centos 下安装 Let’s Encrypt 永久免费 SSL 证书

功能

1. https证书，免费版，每三个月续签一次，能够用过脚本自动续签

安装

1. ssh登陆到域名配置所在的主机（nginx，apache等）
2. 安装git yum -y install git
3. 输入 git clone https://github.com/letsencrypt/letsencrypt
4. cd letsencrypt
5. chmod +x letsencrypt-auto
6. 安装证书:
   • ./letsencrypt-auto certonly --email 86533019@qq.com -d jenkins.jetbrains.org.cn
   • d参数后面对应的是域名，在执行的过程当中，我遭遇了下面的报错：
     `Total size: 44 M
     Downloading Packages:
     Running rpmcheckdebug
     ERROR with rpmcheckdebug vs depsolve:
     libgdbm.so.2()(64bit) is needed by python-libs-2.6.6-66.el68.x8664
     ** Found 7 pre-existing rpmdb problem(s), 'yum check' output follows:
     4:perl-5.10.1-141.el67.1.x8664 has missing requires of libgdbm.so.2()(64bit)
     4:perl-devel-5.10.1-141.el67.1.x8664 has missing requires of gdbm-devel
     polkit-0.96-5.el64.x8664 has missing requires of libeggdbus-1.so.0()(64bit)
     2:postfix-2.6.6-6.el65.x8664 has missing requires of libmysqlclient.so.16()(64bit)
     2:postfix-2.6.6-6.el65.x8664 has missing requires of libmysqlclient.so. 16(libmysqlclient_16)(64bit)
     2:postfix-2.6.6-6.el65.x8664 has missing requires of mysql-libs
     python-libs-2.6.6-52.el6.x86_64 has missing requires of libgdbm.so.2()(64bit)
     Your transaction was saved, rerun it with: yum load-transactiontmp/.yumsavetx-2017-04-07-22-1798AqLE.yumtx
     Could not install OS dependencies. Aborting bootstrap!`
   • centos 6 须要安装 libgdbm.so.2：
     • wget http://mirror.centos.org/centos/6/os/x86_64/Packages/gdbm-1.8.0-39.el6.x86_64.rpm
       • yum localinstall gdbm-1.8.0-39.el6.x86_64.rpm

* 完成后，从新执行上面的命令行：
![](https://user-gold-cdn.xitu.io/2019/10/5/16d9a32b288e99d4?w=1250&h=560&f=png&s=491855)
7. 即为安装完成
## 配置
    1. web服务器，为这里是nginx，在nginx中添加代码：复制代码

listen 443 ssl;
            ssl on;
            ssl_certificate /etc/letsencrypt/live/XXX.com/fullchain.pem;
            ssl_certificate_key /etc/letsencrypt/live/XXX.com/privkey.pem;
            ssl_protocols TLSv1 TLSv1.1 TLSv1.2; 
    2. 重启nginx，就能够放了https了
##续约
    1. linux中执行 crontab -e
    2. 添加代码复制代码

`06 06 * * * /www/web/test/lets/certbot-master/certbot-auto renew   --force-renewal   --pre-hook "/etc/init.d/nginx stop" --post-hook "/etc/init.d/nginx start" >> /www/web_logs/letsencry.log 2>&1` 
复制代码

如但愿了解更多，请关注微信公众号