不说前提不废话，开始
1. lets encrypt 官网：https://letsencrypt.org/
2. 下载letsencrypt
git clone https://github.com/letsencrypt/letsencrypt3. 关闭Nginx，一定要关闭Nginx
4. 生成证书
$ ./letsencrypt-auto -d simiie.com auth Requesting root privileges to run certbot... /home/bolomma/.local/share/letsencrypt/bin/letsencrypt -d simiie.com auth Saving debug log to /var/log/letsencrypt/letsencrypt.log Failed to find executable apache2ctl in PATH: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin How would you like to authenticate with the ACME CA? ------------------------------------------------------------------------------- 1: Spin up a temporary webserver (standalone) 2: Place files in webroot directory (webroot) ------------------------------------------------------------------------------- Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 1这里我选择临时：1
5. 接下来会在/etc/letsencrypt下生成很多目录，进入live目录，有对应的4个证书文件
6.fullchain.pem是公钥，privkey.pem是私钥，配置进Nginx就可以了
https://linux.cn/article-6565-1.html
原文链接：https://www.f2er.com/ubuntu/351957.html