Obtaining a new HTTPS SSL certificate on the Linux Ubuntu server 22.04
- Install certbot
sudo apt update && sudo apt install -y socat
2. Switch back to Let’s Encrypt as the default CA
~/.acme.sh/acme.sh –set-default-ca –server letsencrypt
- Manually apply for wildcard certificates
~/.acme.sh/acme.sh –issue -d “*.zxcn.cc” -d “zxcn.cc” –dns –yes-I-know-dns-manual-mode-enough-go-ahead-please
It might take 3 to 5 minutes.
- To access the DNS backend, please visit https://www.west.cn/Manager/domainnew/rsall.asp?domainid=44316625
Add a new txt record.
- Verify if DNS is functioning (wait for 1-3 minutes):
dig -t txt _acme-challenge.zxcn.cc +short
- Continue to apply for the certificate
# Re-run (with –renew parameter)
~/.acme.sh/acme.sh –renew \
-d “*.zxcn.cc” -d “zxcn.cc” \
–dns –yes-I-know-dns-manual-mode-enough-go-ahead-please
Cert success at: /root/.acme.sh/zxcn.cc/fullchain.cer
Key saved at: /root/.acme.sh/zxcn.cc/zxcn.cc.key
Upload the certificate in the “Hosting Certificate” section, and copy the contents of the above two files.
7.https://www.west.cn/paas/ssl/manage/thirdlist
View the effectiveness online:
https://www.ssllabs.com/ssltest/analyze.html?d=zxcn.cc&latest
Automatic renewal
~/.acme.sh/acme.sh –renew -d “*.zxcn.cc” –force