Are you going to renew the annual free SSL certificate?

Are you going to renew the annual free SSL certificate?

I don’t know if you know about FreeSSL. I have recently developed this website https://freessl.cn. If you are all personal sites and have no special requirements for certificates, you can consider using the certificates generated by them, and they can be automatically renewed, so there is no need at all. worry.

As the title asks, everyone’s free certificates are probably obtained from Alibaba Cloud for free, but they are valid for one year. You need to apply for and replace your own server’s certificate each time it expires.

I don’t know if you know about FreeSSL. I have recently developed this website https://freessl.cn. If you are all personal sites and have no special requirements for certificates, you can consider using the certificates generated by them and it can be automatically renewed. , don’t worry about it at all.

First apply for a certificate quota at freessl, register your domain name into their system, and then follow the instructions to configure the DCV of cname or http proxy. Once the verification is passed, the script will be deployed for you.

Understand acme.sh before executing the deployment script

You must switch to the root user, first download and install acme.sh

curl https: //get.acme.sh | sh -s [email protected]

Otherwise, it will prompt that acme.sh cannot be found, and the rest will be left to acme.sh. Generally, the certificate applied for is 90 days old, but acme.sh will automatically check the validity period of the certificate every early morning, and generate a good certificate. You can configure it directly in the web deployment, such as nginx, apache, etc.

Specific introductory tutorial: ACME v2 Certificate Automation Quick Start (freessl.cn)
I hope it will be helpful to everyone!