<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0">
<channel>
<title><![CDATA[阿Tim日志]]></title> 
<link>https://atim.cn/index.php</link> 
<description><![CDATA[专业的php开发者.开发团队的带队人]]></description> 
<language>zh-cn</language> 
<copyright><![CDATA[阿Tim日志]]></copyright>
<item>
<link>https://atim.cn/acme-dns-create-cert/</link>
<title><![CDATA[使用dns申请Let’s Encrypt的证书]]></title> 
<author>bkkkd &lt;partybase@gmail.com&gt;</author>
<category><![CDATA[Web 技术 ]]></category>
<pubDate>Mon, 26 Apr 2021 14:34:54 +0000</pubDate> 
<guid>https://atim.cn/acme-dns-create-cert/</guid> 
<description>
<![CDATA[ 
	一般情况下使用certbot来申请证书,但使用动态域名的时候,不能使用80和443端口.所以一直没有申请下来.<br/>只能使用aliyun或者腾讯云的证书来申请.<br/>但这样每年处理一下.而且时间长了.也不一定记得去更换.就算记得更新的过程也是挺麻烦的.<br/><br/>最好能像阿里那样使用dns来验证域名这样就可以一劳永逸了.<br/><br/>acme.sh可以使用创建泛域名的证书<br/><br/><div class="code"><br/>curl https://get.acme.sh &#124; sh -s email=tim@atim.cn<br/>source ~/.bashrc<br/>acme.sh --issue --dns -d *.ddns.atim.cn --yes-I-know-dns-manual-mode-enough-go-ahead-please<br/></div><br/><br/>到这里出会报错,提示找不到dns定义的txt值.<br/><div class="code"><br/>&#91;Mon 26 Apr 2021 10:29:11 PM CST&#93; Using CA: https://acme-v02.api.letsencrypt.org/directory<br/>&#91;Mon 26 Apr 2021 10:29:11 PM CST&#93; Creating domain key<br/>&#91;Mon 26 Apr 2021 10:29:11 PM CST&#93; The domain key is here: /root/.acme.sh/a.alpicool.com/ddns.atim.cnkey<br/>&#91;Mon 26 Apr 2021 10:29:11 PM CST&#93; Single domain=&#039;ddns.atim.cn&#039;<br/>&#91;Mon 26 Apr 2021 10:29:11 PM CST&#93; Getting domain auth token for each domain<br/>&#91;Mon 26 Apr 2021 10:29:14 PM CST&#93; Getting webroot for domain=&#039;ddns.atim.cn&#039;<br/>&#91;Mon 26 Apr 2021 10:29:14 PM CST&#93; Add the following TXT record:<br/>&#91;Mon 26 Apr 2021 10:29:14 PM CST&#93; Domain: &#039;_acme-challenge.ddns.atim.cn&#039;<br/>&#91;Mon 26 Apr 2021 10:29:14 PM CST&#93; TXT value: &#039;xxxxxxxxxxx&#039;<br/>&#91;Mon 26 Apr 2021 10:29:14 PM CST&#93; Please be aware that you prepend _acme-challenge. before your domain<br/>&#91;Mon 26 Apr 2021 10:29:14 PM CST&#93; so the resulting subdomain will be: _acme-challenge.ddns.atim.cn<br/>&#91;Mon 26 Apr 2021 10:29:14 PM CST&#93; Please add the TXT records to the domains, and re-run with --renew.<br/>&#91;Mon 26 Apr 2021 10:29:14 PM CST&#93; Please add &#039;--debug&#039; or &#039;--log&#039; to check more details.<br/>&#91;Mon 26 Apr 2021 10:29:14 PM CST&#93; See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh<br/><br/></div><br/>然后手动到域名里添加域名记录:<br/>域名为:<span style="color: #DC143C;">_acme-challenge.ddns</span>.atim.cn<br/>值为:<span style="color: #DC143C;">xxxxxxxxxxx</span><br/><br/>添加完成后重新验证<br/><div class="code"><br/>acme.sh --renew --dns -d *.ddns.atim.cn<br/></div><br/>然后把对nginx或者apache里配置证书.就可以正常使用,可以参考<<a href="https://atim.cn/certbot-case/" target="_blank">使用certbot自动生成证书</a>><br/>
]]>
</description>
</item><item>
<link>https://atim.cn/acme-dns-create-cert/#blogcomment</link>
<title><![CDATA[[评论] 使用dns申请Let’s Encrypt的证书]]></title> 
<author> &lt;user@domain.com&gt;</author>
<category><![CDATA[评论]]></category>
<pubDate>Thu, 01 Jan 1970 00:00:00 +0000</pubDate> 
<guid>https://atim.cn/acme-dns-create-cert/#blogcomment</guid> 
<description>
<![CDATA[ 
	
]]>
</description>
</item>
</channel>
</rss>