acme安装证书

手动通过acme安装证书

curl https://get.acme.sh | sh #安装acme

~/.acme.sh/acme.sh --set-default-ca --server letsencrypt #替换服务

~/.acme.sh/acme.sh --issue -d khw.423327.xyz --dns --yes-I-know-dns-manual-mode-enough-go-ahead-please  #生成添加TXT需要的NAME和Value

去域名服务商处添加TXT

~/.acme.sh/acme.sh --renew -d khw.423327.xyz --yes-I-know-dns-manual-mode-enough-go-ahead-please  #生成证书

生成结果如下

[Fri 06 Jan 2023 07:37:07 AM EST] Your cert is in: /root/.acme.sh/khw.423327.xyz/khw.423327.xyz.cer
[Fri 06 Jan 2023 07:37:07 AM EST] Your cert key is in: /root/.acme.sh/khw.423327.xyz/khw.423327.xyz.key #使用这个
[Fri 06 Jan 2023 07:37:07 AM EST] The intermediate CA cert is in: /root/.acme.sh/khw.423327.xyz/ca.cer
[Fri 06 Jan 2023 07:37:07 AM EST] And the full chain certs is there: /root/.acme.sh/khw.423327.xyz/fullchain.cer #使用这个