Springboot+ubuntu+Let‘s Encrypt配置https

川长思鸟来 2024-03-26 09:45 45阅读 0赞

## 1 申请密钥 ##

sudo certbot certonly -d "域名" -d "*.域名" --manual --preferred-challenges dns --server https://acme-v02.api.letsencrypt.org/directory

范例

sudo certbot certonly -d "texttool.fun" -d "*.texttool.fun" --manual --preferred-challenges dns --server https://acme-v02.api.letsencrypt.org/directory

注意这里需要配置解析的txt，以阿里云为例

![a874eb5be71e45e781b07f1fba60d9dc.png][]

![3b1579a2726d48bb92cd9ad499d52054.png][]

## 2 生成key ##

sudo openssl pkcs12 -export -in "/etc/letsencrypt/live/域名/cert.pem" -inkey "/etc/letsencrypt/live/域名/privkey.pem" -out "/etc/letsencrypt/live/域名/key.p12"

范例，注意记住这里的密码

sudo openssl pkcs12 -export -in "/etc/letsencrypt/live/texttool.fun/cert.pem" -inkey "/etc/letsencrypt/live/texttool.fun/privkey.pem" -out "/etc/letsencrypt/live/texttool.fun/key.p12"

## 3 配置spring boot ##

注意端口

server:
      port: 443
      ssl:
        key-store: file:/etc/letsencrypt/live/texttool.fun/key.p12
        key-store-password: 123456
        key-store-type: PKCS12

## 4 配置nginx ##

server {
            listen 80;
            server_name texttool.fun;
            rewrite ^(.*)$ https://${server_name}$1 permanent;
    }

## 5 其他 ##

安装nginx

yum install -y nginx
    sudo systemctl start nginx
    sudo systemctl enable nginx

启动项目

nohup java -Xms512m -Xmx512m -jar site.jar >/dev/null 2>&1 &

参考文章：

[https://blog.csdn.net/yanhanhui1/article/details/117191140][https_blog.csdn.net_yanhanhui1_article_details_117191140]

[https://blog.csdn.net/Tomwildboar/article/details/102841811][https_blog.csdn.net_Tomwildboar_article_details_102841811]

[a874eb5be71e45e781b07f1fba60d9dc.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/26/7392ac444e8b4fcb806cad681ee79a0c.png
[3b1579a2726d48bb92cd9ad499d52054.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/26/8ec38b46e6934c3a9aee3a42f61152f9.png
[https_blog.csdn.net_yanhanhui1_article_details_117191140]: https://blog.csdn.net/yanhanhui1/article/details/117191140
[https_blog.csdn.net_Tomwildboar_article_details_102841811]: https://blog.csdn.net/Tomwildboar/article/details/102841811