Let’s Encrypt证书续签

Let’s Encrypt证书续签

• 先删除后续签

[root@my-dev sbin]# certbot delete --cert-name zhao138969.com

• 续签命令

[root@my-dev sbin]# certbot certonly    -d zhao138969.com
Saving debug log to /var/log/letsencrypt/letsencrypt.log

How would you like to authenticate with the ACME CA?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: Spin up a temporary webserver (standalone)
2: Place files in webroot directory (webroot)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 1
Plugins selected: Authenticator standalone, Installer None
Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
Cert is due for renewal, auto-renewing...
Renewing an existing certificate for zhao138969.com
Performing the following challenges:
http-01 challenge for zhao138969.com
Waiting for verification...
Cleaning up challenges

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/zhao138969.com-0002/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/zhao138969.com-0002/privkey.pem
   Your certificate will expire on 2025-01-20. To obtain a new or
   tweaked version of this certificate in the future, simply run
   certbot again. To non-interactively renew *all* of your
   certificates, run "certbot renew"
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le

• nginx 热加载即可，在查看是否ssl 时间是否已更新。
• 后续可以使用sudo certbot renew --dry-run命令进行续签