== 证书配置 == {{{ root@ip-172-26-45-90:~/.acme.sh# ./acme.sh --register-account -m loolwv7@gmail.com --server zerossl [Thu Jul 1 07:36:29 UTC 2021] No EAB credentials found for ZeroSSL, let's get one [Thu Jul 1 07:36:30 UTC 2021] Registering account: https://acme.zerossl.com/v2/DV90 [Thu Jul 1 07:36:32 UTC 2021] Registered [Thu Jul 1 07:36:32 UTC 2021] ACCOUNT_THUMBPRINT='5gDszi5b5NOCAIbIFk_aOgnWHGJhAsRE4Fab-cTaRjk' }}} {{{ root@ip-172-26-34-82:~# ~/.acme.sh/acme.sh --issue -d brightmoon.de --webroot /var/www/html/ --keylength ec-256 [Thu Apr 29 09:47:47 UTC 2021] Using CA: https://acme-v02.api.letsencrypt.org/directory [Thu Apr 29 09:47:47 UTC 2021] Single domain='brightmoon.de' [Thu Apr 29 09:47:47 UTC 2021] Getting domain auth token for each domain [Thu Apr 29 09:47:50 UTC 2021] Getting webroot for domain='brightmoon.de' [Thu Apr 29 09:47:50 UTC 2021] Verifying: brightmoon.de [Thu Apr 29 09:47:53 UTC 2021] Success [Thu Apr 29 09:47:53 UTC 2021] Verify finished, start to sign. [Thu Apr 29 09:47:54 UTC 2021] Lets finalize the order. [Thu Apr 29 09:47:54 UTC 2021] Le_OrderFinalize='https://acme-v02.api.letsencrypt.org/acme/finalize/121746635/9367627443' [Thu Apr 29 09:47:55 UTC 2021] Downloading cert. [Thu Apr 29 09:47:55 UTC 2021] Le_LinkCert='https://acme-v02.api.letsencrypt.org/acme/cert/04be9fb4b7bedf69dbca1c78f20feb07c8dd' [Thu Apr 29 09:47:56 UTC 2021] Cert success. -----BEGIN CERTIFICATE----- MIIEVDCCAzygAwIBAgISBL6ftLe+32nbyhx48g/rB8jdMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTA0MjkwODQ3NTRaFw0yMTA3MjgwODQ3NTRaMBgxFjAUBgNVBAMT DWJyaWdodG1vb24uZGUwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAT1g8a0tA06 CGice8KSH3KH248qPE8XBlP6wh8u9w+WHCYnzNcNAYXzI8jX9DANNai86y0Ya+GW QkedsB+YlvyCo4ICRzCCAkMwDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBScFQhUPwOU /V+fbajkH2K7m8BozTAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBV BggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9y ZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzAYBgNVHREEETAP gg1icmlnaHRtb29uLmRlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98M LyALzE7xZOMAAAF5HQcY4wAABAMARjBEAiAPaNjvjQPDL74nL9mhlRyyb5AGem8I iF71CVwhXb30zwIgOcYzdpPYh5opRJdkmiFsZ4MlmsNtbNQiMYzxevupjNAAdgBv U3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAXkdBxkXAAAEAwBHMEUC IH8hP+ay0G4xiPbitQMLGURBCAzuQhAlumgd9rhklNVIAiEA51I2hTnEVBW2dyOE gj3wsKagJwH6UTbKvmxnG0tJXCEwDQYJKoZIhvcNAQELBQADggEBAEtUXmTgyG31 dhnRYGEEAsuuTdXw+Kq/t0b3b4mX1WWZt8aR1PBv2zI40qOdRMeP6nlbtTfFRQm2 7mefL8Co76zpbL7f4TkECaofnAPFUeNL4rJDy/mM58RIDgPNwPo3w/Elu4oIEtrN zWJ1MxA/K5KyJ6RAZD6cF+J1M2u5kA9XULwWKRHkYSIPTvYDNyOmGYkjsbYbmxr2 CSyBzTI67MAKT+NS4MmgU2wq2j32Z+9jrBbjS+HxSiuIFBInyXLy8I71ghUPNSOb RYoatraBka6Y6uTGg8yaTl367lt1Qrr6CPZlb5/Izt9nm03bCrr+I3dQZ+H7Y29I t+suQybZyFQ= -----END CERTIFICATE----- [Thu Apr 29 09:47:56 UTC 2021] Your cert is in /root/.acme.sh/brightmoon.de_ecc/brightmoon.de.cer [Thu Apr 29 09:47:56 UTC 2021] Your cert key is in /root/.acme.sh/brightmoon.de_ecc/brightmoon.de.key [Thu Apr 29 09:47:56 UTC 2021] The intermediate CA cert is in /root/.acme.sh/brightmoon.de_ecc/ca.cer [Thu Apr 29 09:47:56 UTC 2021] And the full chain certs is there: /root/.acme.sh/brightmoon.de_ecc/fullchain.cer }}} === 安装证书 === {{{ ~/.acme.sh/acme.sh --install-cert -d brightmoon.de --ecc \ --key-file /usr/local/etc/v2ray/v2ray.key \ --fullchain-file /usr/local/etc/v2ray/v2ray.crt \ --reloadcmd "service nginx force-reload" }}} == v2ray WebSocket + TLS + Web config.json == {{{ { "log": { "error": "/var/log/v2ray/error.log", "loglevel": "/var/log/v2ray/warning" }, "inbounds": [{ "sniffing": { "enabled": true, "destOverride": [ "http", "tls" ] }, "port": 8222, "listen":"127.0.0.1", //只监听 127.0.0.1，避免除本机外的机器探测到开放了 8222 端口 "protocol": "vmess", "settings": { "clients": [ { "id": "75567429-f6c8-495b-8d48-a91cdc91d983", "level": 1, "alterId": 64 } ] }, "streamSettings": { "network": "ws", "wsSettings": { "path": "/logs" } } }], "outbounds": [{ "protocol": "freedom", "settings": {} },{ "protocol": "blackhole", "settings": {}, "tag": "blocked" }], "routing": { "domainStrategy": "AsIs", "rules": [ { "type": "field", "outboundTag": "block", "protocol": [ "bittorrent" ] }, { "type": "field", "ip": ["geoip:private"], "outboundTag": "blocked" } ] } } }}} == v2ray config.json == {{{ [root@vultr ~]# cat /etc/v2ray/config.json { "inbounds": [{ "port": 8675, "protocol": "vmess", "settings": { "clients": [{ "id": "c2b3e7d7-ac8e-4e39-8197-561253a8e33e" }] } }], "outbounds": [{ "protocol": "freedom", "settings": {} }] } }}} == cert renew == {{{ root@instance-2-v2ray--ss:~/.acme.sh# ~/.acme.sh/acme.sh --renew -d brightmoon.top --force --ecc [Fri Nov 6 06:40:37 UTC 2020] Renew: 'brightmoon.top' [Fri Nov 6 06:40:38 UTC 2020] Standalone mode. [Fri Nov 6 06:40:38 UTC 2020] Single domain='brightmoon.top' [Fri Nov 6 06:40:39 UTC 2020] Getting domain auth token for each domain [Fri Nov 6 06:40:42 UTC 2020] Getting webroot for domain='brightmoon.top' [Fri Nov 6 06:40:42 UTC 2020] brightmoon.top is already verified, skip http-01. [Fri Nov 6 06:40:43 UTC 2020] Verify finished, start to sign. [Fri Nov 6 06:40:43 UTC 2020] Lets finalize the order, Le_OrderFinalize: https://acme-v02.api.letsencrypt.org/acme/finalize/88367538/6064361765 [Fri Nov 6 06:40:44 UTC 2020] Download cert, Le_LinkCert: https://acme-v02.api.letsencrypt.org/acme/cert/03374101af17edb876d522cb0e66d0db02a3 [Fri Nov 6 06:40:45 UTC 2020] Cert success. -----BEGIN CERTIFICATE----- MIIEiDCCA3CgAwIBAgISAzdBAa8X7bh21SLLDmbQ2wKjMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDExMDYwNTQwNDRaFw0y MTAyMDQwNTQwNDRaMBkxFzAVBgNVBAMTDmJyaWdodG1vb24udG9wMFkwEwYHKoZI zj0CAQYIKoZIzj0DAQcDQgAEGutHP0AZ9mciYGiLNObKy0yMktD7xMYFmtAD26Is NBL8qjopPXTjo17m0RC4XMvtiPGvwg1nb3nqAJdBjGmZaaOCAmIwggJeMA4GA1Ud DwEB/wQEAwIHgDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUq7pujNKCAAg0UYIx1Nbwwc7MdC4wHwYDVR0jBBgw FoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUF BzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUF BzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREE EjAQgg5icmlnaHRtb29uLnRvcDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEE AYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y ZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZ AsEAKQaNsgiaN9kTAAABdZxJMuEAAAQDAEYwRAIgGihM9qvG2+ogjCngHyWXnzc6 vVR+nzcCl91NbrT9p1MCIEBjLis3u+oa31UYf1hs3xaMccm91HNCUNVq6ZtT48Ap AHYAfT7y+I//iFVoJMLAyp5SiXkrxQ54CX8uapdomX4i8NcAAAF1nEky7wAABAMA RzBFAiEA+REy+QNYNmMlomuL8YX6RrZq0E3owv8XSY8Jam9HcsICIHcOcy3ocqNd xUycTM2Mb41RsuDuFMZYTYmcxgh5AKR9MA0GCSqGSIb3DQEBCwUAA4IBAQCW1qcm QRXin+BZRPwN/E1qDvcf5IBmjbBMnRtNx77qdY7KsBAZ4vZ82ACpOkrRA8C4rzu0 fOnbNL2/jjua0QPzdPXMg6LoXH4PeOg2fEwNStP9NrhCkfc6U9AlvEzquC7PFHXP W0VEjvacvvqVgPF5h+/Ty3jfQERlRAdhIx97CQ1m6CJyaJKK9q/jhdV/g2yTMZQL IQOuzhb2b29tI0t6fazjSrRRfh1cRr/xMPykZCnjRgrGA0m6xZJqeY5O7GKskcHb MKTDU/EmKcxCYx0a4F92L4uQZT/pIuZ1N+RHMolOVBUJvUoNezVeiYZzNFLQ4pg8 +68hleyNjH0gyy7k -----END CERTIFICATE----- [Fri Nov 6 06:40:45 UTC 2020] Your cert is in /root/.acme.sh/brightmoon.top_ecc/brightmoon.top.cer [Fri Nov 6 06:40:45 UTC 2020] Your cert key is in /root/.acme.sh/brightmoon.top_ecc/brightmoon.top.key [Fri Nov 6 06:40:45 UTC 2020] The intermediate CA cert is in /root/.acme.sh/brightmoon.top_ecc/ca.cer [Fri Nov 6 06:40:45 UTC 2020] And the full chain certs is there: /root/.acme.sh/brightmoon.top_ecc/fullchain.cer [Fri Nov 6 06:40:45 UTC 2020] Installing key to:/etc/v2ray/v2ray.key [Fri Nov 6 06:40:45 UTC 2020] Installing full chain to:/etc/v2ray/v2ray.crt }}} == upgrade == {{{ bash <(curl -L https://raw.githubusercontent.com/v2fly/fhs-install-v2ray/master/install-release.sh) bash <(curl -L https://raw.githubusercontent.com/v2fly/fhs-install-v2ray/master/install-dat-release.sh) }}} == 采用certbot更为方便生成证书 == {{{ 首先关闭占用80端口的应用或服务,然后执行下面的命令 certbot certonly --standalone -d brightmoon.top -m merlyncaulfield@gmail.com }}}