给网站加上SSL证书

Let’s Encrypt是一家免费的ssl证书提供商，并且这家使用方便简单。

服务器系统：debian weg服务器：nginx

cerbot提供一键生成ssl证书文件

wget https://dl.eff.org/certbot-auto chmod a+x ./certbot-auto ./certbot-auto -n

生成证书，-w是网站目录，-d是域名，多个域名可以跟多个-d，按下面的例子 certbot-auto certonly --webroot -w /var/www/example -d example.com -d www.example.com -w /var/www/thing -d thing.is -d m.thing.is

生成的证书在/etc/letsencrypt/live/example.com目录里面，这样证书就生成成功了

下面配置nginx server { listen 443 ssl; server_name aaa.com; root /var/www/aaa_com; index index.html index.htm index.php; include /etc/nginx/conf.d/discuzx; include /etc/nginx/fastcgi_php; access_log /var/log/nginx/yuln.com.access.log; ssl_certificate /etc/letsencrypt/live/aaa.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/aaa.com/privkey.pem; } 最后两行就是证书存放的位置 强制非http跳转到https server { listen 80; server_name www.aaa.com aaa.com; rewrite ^(.*) https://aaa.com$1 permanent; }