安裝python插件
sudo apt-get install python3-setuptools
sudo easy_install3 pip
sudo pip install certbot-dns-dnspod
根據(jù)https://github.com/SkyLothar/certbot-dns-dnspod這個(gè)插件的作者提示,需要先創(chuàng)建一個(gè)dns鑒權(quán)的配置文件.此處需要申請(qǐng)dnspod的密鑰。密鑰格式為"id,key"的方式,這里一定不能寫錯(cuò)。
vim /etc/letsencrypt/dnspod.conf
certbot_dns_dnspod:dns_dnspod_email = "DNSPOD郵箱"
certbot_dns_dnspod:dns_dnspod_api_token = "id,key"
然后新創(chuàng)建通配符域名:
sudo certbot certonly --server https://acme-v02.api.letsencrypt.org/directory -a certbot-dns-dnspod:dns-dnspod --certbot-dns-dnspod:dns-dnspod-credentials /etc/letsencrypt/dnspod.conf -d "zhangyuqing.me" -d "*.zhangyuqing.me"
然后到期后的續(xù)期操作:
sudo certbot renew --server https://acme-v02.api.letsencrypt.org/directory -a certbot-dns-dnspod:dns-dnspod --certbot-dns-dnspod:dns-dnspod-credentials /etc/letsencrypt/dnspod.conf
1 )去 DNSPod.cn 申請(qǐng) api 授權(quán)
2 )安裝插件:pip install certbot-dns-dnspod
3 )生成插件配置文件,例如保存到文件/etc/cetbot-dns-dnspod-credentials.ini。重點(diǎn)是雙引號(hào)不可缺,token 的格式是 id 和 token 以逗號(hào)分隔
certbot_dns_dnspod:dns_dnspod_email = "DNSPod 賬戶的 Email"
certbot_dns_dnspod:dns_dnspod_api_token = "api_id,api_token"
4 )配置文件設(shè)置權(quán)限(只是為了安全,此步可不做):sudo chmod 600 /etc/cetbot-dns-dnspod-credentials.ini
5 )更新證書。xxx.com 需要替換為相關(guān)域名。
certbot certonly -a certbot-dns-dnspod:dns-dnspod \
--certbot-dns-dnspod:dns-dnspod-credentials /etc/cetbot-dns-dnspod-credentials.ini \
-d xxx.com