letsencrypt 配置参考文章

关注

原创最新推荐文章于 2026-03-28 02:25:27 发布 1.1k 阅读 AI 写同款· GEO 优化 ›

快速配置Let's encrypt通配符证书本文首发自个人博客：https://blog.smile13.com 1.简介 Let’s Encrypt已经支持申请免费的通配符证书，只需要对域名申请https证书，该域名下所有的子域名都可以使用。有一点需要说明，Let’s Encrypt的通配符证书只是针对二级域名，不针对主域名，例如blog.smile13.com和smile13.com则被认为是两个域名，申请证书的时候都需要申请。 ... 阅读详情

https://www.svennd.be/lets-encrypt-with-centos-6/

apache配置注意

LoadModule ssl_module modules/mod_ssl.so

<VirtualHost *:443>
 # server setup
 ServerName svennd.be
 ServerAlias www.svennd.be
 ServerAdmin webmaster@svennd.be
 DocumentRoot /var/www/svennd

 # ssl setup
 SSLEngine ON
 SSLProtocol all -SSLv2 -SSLv3
 SSLHonorCipherOrder On
 SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4"

 SSLCertificateFile /etc/letsencrypt/live/www.svennd.be/cert.pem
 SSLCertificateKeyFile /etc/letsencrypt/live/www.svennd.be/privkey.pem
 SSLCertificateChainFile /etc/letsencrypt/live/www.svennd.be/chain.pem

 <Directory "/var/www/svennd">
 AllowOverride All
 Order allow,deny
 Allow from all
 </Directory>
</VirtualHost>

<VirtualHost *:80>
 # server setup
 ServerName svennd.be
 ServerAlias www.svennd.be
 DocumentRoot /var/www/svennd
 <Directory "/var/www/svennd">
 AllowOverride All
 Order allow,deny
 Allow from all
 </Directory>
</VirtualHost>