如何部署Let's Encrypt

andyma

军哥，

  您好！请教一下如何部署Let's Encrypt的详细步骤，包括如何续签？

谢谢！

licess

早就发过N久了
https://www.vpser.net/build/letsencrypt-certbot.html
https://www.vpser.net/build/letsencrypt-free-ssl.html

futurejunjie

军哥，我网站部署好https后用/root/certbot-auto renew 这个命令怎么无法续期啊？


[root@···~]# /root/certbot-auto renew
Upgrading certbot-auto 0.8.1 to 0.9.3...
Replacing certbot-auto...
Creating virtual environment...
Installing Python packages...
Installation succeeded.
/root/.local/share/letsencrypt/lib/python2.6/site-packages/cryptography/__init__.py:26: DeprecationWarning: Python 2.6 is no longer supported by the Python core team, please upgrade your Python. A future version of cryptography will drop support for Python 2.6
  DeprecationWarning
Saving debug log to /var/log/letsencrypt/letsencrypt.log

-------------------------------------------------------------------------------
Processing /etc/letsencrypt/renewal/www.xxx.com.conf
-------------------------------------------------------------------------------
Cert is due for renewal, auto-renewing...
Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
Renewing an existing certificate
Attempting to renew cert from /etc/letsencrypt/renewal/www.xxx.com.conf produced an unexpected error: urn:acme:error:serverInternal :: The server experienced an internal error :: Error creating new authz. Skipping.

All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/www.xxx.com/fullchain.pem (failure)
1 renew failure(s), 0 parse failure(s)

licess

没遇到过不大清楚

andyma

军哥，
  刚开始学习，还不是很懂，和你确认一下啊：

1.安装：
wget https://dl.eff.org/certbot-auto
chmod a+x ./certbot-auto
./certbot-auto --help all
=》这个是在其官网查到的，是否直接这样可以了？

2.生成证书的操作是怎么样的呢？

3.续签和设置自动续签的操作是？

请军哥明示，谢谢！！！

licess

最开始的./certbot-auto 只是用来安装依赖包的后面参数无所谓，也可以直接跳到生成证书的步骤

2楼都已经发过教程了