使用acme.sh自动签发和续期ssl

git clone https://github.com/Neilpang/acme.sh.git
cd ./acme.sh
./acme.sh --install

重新连接ssh

acme.sh --issue -d llinx.me -w /var/www

acme.sh --installcert -d llinx.me \
               --keypath       /etc/ssl/private/llinx.me.key  \
               --fullchainpath /etc/ssl/certs/llinx.me.pem \
               --reloadcmd     "service nginx force-reload"

openssl dhparam -out /etc/ssl/certs/dhparam.pem 2048

ssl_certificate /etc/ssl/certs/llinx.me.pem;
ssl_certificate_key /etc/ssl/private/llinx.me.key;
ssl_dhparam /etc/ssl/certs/dhparam.pem;

service nginx restart