Free SSL certificate application and deployment practice

High quality resource sharing

On the Internet about how to sign and issue free SSL The blog post of the certificate is a large piece , But there are few things that can really make novices not confused , Many operation steps are limited by the fact that China cannot access the Internet , As a result, it cannot be really implemented successfully .
actually , About applying for free SSL The certificate mainly involves two parts ：
First of all , How to quickly apply for a free DV certificate （ Usually free certificates are DV certificate ,DV Certificates are sufficient for personal or testing purposes ）.
second , How to configure the deployment after successfully applying for the certificate , So that the website can pass HTTPS visit .

The above two steps can be automated using scripting tools , It can also be done manually .
The following example will be completed in a completely manual way SSL Certificate application and deployment （ be based on nginx）.

apply SSL certificate

After reading carefully Let’s Encrypt The manual is still not completed successfully SSL After the torment of Certificate Application , Give up decisively .
Last in FreeSSL.cn It is very intuitive and easy to complete the free SSL Issue of certificate .
Personally feel , stay FreeSSL.cn Issued on SSL Certificates are really very convenient , Hot is suitable for beginners .
First , Enter into FreeSSL.cn page , Choose one that supports multiple domain names and wildcards “5lSSL”.

Jump to 51ssl The page of , You need to register an account and log in .
choice “ Order management ”->“ The certificate application ”.

choice “ Non commercial certificate ”->“TrustAsia Free domain name wildcard SSL certificate ”, Click on “ Buy ” Button .

explain ： What type of certificate to choose here , It depends entirely on your own needs . Because I need to use multiple subdomain certificates , So I chose “TrustAsia Free domain name wildcard SSL certificate ”.

Came to “ apply TrustAsia Free domain name wildcard SSL certificate ” Operation interface of .
Fill in the relevant information carefully , Click on “ Submit a certificate application ” Button .

The next most important step is “ Domain name verification ”, Strongly recommended “Email verification ” The way , In this way, you only need to click the mouse after receiving the verification email to complete the verification operation .
Complete the relevant verification operations according to the prompts , It takes a while for the certificate to be issued , Don't worry , After about a few minutes, you will receive an email with a successful certificate issuance .

After receiving the email notification of successful certificate issuance , Come to the management background interface again , choice “ Order management ”, Click next to the order number “ Take a quick look at ”, Click... In the pop-up interface “ Download the certificate ”, The certificate Download Interface pops up .

In the certificate download pop-up interface , First select deployment SSL Certificate server , Then choose “ download ”, Or send the certificate file to the mailbox .

To deploy to nginx Take your certificate as an example , Download and get a compressed package , contain 2 File ：

• “.pem file ”：SSL Certificate file
• “.key file ”：SSL Certificate private key file

Deploy SSL certificate

Be careful ： In the deployment SSL Before the certificate , First, make sure that the domain name has been added with resolution , And through http The protocol uses the domain name to access the target website .

In the nginx Deployment in China SSL Certificate as an example , Will be issued in the above manner SSL Certificate upload to nginx The server , stay nginx Add configuration to profile ：

server {
   listen       80;
   server_name  www.zhangsan.org.cn;
 #  visit http Forced jump to https
   rewrite ^(.*)$  https://$host$1 permanent;
}

server {
   listen 443 ssl;
   server_name  www.zhangsan.org.cn;

   root   /data/www;
   index  index.html index.htm;

   access_log /dev/null;
   ssl_certificate  /data/ssl/zhangsan.org.cn_cert_chain.pem; #   Certificate file path 
   ssl_certificate_key  /data/ssl/zhangsan.org.cn_key.key; #  Certificate private key file path 
   ssl_session_timeout 5m;
   ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
   ssl_prefer_server_ciphers on;
}

thus , Issuance and deployment are free SSL The certificate operation process is completed ！

【 Reference resources 】
https://freessl.cn/
https://www.jianshu.com/p/1a792f87b6fe Let’s Encrypt Certificate application and configuration
https://github.com/acmesh-official/acme.sh/wiki/Run-acme.sh-in-docker
https://www.laoliang.net/jsjh/technology/8898.html 2021 The latest novice of Alibaba cloud applied for free SSL（https） Certificate graphic method （ technological process ）
https://blog.csdn.net/jiuyuefenglove/article/details/108625400 SSL The most detailed tutorial of Certificate Application
https://zhuanlan.zhihu.com/p/174755007 33 Free access SSL The way of certification
https://blog.csdn.net/ithomer/article/details/78075006 Top 10 free SSL certificate ： The website adds... For free HTTPS encryption
https://blog.fundebug.com/2018/07/06/apply-lets-encrypt-certificate/ Teach you how to quickly roll a free HTTPS certificate
https://www.awaimai.com/2218.html Use Let’s Encrypt Add HTTPS
https://coolshell.cn/articles/18094.html How to enable the website for free HTTPS
https://yeaheo.com/post/nginx-lets-encrypt-ssl-certificate-config/ Free application Let’s Encrypt SSL certificate
https://blog.sprov.xyz/2019/04/25/apply-ssl-certificate-at-freessl/ stay FreeSSL Apply for free for your domain name on SSL certificate
https://cn.aliyun.com/product/cas Alibaba cloud applies for free SSL certificate