Renew SSL certificate with acme.sh

Feb 3, 2020#服务器维护60

AI Translation

This post is translated from Chinese into English through AI.View Original

AI-generated summary

Renew SSL certificates using acme.sh, install socat, issue certificates for multiple domains, and configure nginx to use the same certificate for all domains. Detailed instructions can be found [here](https://github.com/acmesh-official/acme.sh/wiki/%E8%AF%B4%E6%98%8E).

For a detailed explanation of acme.sh, you can refer to [here][1].
Due to the messy configuration of my nginx, I chose to turn off nginx and let acme.sh act as the server for verification.

First, you need to install socat.
apt install socat

Then
acme.sh --issue -d zhufn.fun --standalone

The generated certificate will automatically be placed in the nginx folder, quite magical.
![ ][2]
Later, I found out that one certificate can correspond to multiple domain names.
So
acme.sh --issue -d zhufn.fun -d rss.zhufn.fun -d tb.zhufn.fun -d i.zhufn.fun --standalone

After adjusting the paths in nginx, you can now use a single certificate.
[1]: https://github.com/acmesh-official/acme.sh/wiki/Explanation
[2]: https://s2.ax1x.com/2020/02/03/1aCQkF.png