\u901a\u8fc7acme.sh\u5b9e\u73b0"},"content":{"rendered":"

1\u3001\u5b89\u88c5acme.sh<\/h1>\n

\u5728\u7ec8\u7aef\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff0c\u5176\u4e2dyour@example.com\u66ff\u6362\u4e3a\u81ea\u5df1\u7684\u90ae\u7bb1\uff1a<\/p>\n

curl https:\/\/get.acme.sh | sh -s email=your@example.com<\/pre>\n
2\u3001\u7b7e\u53d1\u8bc1\u4e66<\/h1>\n
\u547d\u4ee4\uff1a<\/p>\n
acme.sh --issue -d mydomain.com --webroot \/www\/wwwroot\/mydomain.com\/<\/pre>\n
\u5176\u4e2dmydomain.com\u66ff\u6362\u4e3a\u9700\u8981\u7b7e\u53d1\u8bc1\u4e66\u7684\u57df\u540d\uff0c\u800c\u2018\/www\/wwwroot\/mydomain.com\/\u2019\u66ff\u6362\u4e3a\u5bf9\u5e94\u7ad9\u70b9\u6240\u5728\u76ee\u5f55\u3002\u7b7e\u53d1\u6210\u529f\u540e\uff0c\u6548\u679c\u5927\u81f4\u5982\u4e0b\uff1a<\/p>\n
\"\"<\/p>\n
\u82e5\u7b7e\u53d1\u5931\u8d25\uff0c\u53ef\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\u5c06ssl\u63d0\u4f9b\u5546\u4fee\u6539\u4e3aLet's Encrypt<\/code>\uff1a<\/p>\n
acme.sh --set-default-ca --server letsencrypt<\/pre>\n
3\u3001\u590d\u5236\u65b0\u7684\u8bc1\u4e66\u66ff\u6362\u539f\u6709\u7684ssl\u8bc1\u4e66<\/h1>\n
acme.sh --install-cert -d mydomin.com \\\r\n--key-file \/www\/server\/panel\/vhost\/cert\/mydomin.com\/privkey.pem \\\r\n--fullchain-file \/www\/server\/panel\/vhost\/cert\/mydomin.com\/fullchain.pem \\\r\n--reloadcmd \"service nginx reload\"<\/pre>\n
\u5176\u4e2d\uff0c\u2018mydomin.com\u2019\u4e3a\u8bc1\u4e66\u5bf9\u5e94\u7684\u57df\u540d\uff0ckey-file\u548cfullchain-file\u5728\u7f51\u7ad9\u7684\u5982\u4e0b\u4f4d\u7f6e\u83b7\u53d6\u3002key-file\u5bf9\u5e94\u7684\u662f\u2018 ssl_certificate_key\u2019\uff0cfullchain-file\u5bf9\u5e94\u7684\u662f\u2018ssl_certificate\u2019\u3002<\/p>\n
\"\"<\/a><\/p>\n
4\u3001\u53cd\u5411\u4ee3\u7406\u7684\u7f51\u7ad9\u7eed\u7b7e\u8bbe\u7f6e\uff08\u53ef\u9009\uff09<\/h1>\n
\u5982\u679c\u7f51\u7ad9\u8bbe\u7f6e\u4e86\u53cd\u5411\u4ee3\u7406\uff0c\u5c31\u65e0\u6cd5\u76f4\u63a5\u4e00\u952e\u7eed\u7b7e\uff0c\u53ef\u4ee5\u5728\u5b9d\u5854\u9762\u677f\u7ad9\u70b9\u8bbe\u7f6e\uff08\u5982\u4e0b\u56fe\u4f4d\u7f6e\uff09\u6dfb\u52a0\u5982\u4e0b\u4ee3\u7801\uff0c\u5176\u4e2dip\u66ff\u6362\u4e3a\u81ea\u5df1\u7684\u771f\u5b9eip\u5373\u53ef\uff1a<\/p>\n
#\u7ed5\u5f00\u53cd\u5411\u4ee3\u7406\u7eed\u7b7e\u8bc1\u4e66\r\nlocation \/.well-known\/acme-challenge\/ {\r\n    allow all;\r\n    proxy_pass http:\/\/your-ip;\r\n    proxy_set_header Host $host;  # \u8f6c\u53d1\u4e3b\u673a\u5934\r\n}<\/pre>\n
 <\/p>\n
\"\"<\/a><\/p>\n
5\u3001\u81ea\u52a8\u7eed\u7b7essl<\/h1>\n
5.1\u64cd\u4f5c<\/h2>\n
ssl\u8bc1\u4e66\u6bcf\u969430\u5929\u4f1a\u81ea\u52a8\u7eed\u7b7e\uff0c\u4f46\u662f\u5e76\u4e0d\u4f1a\u81ea\u52a8\u590d\u5236\u8bc1\u4e66\u5230nginx\u3002\u8fd9\u6837\u5c5e\u4e8e\u81ea\u52a8\u4e86\u4e2a\u5bc2\u5bde\uff0c\u4e3a\u4e86\u5b9e\u73b0\u771f\u6b63\u7684\u81ea\u52a8\uff0c\u53ef\u4ee5\u6dfb\u52a0\u4e00\u4e2a\u8ba1\u5212\u4efb\u52a1\uff0c\u6bcf\u5929\u66f4\u65b0\u8bc1\u4e66\u3002<\/p>\n
\u64cd\u4f5c\uff1a\u5230\u5b9d\u5854\u9762\u677f–\u8ba1\u5212\u4efb\u52a1\u4e2d\uff0c\u6dfb\u52a0\u4e00\u4e2ashell\u811a\u672c\uff0c\u6bcf\u5929\u6267\u884c\u5373\u53ef\u3002\u811a\u672c\u5982\u4e0b<\/p>\n
#!\/bin\/bash\r\n# 1. \u5b9a\u4e49\u7edd\u5bf9\u8def\u5f84\r\nACME_BIN=\"\/root\/.acme.sh\/acme.sh\"\r\nCONFIG_HOME=\"\/root\/.acme.sh\"\r\n# 2. \u63d0\u53d6\u5e76\u6e05\u6d17\u57df\u540d\u5217\u8868,\u903b\u8f91\uff1a\u83b7\u53d6\u76ee\u5f55\u540d -> \u8fc7\u6ee4\u6389\u7cfb\u7edf\u76ee\u5f55 -> \u53bb\u6389 _ecc \u540e\u7f00 -> \u552f\u4e00\u5316\u5904\u7406\r\ndomains=$(ls -d $CONFIG_HOME\/*\/ | xargs -n 1 basename | grep -vE \"^(\\.|ca|http\\.header|deploy|dnsapi|notify)\" | sed 's\/_ecc$\/\/' | sort -u)\r\n# \u8f93\u51fa\u83b7\u53d6\u5230\u7684\u57df\u540d\uff08\u8c03\u8bd5\u7528\uff09\r\necho \"$domains\"\r\n# 3. \u5f00\u59cb\u5faa\u73af\u5904\u7406\r\nfor domain in $domains; do\r\necho \"\ud83d\ude80 \u6b63\u5728\u5904\u7406: $domain\"\r\nTARGET_DIR=\"\/www\/server\/panel\/vhost\/cert\/$domain\"\r\nmkdir -p \"$TARGET_DIR\"\r\n$ACME_BIN --install-cert -d \"$domain\" \\\r\n--home \"$CONFIG_HOME\" \\\r\n--key-file \"$TARGET_DIR\/privkey.pem\" \\\r\n--fullchain-file \"$TARGET_DIR\/fullchain.pem\"\r\nif [ $? -eq 0 ]; then\r\necho \"\u2705 \u57df\u540d $domain \u8bc1\u4e66\u5bfc\u51fa\u6210\u529f\"\r\nelse\r\necho \"\u274c \u57df\u540d $domain \u8bc1\u4e66\u5bfc\u51fa\u5931\u8d25\"\r\nfi\r\ndone\r\necho \"\ud83d\udce2 \u6240\u6709\u64cd\u4f5c\u5b8c\u6210\uff0c\u6b63\u5728\u91cd\u542f Nginx...\"\r\nservice nginx reload<\/pre>\n
\"\"<\/a><\/p>\n
5.2\u6ce8\u610f<\/h2>\n
\u8fd9\u79cd\u7eed\u7b7e\u65b9\u6cd5\u4ec5\u9002\u7528\u4e8e\u2018\u7ad9\u70b9\u540d\u79f0\u2019\u548c\u2018\u57df\u540d\u2019\u76f8\u540c\u7684ssl\u8bc1\u4e66\u7533\u8bf7\uff0c\u5982\u679c\u4e8c\u8005\u4e0d\u540c\uff0c\u53ef\u4ee5\u8003\u8651\u901a\u8fc7\u65b0\u5efa\u7ad9\u70b9\u5b9e\u73b0\u4e00\u81f4<\/p>\n
6\u3001\u5e38\u7528\u547d\u4ee4<\/h1>\n
6.1 \u67e5\u770b\u5f53\u524d\u6240\u6709\u8bc1\u4e66\u5217\u8868<\/h2>\n
acme.sh --list<\/pre>\n
6.2 \u624b\u52a8\u7eed\u7b7e\u8bc1\u4e66(\u4ec5\u7eed\u7b7e\u672a\u590d\u5236)<\/h2>\n
acme.sh --renew -d mydoin.com --force<\/pre>\n
 <\/p>\n
 <\/p>\n
 <\/p>\n","protected":false},"excerpt":{"rendered":"
1\u3001\u5b89\u88c5acme.sh \u5728\u7ec8\u7aef\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff0c\u5176\u4e2dyour@example.com\u66ff\u6362\u4e3a\u81ea\u5df1\u7684\u90ae\u7bb1\uff1a curl  […]<\/p>\n","protected":false},"author":1,"featured_media":179,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[23],"tags":[50,46,49,48],"class_list":["post-169","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-23","tag-acme-sh","tag-ssl","tag-49","tag-48"],"_links":{"self":[{"href":"https:\/\/blog.aifa.ink\/index.php\/wp-json\/wp\/v2\/posts\/169","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.aifa.ink\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.aifa.ink\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.aifa.ink\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.aifa.ink\/index.php\/wp-json\/wp\/v2\/comments?post=169"}],"version-history":[{"count":10,"href":"https:\/\/blog.aifa.ink\/index.php\/wp-json\/wp\/v2\/posts\/169\/revisions"}],"predecessor-version":[{"id":187,"href":"https:\/\/blog.aifa.ink\/index.php\/wp-json\/wp\/v2\/posts\/169\/revisions\/187"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.aifa.ink\/index.php\/wp-json\/wp\/v2\/media\/179"}],"wp:attachment":[{"href":"https:\/\/blog.aifa.ink\/index.php\/wp-json\/wp\/v2\/media?parent=169"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.aifa.ink\/index.php\/wp-json\/wp\/v2\/categories?post=169"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.aifa.ink\/index.php\/wp-json\/wp\/v2\/tags?post=169"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}