{"id":27018,"date":"2023-12-23T05:28:51","date_gmt":"2022-11-16T17:30:33","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%a4%87%e5%bf%98%e5%bd%95%ef%bc%9a%e5%9c%a8debian8%ef%bc%88jessie%ef%bc%89%e4%b8%8a%e4%bd%bf%e7%94%a8letsencrypt%ef%bc%88%e4%bb%8e%e5%9f%9f%e5%90%8d%e6%b3%a8%e5%86%8c%e5%bc%80%e5%a7%8b%ef%bc%89-2\/"},"modified":"2025-08-12T00:19:24","modified_gmt":"2025-08-11T16:19:24","slug":"%e5%a4%87%e5%bf%98%e5%bd%95%ef%bc%9a%e5%9c%a8debian8%ef%bc%88jessie%ef%bc%89%e4%b8%8a%e4%bd%bf%e7%94%a8letsencrypt%ef%bc%88%e4%bb%8e%e5%9f%9f%e5%90%8d%e6%b3%a8%e5%86%8c%e5%bc%80%e5%a7%8b%ef%bc%89-2","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%a4%87%e5%bf%98%e5%bd%95%ef%bc%9a%e5%9c%a8debian8%ef%bc%88jessie%ef%bc%89%e4%b8%8a%e4%bd%bf%e7%94%a8letsencrypt%ef%bc%88%e4%bb%8e%e5%9f%9f%e5%90%8d%e6%b3%a8%e5%86%8c%e5%bc%80%e5%a7%8b%ef%bc%89-2\/","title":{"rendered":"\u5907\u5fd8\u5f55\uff1a\u5728Debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528LetsEncrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09"},"content":{"rendered":"

syakesaba.com
\n\u6211\u5c1d\u8bd5\u4e86Let’sEncrypt\uff0c\u5e76\u8bb0\u5f55\u4e86\u5927\u7ea62\u5c0f\u65f6\u7684\u8fc7\u7a0b\u3002<\/p>\n

\u83b7\u5f97\u57df\u540d\u5728\u304a\u540d\u524d.com\u8d2d\u4e70\u57df\u540d\uff0c\u5e76\u4f7f\u7528DNS\u670d\u52a1\u3002\u8bbe\u7f6e\u5982\u4e0b\u3002<\/p>\n
$ORIGIN syakesaba.com.\r\n$TTL 86400\r\nsyakesaba.com. 86400 IN SOA 01.dnsv.jp. hostmaster.dnsv.jp. 1486869463 3600 900 604800 300\r\nsyakesaba.com. 86400 IN NS 01.dnsv.jp.\r\nsyakesaba.com. 86400 IN NS 02.dnsv.jp.\r\nsyakesaba.com. 86400 IN NS 03.dnsv.jp.\r\nsyakesaba.com. 86400 IN NS 04.dnsv.jp.\r\nsyakesaba.com. 3600 IN A 153.120.17.24\r\nmail.syakesaba.com. 3600 IN A 153.120.17.24\r\nwww.syakesaba.com. 3600 IN A 153.120.17.24\r\nsyakesaba.com. 3600 IN MX 10 mail.syakesaba.com.\r\nsyakesaba.com. 3600 IN TXT \"v=spf1 +ip4:153.120.17.24 ~all\"\r\n<\/code><\/pre>\n
\u9996\u5e741,123\u65e5\u5143\uff0c\u968f\u540e\u6bcf\u5e74\u5ea6\u9010\u6e10\u589e\u52a0\u3002<\/p>\n
\u83b7\u53d6\u670d\u52a1\u5668\u6211\u5728\u6a31\u82b1VPS\u8d2d\u4e70\u4e86\u4e00\u4e2a\u56fa\u5b9aIP\u5730\u5740\uff1a153.120.17.24\u3002
\n\u89c4\u683c\u4e3adebian8 jessie 1\u6838\u5fc3\u300120GB\u786c\u76d8\u30011GB\u5185\u5b58\u3002\u8bbe\u7f6e\u975e\u5e38\u968f\u610f\u3002
\n\u6211\u9884\u8ba1\u6bcf\u6708\u8d39\u7528\u5c06\u4f4e\u4e8e2000\u65e5\u5143\u3002<\/p>\n
\u4e3b\u673a\u540d\u7684\u8bbe\u5b9a\u5982\u4e0b<\/p>\n
#vi \/etc\/hostname\r\nsyakesaba.com\r\n\r\n#vi \/etc\/hosts\r\n127.0.0.1       localhost syakesaba.com www.syakesaba.com\r\n153.120.17.24 syakesaba.com www.syakesaba.com\r\n# The following lines are desirable for IPv6 capable hosts\r\n::1     ip6-localhost ip6-loopback\r\nfe00::0 localhost ip6-localnet ip6-loopback\r\nff02::1 ip6-allnodes\r\nff02::2 ip6-allrouters\r\n<\/code><\/pre>\n
\u83b7\u53d6\u548c\u914d\u7f6enginx<\/p>\n
wget \"http:\/\/nginx.org\/keys\/nginx_signing.key\"\r\nsudo apt-key add nginx_signing.key\r\nsudo echo \"\r\ndeb http:\/\/nginx.org\/packages\/debian\/ jessie nginx\r\ndeb-src http:\/\/nginx.org\/packages\/debian\/ jessie nginx\r\n\" >> \/etc\/apt\/sources.list\r\nsudo apt-get update\r\nsudo apt-get install nginx\r\n<\/code><\/pre>\n
echo \"\r\n[Unit]\r\nDescription=The NGINX HTTP and reverse proxy server\r\nAfter=syslog.target network.target remote-fs.target nss-lookup.target\r\n\r\n[Service]\r\nType=forking\r\nPIDFile=\/run\/nginx.pid\r\nExecStartPre=\/usr\/sbin\/nginx -t -c \/etc\/nginx\/nginx.conf\r\nExecStart=\/usr\/sbin\/nginx -c \/etc\/nginx\/nginx.conf\r\nExecReload=\/bin\/kill -s HUP $MAINPID\r\nExecStop=\/bin\/kill -s QUIT $MAINPID\r\nPrivateTmp=true\r\n\r\n[Install]\r\nWantedBy=multi-user.target\r\n\" > \/lib\/systemd\/system\/nginx.service\r\n\r\n<\/code><\/pre>\n
\u5c06\u5176\u4fee\u6539\u4e3a\u53ef\u4ee5\u901a\u8fc7systemctl\u8fdb\u884c\u5904\u7406<\/p>\n
systemctl unmask nginx\r\nsystemctl enable nginx\r\n<\/code><\/pre>\n
nginx\u7684\u9ed8\u8ba4\u4e3b\u914d\u7f6e\u6587\u4ef6\u5982\u4e0b\u6240\u793a<\/p>\n
cat \/etc\/nginx\/nginx.conf\r\n########################\r\nuser  nginx;\r\nworker_processes  1;\r\n\r\nerror_log  \/var\/log\/nginx\/error.log warn;\r\npid        \/var\/run\/nginx.pid;\r\n\r\n\r\nevents {\r\n    worker_connections  1024;\r\n}\r\n\r\n\r\nhttp {\r\n    include       \/etc\/nginx\/mime.types;\r\n    default_type  application\/octet-stream;\r\n\r\n    log_format  main  '$remote_addr - $remote_user [$time_local] \"$request\" '\r\n                      '$status $body_bytes_sent \"$http_referer\" '\r\n                      '\"$http_user_agent\" \"$http_x_forwarded_for\"';\r\n\r\n    access_log  \/var\/log\/nginx\/access.log  main;\r\n\r\n    sendfile        on;\r\n    #tcp_nopush     on;\r\n\r\n    keepalive_timeout  65;\r\n\r\n    #gzip  on;\r\n\r\n    include \/etc\/nginx\/conf.d\/*.conf;\r\n}\r\n######################\r\n<\/code><\/pre>\n
Tweek\u7684\u6267\u884c\u6587\u4ef6\u63cf\u8ff0\u7b26\u7b49\u7b49\u3002<\/p>\n
echo 'fs.file-max=200000' >> \/etc\/sysctl.conf\r\n\r\n# http:\/\/qiita.com\/iwai\/items\/1e29adbdd269380167d2\r\necho 'net.ipv4.ip_local_port_range=18000 65535' >> \/etc\/sysctl.conf\r\necho 'net.ipv4.tcp_tw_reuse=1' >> \/etc\/sysctl.conf\r\necho 'net.ipv4.ip_dynaddr=1' >> \/etc\/sysctl.conf\r\necho 'net.ipv4.tcp_rfc1337=1' >> \/etc\/sysctl.conf\r\necho 'net.ipv4.tcp_fin_timeout=10' >> \/etc\/sysctl.conf\r\necho 'net.ipv4.tcp_keepalive_probes=5' >> \/etc\/sysctl.conf\r\necho 'net.ipv4.tcp_slow_start_after_idle=0' >> \/etc\/sysctl.conf\r\necho 'net.ipv4.tcp_max_syn_backlog=1024' >> \/etc\/sysctl.conf\r\necho 'net.core.somaxconn=65535' >> \/etc\/sysctl.conf\r\n\r\nsysctl -p\r\n<\/code><\/pre>\n
Tweek\u7684\u6267\u884c\uff08\u5728nginx\u7aef\uff09<\/p>\n
vi \/etc\/nginx\/nginx.conf\r\n# XXX:APPEND\r\nworker_processes auto; #XXX num of core\r\nworker_rlimit_nofile 640; #XXX calc: con128 * worker5 = 640\r\nworker_priority -5; #XXX MGMT\r\n#worker_cpu_affinity 01 10; #XXX i have no core\r\n#XXX:APPEND\r\nevents {\r\n    multi_accept on; #XXX better as it is\r\n    worker_connections 128; #XXX num core *128?\r\n}\r\n<\/code><\/pre>\n
\u8bd5\u7740\u770b\u770b\u662f\u5426\u52a8\u5f97\u4e86\u3002<\/p>\n
systemctl restart nginx\r\n<\/code><\/pre>\n
\u66f4\u591a\u626d\u8116\u5b50<\/p>\n
chmod 755 \/var\/log\/nginx\r\n\r\nvi \/etc\/nginx\/nginx.conf\r\n#XXX:APPEND\r\nhttp {\r\n    server_tokens off;\r\n}\r\n<\/code><\/pre>\n
\u8bd5\u8bd5\u770b\u662f\u5426\u80fd\u52a8\u3002<\/p>\n
systemctl restart nginx\r\n<\/code><\/pre>\n
certbot\u7684\u5b89\u88c5<\/p>\n
echo 'deb http:\/\/ftp.debian.org\/debian jessie-backports main' | sudo tee \/etc\/apt\/sources.list.d\/backports.list\r\nsudo apt-get update\r\nsudo apt-get install certbot -t jessie-backports\r\n<\/code><\/pre>\n
\u66f4\u6539\u5185\u5bb9\u6587\u4ef6\u5939<\/p>\n
vi \/etc\/nginx\/conf.d\/default.conf\r\n#REPLACE\r\nserver {\r\n        server_name localhost syakesaba.com www.syakesaba.com #XXX\r\n        #XXX\r\n        location \/ {\r\n                root \/var\/www\/html\r\n        }\r\n}\r\n#APPEND\r\nserver {\r\n        #XXX\r\n        location ~ \/.well-known {\r\n                root \/var\/www\/html\r\n                allow all;\r\n        }\r\n}\r\n\r\nmkdir -p \/var\/www\/html\r\nchown -R nginx:nginx \/var\/www\/html\r\n<\/code><\/pre>\n
\u5c1d\u8bd5\u770b\u662f\u5426\u79fb\u52a8<\/p>\n
sudo systemctl restart nginx\r\n<\/code><\/pre>\n
Certbot\u6fc0\u6d3b<\/p>\n
sudo certbot certonly -a webroot --webroot-path=\/var\/www\/html  -d syakesaba.com -d www.syakesaba.com\r\n\r\n#IMPORTANT NOTES:\r\n# - Congratulations! Your certificate and chain have been saved at\r\n#   \/etc\/letsencrypt\/live\/syakesaba.com\/fullchain.pem. Your cert will\r\n#  expire on 2017-05-13. To obtain a new or tweaked version of this\r\n# certificate in the future, simply run certbot again. To\r\n# non-interactively renew *all* of your certificates, run \"certbot\r\n#  renew\"\r\n# - If you like Certbot, please consider supporting our work by:\r\n#\r\n#   Donating to ISRG \/ Let's Encrypt:   https:\/\/letsencrypt.org\/donate\r\n#   Donating to EFF:                    https:\/\/eff.org\/donate-le\r\n\r\nls -la \/etc\/letsencrypt\/live\/syakesaba.com\/\r\n#\u5408\u8a08 8\r\n#drwxr-xr-x 2 root root 4096  2\u6708 12 13:17 .\r\n#drwx------ 3 root root 4096  2\u6708 12 13:17 ..\r\n#lrwxrwxrwx 1 root root   37  2\u6708 12 13:17 cert.pem -> ..\/..\/archive\/syakesaba.com\/cert1.pem\r\n#lrwxrwxrwx 1 root root   38  2\u6708 12 13:17 chain.pem -> ..\/..\/archive\/syakesaba.com\/chain1.pem\r\n#lrwxrwxrwx 1 root root   42  2\u6708 12 13:17 fullchain.pem -> ..\/..\/archive\/syakesaba.com\/fullchain1.pem\r\n#lrwxrwxrwx 1 root root   40  2\u6708 12 13:17 privkey.pem -> ..\/..\/archive\/syakesaba.com\/privkey1.pem\r\n<\/code><\/pre>\n
SSL\u7684DH\u503c\u751f\u6210<\/p>\n
openssl dhparam -out \/etc\/ssl\/certs\/dhparam.pem 2048\r\n<\/code><\/pre>\n
\u5c06SSL\u542f\u7528\u5230nginx\u4e2d\u3002<\/p>\n
vi \/etc\/nginx\/conf.d\/ssl-syakesaba.com.conf\r\n###\r\nssl_certificate \/etc\/letsencrypt\/live\/syakesaba.com\/fullchain.pem;\r\nssl_certificate_key \/etc\/letsencrypt\/live\/syakesaba.com\/privkey.pem;\r\n###\r\n\r\nvi \/etc\/nginx\/conf.d\/ssl.conf\r\n###\r\n# from https:\/\/cipherli.st\/ and https:\/\/raymii.org\/s\/tutorials\/Strong_SSL_Security_On_nginx.html\r\n\r\nssl_protocols TLSv1 TLSv1.1 TLSv1.2;\r\nssl_prefer_server_ciphers on;\r\nssl_ciphers \"EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH\";\r\nssl_ecdh_curve secp384r1;\r\nssl_session_cache shared:SSL:10m;\r\nssl_session_tickets off;\r\nssl_stapling on;\r\nssl_stapling_verify on;\r\nresolver 8.8.8.8 8.8.4.4 valid=300s;\r\nresolver_timeout 5s;\r\n# Disable preloading HSTS for now.  You can use the commented out header line that includes\r\n# the \"preload\" directive if you understand the implications.\r\n#add_header Strict-Transport-Security \"max-age=63072000; includeSubdomains; preload\";\r\nadd_header Strict-Transport-Security \"max-age=63072000; includeSubdomains\";\r\nadd_header X-Frame-Options DENY;\r\nadd_header X-Content-Type-Options nosniff;\r\n\r\nssl_dhparam \/etc\/ssl\/certs\/dhparam.pem;\r\n###\r\n\r\nvi \/etc\/nginx\/conf.d\/default.conf\r\n#APPEND\r\nserver {\r\n    listen 443 ssl default_server; #XXX\r\n    listen [::]:443 ssl default_server; #XXX\r\n    include conf.d\/ssl-syakesaba.com.conf; #XXX\r\n    include conf.d\/ssl.conf; #XXX\r\n}\r\n<\/code><\/pre>\n
\u8bd5\u8bd5\u770b\u5b83\u80fd\u4e0d\u80fd\u52a8<\/p>\n
systemctl restart nginx\r\n<\/code><\/pre>\n
\u5b9e\u9645\u8bbf\u95ee<\/p>\n
http:\/\/www.syakesaba.com\/\r\nhttps:\/\/www.syakesaba.com\/\r\n\r\n# https:\/\/www.ssllabs.com\/ssltest\/analyze.html?d=www.syakesaba.com&latest\r\n<\/code><\/pre>\n
\u6bcf\u6708\u5b9a\u671f\u66f4\u65b0\u4e00\u6b21<\/p>\n
cat \/etc\/cron.d\/certbot\r\n###\r\n# \/etc\/cron.d\/certbot: crontab entries for the certbot package\r\n#\r\n# Upstream recommends attempting renewal twice a day\r\n#\r\n# Eventually, this will be an opportunity to validate certificates\r\n# haven't been revoked, etc.  Renewal will only occur if expiration\r\n# is within 30 days.\r\nSHELL=\/bin\/sh\r\nPATH=\/usr\/local\/sbin:\/usr\/local\/bin:\/sbin:\/bin:\/usr\/sbin:\/usr\/bin\r\n\r\n0 *\/12 * * * root test -x \/usr\/bin\/certbot -a \\! -d \/run\/systemd\/system && perl -e 'sleep int(rand(3600))' && certbot -q renew\r\n###\r\n\r\nvi  \/etc\/cron.d\/certbot\r\n#REPLACE\r\n0 *\/12 * * * root test -x \/usr\/bin\/certbot -a \\! -d \/run\/systemd\/system && perl -e 'sleep int(rand(3600))' && certbot -q renew && perl -e 'sleep int(rand(3600))'  && \/bin\/systemctl restart nginx\r\n<\/code><\/pre>\n
\u7ed3\u679c (ji\u00e9 gu\u01d2)<\/p>\n
\"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8\u6211\u4e0d\u4e86\u89e3\u4f7f\u7528\u8303\u56f4\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
syakesaba.com \u6211\u5c1d\u8bd5\u4e86Let’sEncrypt\uff0c\u5e76\u8bb0\u5f55\u4e86\u5927\u7ea62\u5c0f\u65f6\u7684\u8fc7\u7a0b\u3002 \u83b7\u5f97\u57df\u540d […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[227],"class_list":["post-27018","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-227"],"yoast_head":"\n\u5907\u5fd8\u5f55\uff1a\u5728Debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528LetsEncrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09 - Blog - Silicon Cloud<\/title>\n<meta name=\"description\" content=\"\u5173\u4e8e\u5907\u5fd8\u5f55\uff1a\u5728Debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528LetsEncrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09\u7684\u6280\u672f\u6587\u7ae0\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u5907\u5fd8\u5f55\uff1a\u5728debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528letsencrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09-2\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u5907\u5fd8\u5f55\uff1a\u5728Debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528LetsEncrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09\" \/>\n<meta property=\"og:description\" content=\"\u5173\u4e8e\u5907\u5fd8\u5f55\uff1a\u5728Debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528LetsEncrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09\u7684\u6280\u672f\u6587\u7ae0\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u5907\u5fd8\u5f55\uff1a\u5728debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528letsencrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09-2\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2022-11-16T17:30:33+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-11T16:19:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657c1f8ad0c9c81e0f5baecf\/51-0.png\" \/>\n<meta name=\"author\" content=\"\u97f5, \u79d1\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u97f5, \u79d1\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%a4%87%e5%bf%98%e5%bd%95%ef%bc%9a%e5%9c%a8debian8%ef%bc%88jessie%ef%bc%89%e4%b8%8a%e4%bd%bf%e7%94%a8letsencrypt%ef%bc%88%e4%bb%8e%e5%9f%9f%e5%90%8d%e6%b3%a8%e5%86%8c%e5%bc%80%e5%a7%8b%ef%bc%89-2\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%a4%87%e5%bf%98%e5%bd%95%ef%bc%9a%e5%9c%a8debian8%ef%bc%88jessie%ef%bc%89%e4%b8%8a%e4%bd%bf%e7%94%a8letsencrypt%ef%bc%88%e4%bb%8e%e5%9f%9f%e5%90%8d%e6%b3%a8%e5%86%8c%e5%bc%80%e5%a7%8b%ef%bc%89-2\/\",\"name\":\"\u5907\u5fd8\u5f55\uff1a\u5728Debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528LetsEncrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2022-11-16T17:30:33+00:00\",\"dateModified\":\"2025-08-11T16:19:24+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/6530331a63adef3b3443a1fab53a0e6e\"},\"description\":\"\u5173\u4e8e\u5907\u5fd8\u5f55\uff1a\u5728Debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528LetsEncrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09\u7684\u6280\u672f\u6587\u7ae0\",\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%a4%87%e5%bf%98%e5%bd%95%ef%bc%9a%e5%9c%a8debian8%ef%bc%88jessie%ef%bc%89%e4%b8%8a%e4%bd%bf%e7%94%a8letsencrypt%ef%bc%88%e4%bb%8e%e5%9f%9f%e5%90%8d%e6%b3%a8%e5%86%8c%e5%bc%80%e5%a7%8b%ef%bc%89-2\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%a4%87%e5%bf%98%e5%bd%95%ef%bc%9a%e5%9c%a8debian8%ef%bc%88jessie%ef%bc%89%e4%b8%8a%e4%bd%bf%e7%94%a8letsencrypt%ef%bc%88%e4%bb%8e%e5%9f%9f%e5%90%8d%e6%b3%a8%e5%86%8c%e5%bc%80%e5%a7%8b%ef%bc%89-2\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%a4%87%e5%bf%98%e5%bd%95%ef%bc%9a%e5%9c%a8debian8%ef%bc%88jessie%ef%bc%89%e4%b8%8a%e4%bd%bf%e7%94%a8letsencrypt%ef%bc%88%e4%bb%8e%e5%9f%9f%e5%90%8d%e6%b3%a8%e5%86%8c%e5%bc%80%e5%a7%8b%ef%bc%89-2\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u5907\u5fd8\u5f55\uff1a\u5728Debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528LetsEncrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/6530331a63adef3b3443a1fab53a0e6e\",\"name\":\"\u97f5, \u79d1\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/429ccb39b3fff5188bc17986222cfb0936cbadb8cc933cff04ab5ca01bd30a08?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/429ccb39b3fff5188bc17986222cfb0936cbadb8cc933cff04ab5ca01bd30a08?s=96&d=mm&r=g\",\"caption\":\"\u97f5, \u79d1\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/yunke\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%a4%87%e5%bf%98%e5%bd%95%ef%bc%9a%e5%9c%a8debian8%ef%bc%88jessie%ef%bc%89%e4%b8%8a%e4%bd%bf%e7%94%a8letsencrypt%ef%bc%88%e4%bb%8e%e5%9f%9f%e5%90%8d%e6%b3%a8%e5%86%8c%e5%bc%80%e5%a7%8b%ef%bc%89-2\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u5907\u5fd8\u5f55\uff1a\u5728Debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528LetsEncrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09 - Blog - Silicon Cloud","description":"\u5173\u4e8e\u5907\u5fd8\u5f55\uff1a\u5728Debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528LetsEncrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09\u7684\u6280\u672f\u6587\u7ae0","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u5907\u5fd8\u5f55\uff1a\u5728debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528letsencrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09-2\/","og_locale":"zh_CN","og_type":"article","og_title":"\u5907\u5fd8\u5f55\uff1a\u5728Debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528LetsEncrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09","og_description":"\u5173\u4e8e\u5907\u5fd8\u5f55\uff1a\u5728Debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528LetsEncrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09\u7684\u6280\u672f\u6587\u7ae0","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u5907\u5fd8\u5f55\uff1a\u5728debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528letsencrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09-2\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2022-11-16T17:30:33+00:00","article_modified_time":"2025-08-11T16:19:24+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657c1f8ad0c9c81e0f5baecf\/51-0.png"}],"author":"\u97f5, \u79d1","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u97f5, \u79d1","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"1 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%a4%87%e5%bf%98%e5%bd%95%ef%bc%9a%e5%9c%a8debian8%ef%bc%88jessie%ef%bc%89%e4%b8%8a%e4%bd%bf%e7%94%a8letsencrypt%ef%bc%88%e4%bb%8e%e5%9f%9f%e5%90%8d%e6%b3%a8%e5%86%8c%e5%bc%80%e5%a7%8b%ef%bc%89-2\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%a4%87%e5%bf%98%e5%bd%95%ef%bc%9a%e5%9c%a8debian8%ef%bc%88jessie%ef%bc%89%e4%b8%8a%e4%bd%bf%e7%94%a8letsencrypt%ef%bc%88%e4%bb%8e%e5%9f%9f%e5%90%8d%e6%b3%a8%e5%86%8c%e5%bc%80%e5%a7%8b%ef%bc%89-2\/","name":"\u5907\u5fd8\u5f55\uff1a\u5728Debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528LetsEncrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2022-11-16T17:30:33+00:00","dateModified":"2025-08-11T16:19:24+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/6530331a63adef3b3443a1fab53a0e6e"},"description":"\u5173\u4e8e\u5907\u5fd8\u5f55\uff1a\u5728Debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528LetsEncrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09\u7684\u6280\u672f\u6587\u7ae0","breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%a4%87%e5%bf%98%e5%bd%95%ef%bc%9a%e5%9c%a8debian8%ef%bc%88jessie%ef%bc%89%e4%b8%8a%e4%bd%bf%e7%94%a8letsencrypt%ef%bc%88%e4%bb%8e%e5%9f%9f%e5%90%8d%e6%b3%a8%e5%86%8c%e5%bc%80%e5%a7%8b%ef%bc%89-2\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e5%a4%87%e5%bf%98%e5%bd%95%ef%bc%9a%e5%9c%a8debian8%ef%bc%88jessie%ef%bc%89%e4%b8%8a%e4%bd%bf%e7%94%a8letsencrypt%ef%bc%88%e4%bb%8e%e5%9f%9f%e5%90%8d%e6%b3%a8%e5%86%8c%e5%bc%80%e5%a7%8b%ef%bc%89-2\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%a4%87%e5%bf%98%e5%bd%95%ef%bc%9a%e5%9c%a8debian8%ef%bc%88jessie%ef%bc%89%e4%b8%8a%e4%bd%bf%e7%94%a8letsencrypt%ef%bc%88%e4%bb%8e%e5%9f%9f%e5%90%8d%e6%b3%a8%e5%86%8c%e5%bc%80%e5%a7%8b%ef%bc%89-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u5907\u5fd8\u5f55\uff1a\u5728Debian8\uff08jessie\uff09\u4e0a\u4f7f\u7528LetsEncrypt\uff08\u4ece\u57df\u540d\u6ce8\u518c\u5f00\u59cb\uff09"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/6530331a63adef3b3443a1fab53a0e6e","name":"\u97f5, \u79d1","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/429ccb39b3fff5188bc17986222cfb0936cbadb8cc933cff04ab5ca01bd30a08?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/429ccb39b3fff5188bc17986222cfb0936cbadb8cc933cff04ab5ca01bd30a08?s=96&d=mm&r=g","caption":"\u97f5, \u79d1"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/yunke\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%a4%87%e5%bf%98%e5%bd%95%ef%bc%9a%e5%9c%a8debian8%ef%bc%88jessie%ef%bc%89%e4%b8%8a%e4%bd%bf%e7%94%a8letsencrypt%ef%bc%88%e4%bb%8e%e5%9f%9f%e5%90%8d%e6%b3%a8%e5%86%8c%e5%bc%80%e5%a7%8b%ef%bc%89-2\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/27018","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=27018"}],"version-history":[{"count":3,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/27018\/revisions"}],"predecessor-version":[{"id":111058,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/27018\/revisions\/111058"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=27018"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=27018"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=27018"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}