39 lines
1.1 KiB
Bash
39 lines
1.1 KiB
Bash
#!/bin/sh
|
|
|
|
#############################################################################################
|
|
# 用途： Nginx 签发证书脚本
|
|
# 作者： 丁辉
|
|
# 更新时间： 2024-05-20
|
|
#############################################################################################
|
|
|
|
read -p "输入您的域名: " DOMAIN
|
|
|
|
echo "创建服务器密钥..."
|
|
|
|
openssl genrsa -des3 -out $DOMAIN.key 1024
|
|
|
|
echo "创建服务器证书签名请求..."
|
|
|
|
SUBJECT="/C=US/ST=Mars/L=iTranswarp/O=iTranswarp/OU=iTranswarp/CN=$DOMAIN"
|
|
|
|
openssl req -new -subj $SUBJECT -key $DOMAIN.key -out $DOMAIN.csr
|
|
|
|
echo "移除密码..."
|
|
|
|
mv $DOMAIN.key $DOMAIN.origin.key
|
|
openssl rsa -in $DOMAIN.origin.key -out $DOMAIN.key
|
|
|
|
echo "签署SSL证书..."
|
|
|
|
openssl x509 -req -days 3650 -in $DOMAIN.csr -signkey $DOMAIN.key -out $DOMAIN.crt
|
|
|
|
echo "待办事项: "
|
|
echo "将 $DOMAIN.crt 复制到 /etc/nginx/ssl/$DOMAIN.crt"
|
|
echo "将 $DOMAIN.key 复制到 /etc/nginx/ssl/$DOMAIN.key"
|
|
echo "在nginx中添加配置:"
|
|
echo "server {"
|
|
echo " ..."
|
|
echo " listen 443 ssl;"
|
|
echo " ssl_certificate /etc/nginx/ssl/$DOMAIN.crt;"
|
|
echo " ssl_certificate_key /etc/nginx/ssl/$DOMAIN.key;"
|
|
echo "}" |