synchronization

File/Shell/nginx-ssl.sh

@@ -0,0 +1,39 @@
+#!/bin/sh
+
+#############################################################################################
+# 用途： Nginx 签发证书脚本
+# 作者： 丁辉
+# 更新时间： 2024-05-20
+#############################################################################################
+
+read -p "输入您的域名: " DOMAIN
+
+echo "创建服务器密钥..."
+
+openssl genrsa -des3 -out $DOMAIN.key 1024
+
+echo "创建服务器证书签名请求..."
+
+SUBJECT="/C=US/ST=Mars/L=iTranswarp/O=iTranswarp/OU=iTranswarp/CN=$DOMAIN"
+
+openssl req -new -subj $SUBJECT -key $DOMAIN.key -out $DOMAIN.csr
+
+echo "移除密码..."
+
+mv $DOMAIN.key $DOMAIN.origin.key
+openssl rsa -in $DOMAIN.origin.key -out $DOMAIN.key
+
+echo "签署SSL证书..."
+
+openssl x509 -req -days 3650 -in $DOMAIN.csr -signkey $DOMAIN.key -out $DOMAIN.crt
+
+echo "待办事项: "
+echo "将 $DOMAIN.crt 复制到 /etc/nginx/ssl/$DOMAIN.crt"
+echo "将 $DOMAIN.key 复制到 /etc/nginx/ssl/$DOMAIN.key"
+echo "在nginx中添加配置:"
+echo "server {"
+echo "    ..."
+echo "    listen 443 ssl;"
+echo "    ssl_certificate     /etc/nginx/ssl/$DOMAIN.crt;"
+echo "    ssl_certificate_key /etc/nginx/ssl/$DOMAIN.key;"
+echo "}"