https://www.sslforfree.com 登陆帐号：149525162@qq.com 密码：电话

上传文件到服务器验证

)

ca_bundle.crt，certificate.crt，private.key ( 从 free ssl 网站下载

把 certificate.crt 与 ca_bundle.crt 的内容合并写到 /etc/nginx/ssl/xmyunce.crt

把 private.key 写到 /etc/nginx/ssl/xmyunce.key

上传证书到服务器

要先关闭 ssl

要等十分钟再点击下载 SSL (最好用 VPN)

配置 nginx

server{
   listen       80;
    server_name  www.xmyunce.com xmyunce.com;
   return 301 https://$server_name$request_uri;

}

server {
    listen       443 ssl default_server;
    server_name  www.xmyunce.com xmyunce.com;
    root   /usr/share/nginx/HTML/xmyunce/public;
    index index.html index.htm index.php;
    ssl on;
    ssl_certificate /etc/nginx/ssl/xmyunce.crt;
    ssl_certificate_key /etc/nginx/ssl/xmyunce.key;
...

free ss 证书有效时间为 3 个月，3 个月后需重新申请。可参与下面链接实现自动续期 https://www.nginx.com/blog/free-certificates-lets-encrypt-and-nginx/