2021-01-11 11:00:12 +00:00
|
|
|
|
# CertD
|
|
|
|
|
|
2023-07-04 05:06:37 +00:00
|
|
|
|
CertD 是一个免费全自动申请和部署SSL证书的工具。
|
2021-01-12 01:44:41 +00:00
|
|
|
|
后缀D取自linux守护进程的命名风格,意为证书守护进程。
|
2021-01-11 11:00:12 +00:00
|
|
|
|
|
2023-07-04 05:46:57 +00:00
|
|
|
|
## 一、特性
|
2021-01-12 01:44:41 +00:00
|
|
|
|
本项目不仅支持证书申请过程自动化,还可以自动化部署证书,让你的证书永不过期。
|
|
|
|
|
|
2023-06-28 14:10:52 +00:00
|
|
|
|
* 全自动申请证书(支持阿里云、腾讯云、华为云注册的域名)
|
2023-07-04 05:06:37 +00:00
|
|
|
|
* 全自动部署证书(目前支持服务器上传部署、部署到阿里云、腾讯云等)
|
2023-06-28 14:10:52 +00:00
|
|
|
|
* 支持通配符域名
|
|
|
|
|
* 支持多个域名打到一个证书上
|
2023-07-04 05:06:37 +00:00
|
|
|
|
* 邮件通知
|
|
|
|
|
* 证书自动更新
|
2023-07-04 06:37:13 +00:00
|
|
|
|
* 免费、免费、免费([阿里云单个通配符域名证书最便宜也要1800/年](https://yundun.console.aliyun.com/?p=cas#/certExtend/buy/cn-hangzhou))
|
|
|
|
|
|
2021-01-12 01:44:41 +00:00
|
|
|
|
|
|
|
|
|
|
2023-07-04 06:12:19 +00:00
|
|
|
|
## 二、在线体验
|
2021-01-11 14:49:24 +00:00
|
|
|
|
|
2023-07-04 05:06:37 +00:00
|
|
|
|
官方Demo地址,自助注册后体验
|
2021-01-11 14:49:24 +00:00
|
|
|
|
|
2023-07-04 05:06:37 +00:00
|
|
|
|
https://certd.handsfree.work/
|
2021-01-11 14:49:24 +00:00
|
|
|
|
|
2023-07-04 05:06:37 +00:00
|
|
|
|
> 注意数据将不定期清理,生产使用请自行部署
|
2023-07-04 06:14:31 +00:00
|
|
|
|
> 包含敏感信息,务必自己本地部署进行生产使用
|
2021-01-11 14:49:24 +00:00
|
|
|
|
|
2023-07-04 06:12:19 +00:00
|
|
|
|
## 三、使用教程
|
2023-07-04 06:29:18 +00:00
|
|
|
|
本案例演示,如何配置自动申请证书,并部署到阿里云CDN,然后快要到期前自动更新证书并重新部署
|
2021-01-11 15:15:35 +00:00
|
|
|
|
|
2023-07-04 05:06:37 +00:00
|
|
|
|
![演示](./doc/images/5-view.png)
|
2023-07-04 06:56:40 +00:00
|
|
|
|
![演示](./doc/images/9-start.png)
|
|
|
|
|
![演示](./doc/images/10-1-log.png)
|
|
|
|
|
![演示](./doc/images/13-3-download.png)
|
2023-07-04 07:03:34 +00:00
|
|
|
|
![演示](./doc/images/13-1-result.png)
|
2021-01-11 15:15:35 +00:00
|
|
|
|
|
2023-07-04 06:28:27 +00:00
|
|
|
|
↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓
|
|
|
|
|
-------> [点我查看详细使用步骤演示](./step.md) <--------
|
|
|
|
|
↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑
|
2021-01-11 15:15:35 +00:00
|
|
|
|
|
2023-07-04 05:46:57 +00:00
|
|
|
|
## 四、本地docker部署
|
2021-01-11 15:15:35 +00:00
|
|
|
|
|
2023-07-04 05:46:57 +00:00
|
|
|
|
### 1. 安装docker、docker-compose
|
2021-01-11 15:15:35 +00:00
|
|
|
|
|
2023-07-04 05:46:57 +00:00
|
|
|
|
1.1 安装docker
|
|
|
|
|
https://docs.docker.com/engine/install/
|
2021-01-11 15:15:35 +00:00
|
|
|
|
|
2023-07-04 05:46:57 +00:00
|
|
|
|
1.2 安装docker-compose
|
|
|
|
|
https://docs.docker.com/compose/install/linux/
|
2021-01-11 15:15:35 +00:00
|
|
|
|
|
2023-07-04 05:46:57 +00:00
|
|
|
|
### 2. 下载docker-compose.yaml文件
|
|
|
|
|
```bash
|
2023-11-07 06:22:17 +00:00
|
|
|
|
mkdir certd
|
2023-07-04 05:46:57 +00:00
|
|
|
|
cd certd
|
2023-11-07 09:46:18 +00:00
|
|
|
|
wget https://raw.githubusercontent.com/certd/certd/v2/docker/run/docker-compose.yaml
|
|
|
|
|
# 或者使用gitee地址
|
|
|
|
|
wget https://gitee.com/certd/certd/raw/v2/docker/run/docker-compose.yaml
|
2023-07-04 05:46:57 +00:00
|
|
|
|
|
2023-07-04 06:19:55 +00:00
|
|
|
|
# 根据需要修改里面的配置
|
|
|
|
|
# 1.修改镜像版本号
|
|
|
|
|
# 2.配置数据保存路径
|
|
|
|
|
# 3.配置certd_auth_jwt_secret
|
2023-07-04 06:21:14 +00:00
|
|
|
|
vi docker-compose.yaml
|
|
|
|
|
|
|
|
|
|
|
2023-07-04 05:46:57 +00:00
|
|
|
|
```
|
2023-07-04 06:19:55 +00:00
|
|
|
|
> 镜像版本号与release版本号同步:
|
|
|
|
|
https://github.com/certd/certd/releases
|
|
|
|
|
|
|
|
|
|
|
2023-07-04 05:46:57 +00:00
|
|
|
|
### 3. 运行
|
|
|
|
|
```bash
|
|
|
|
|
# 如果docker compose是插件化安装
|
2023-11-07 08:17:46 +00:00
|
|
|
|
export CERTD_VERSION=1.2.0
|
2023-07-04 05:46:57 +00:00
|
|
|
|
docker compose up -d
|
|
|
|
|
|
|
|
|
|
#如果docker compose是独立安装
|
2023-11-07 08:17:46 +00:00
|
|
|
|
export CERTD_VERSION=1.2.0
|
2023-07-04 05:46:57 +00:00
|
|
|
|
docker-compose up -d
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
### 4. 访问
|
|
|
|
|
|
2023-07-06 07:14:56 +00:00
|
|
|
|
http://your_server_ip:7001
|
|
|
|
|
默认账号密码:admin/123456
|
|
|
|
|
记得修改密码
|
2023-07-04 05:46:57 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
## 五、一些说明
|
2023-07-04 06:38:31 +00:00
|
|
|
|
|
2023-07-04 05:06:37 +00:00
|
|
|
|
* 本项目ssl证书提供商为letencrypt
|
|
|
|
|
* 申请过程遵循acme协议
|
|
|
|
|
* 需要验证域名所有权,一般有两种方式(目前本项目仅支持dns-01)
|
|
|
|
|
* http-01: 在网站根目录下放置一份txt文件
|
2023-07-04 06:38:41 +00:00
|
|
|
|
* dns-01: 需要给域名添加txt解析记录,通配符域名只能用这种方式
|
2023-07-04 05:06:37 +00:00
|
|
|
|
* 证书续期:
|
|
|
|
|
* 实际上acme并没有续期概念。
|
|
|
|
|
* 我们所说的续期,其实就是按照全套流程重新申请一份新证书。
|
|
|
|
|
* 免费证书过期时间90天,以后可能还会缩短,所以自动化部署必不可少
|
2023-07-04 06:38:31 +00:00
|
|
|
|
* 设置每天自动运行,当证书过期前20天,会自动重新申请证书并部署
|
2021-01-11 15:15:35 +00:00
|
|
|
|
|
2023-07-04 06:11:43 +00:00
|
|
|
|
## 六、联系作者
|
2023-07-06 07:13:20 +00:00
|
|
|
|
如有疑问,欢迎加入群聊(请备注certd)
|
|
|
|
|
* QQ群:141236433
|
2023-07-04 06:11:43 +00:00
|
|
|
|
* 微信群:
|
2023-07-06 07:13:20 +00:00
|
|
|
|
![](https://ai.handsfree.work/images/exchange_wxqroup.png)
|
|
|
|
|
|
|
|
|
|
|
2024-02-27 13:31:18 +00:00
|
|
|
|
加作者好友
|
|
|
|
|
<p align="center">
|
|
|
|
|
<img height="230" src="./doc/images/me.png">
|
|
|
|
|
</p>
|
|
|
|
|
|
|
|
|
|
## 捐赠
|
|
|
|
|
媳妇儿说:“一天到晚搞开源,也不管管老婆孩子!😡😡😡”
|
|
|
|
|
拜托各位捐赠支持一下,让媳妇儿开心开心,我也能有更多时间进行开源项目,感谢🙏🙏🙏
|
|
|
|
|
<p align="center">
|
|
|
|
|
<img height="380" src="./doc/images/donate.png">
|
|
|
|
|
</p>
|
|
|
|
|
|
|
|
|
|
|
2024-03-21 17:04:45 +00:00
|
|
|
|
## 七、贡献代码
|
|
|
|
|
|
|
|
|
|
[贡献插件教程](./packages/plugins/plugin-center/README.md)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
## 八、我的其他项目
|
2023-07-06 07:13:20 +00:00
|
|
|
|
* [袖手GPT](https://ai.handsfree.work/) ChatGPT,国内可用,无需FQ,每日免费额度
|
|
|
|
|
* [fast-crud](https://gitee.com/fast-crud/fast-crud/) 基于vue3的crud快速开发框架
|
|
|
|
|
* [dev-sidecar](https://github.com/docmirror/dev-sidecar/) 直连访问github工具,无需FQ,解决github无法访问的问题
|