建立新的自我簽署的憑證檔

產生新的憑證檔

new-cert.key
new-cert.crt

cd /dir/to/your/cert
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout new-cert.key \
-out new-cert.crt

chown 1000.1000 new-cert.*

修改 Nginx 設定

cd /path/to/nginx
vi site-confs/default

ssl_certificate /config/keys/new-cert.crt;
ssl_certificate_key /config/keys/new-cert.key;

檢查憑證檔的內容

openssl x509 -in cert.crt -noout -text

Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:85:b0:74:34:91:da:d3:cf:c4:16:9d:50:19:75:5a:c4:b5:9d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: C = US, ST = CA, L = Carlsbad, O = Linuxserver.io, OU = LSIO Server, CN = *
Validity
Not Before: May 24 11:23:44 2020 GMT
Not After : May 22 11:23:44 2030 GMT
Subject: C = US, ST = CA, L = Carlsbad, O = Linuxserver.io, OU = LSIO Server, CN = *
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:5c:10:cc:e3:0e:69:d6:2a:b8:46:25:1e:
6b:30:2d:a9:9a:39:a2:5d:5a:f6:42:70:15:ad:f7:
68:3c:82:f3:4a:3d:40:70:cf:54:e1:36:c1:f0:e0:
...