Nowadays, if our ordinary websites and projects need SSL certificates, it is quite easy to obtain them. Businesses such as Alibaba Cloud and Tencent Cloud also provide free DV SSL certificate services for one year. Including Lao Zuo in front“ Use SSL For Free tool to obtain Let's Encrypt free SSL certificate in 3 minutes "The article also introduces the method of obtaining the free Let's Encryption certificate online, because it is really difficult for ordinary netizens to obtain it from the official way.
If we use the one click package WEB environment and WEB panel, mainstream scripts will automatically install SSL free certificates. There are many third-party tool websites similar to SSL For Free. For example, when you see a message from a netizen (perhaps his own) mentioning FreeSSL, the website is similar to SSL For Free, but it provides TrustAsia and Let's Encrypt certificates.
The principle is the same. A front-end generation tool built by using the API interface of the certification provider is useful for those who need to apply for certificates visually. In view of stability and security, Lao Zuo personally suggested that if the project is really important, he should buy a paid certificate. Cheap certificates cost dozens of yuan a year. If you just need a green lock to play, it is free.
Lao Zuo also shared several articles about free SSL before:
1、 6 free SSL certificate application cost saving configuration websites HTTPS encryption website
2、 OneinStack One Key Package Quick Automatic Configuration Let's Encrypt Free SSL Certificate Method
3、 LNMP V1.4 One click Rapid Deployment Let's Encrypt Free SSL Certificate
First, FreeSSL application address
Official address: https://freessl.org
Lao Zuo can't guarantee the permanence of such free websites. He can only say that this function is available during the current test. Because I saw some good tool websites before, and after a period of time, they changed to other content.
Second, free SSL application method
1. Enter the domain name selection type
Different from the tools introduced earlier, this tool station can choose TrustAsia and Let's Encrypt. The former is free for one year, and the latter is a three-month cycle. You need to reapply for renewal before expiration (a little troublesome).
2. Set parameter options
Enter your own mailbox to receive files. Others can be defaulted. In the CSR location, you can select either auto generated or self owned. However, some browsers may not be generated. Lao Zuo found the prompt "invalid CSR file" when he generated it with Firefox, and then found that there was no problem with Chrome.
3. Resolve DNS validation
The above left side selects DNS verification. Here, follow the prompts to add DNS verification. When submitting the verification, "information submission CA error, do not refresh the page, wait 10 minutes to verify" appears. Do you want to resolve the problem, then wait and see (manual verification prompt is OK).
Then Lao Zuo used file verification to test and found that it was not good. I don't know if there was something wrong with his posture? Later, Lao Zuo had time to test. According to the tips on the tool website, if you pass the verification, you can download the certificate file directly. You can simply refer to Nginx or Apache system configuration later.
