使用Let's encrypt保护你的网络通信

webroot:
/home/wwwroot/baidu.com/

origin config:
ssl_certificate /home/ssl/www.baidu.com.crt;
ssl_certificate_key /home/ssl/www.baidu.com_nopass.key;

wget https://dl.eff.org/certbot-auto chmod a+x certbot-auto
./certbot-auto certonly --webroot -w /home/wwwroot/baidu.com/ -d baidu.com -d www.baidu.com
ls /etc/letsencrypt/live/baidu.com/
|-cert.pem
|-chain.pem
|-fullchain.pem
|-privkey.pem

vi /usr/local/nginx/conf/nginx.conf

ssl_certificate /etc/letsencrypt/live/baidu.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/baidu.com/privkey.pem;

/usr/local/nginx/sbin/nginx -s reload

crontab -e
0 3 * * * /root/letsencrypt/certbot-auto renew >> /var/log/letsencrypt-renew.log
5 3 * * * /usr/local/nginx/sbin/nginx -s reload