mirrors/jsproxy
1
0
Fork 0
mirror of https://github.com/EtherDream/jsproxy synced 2024-11-22 01:49:01 +00:00
Code Issues Packages Projects Releases Wiki Activity

去除 RSA 证书，只生成 ECC 证书

Browse Source
This commit is contained in:
zjcqoo 2019-04-26 11:15:12 +08:00
parent 4ff5f3fb12
commit a7652f4cb1
1 changed files with 2 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
gen-cert/gen.sh
View File

@ -4,30 +4,15 @@ source ./dnsconf
mkdir -p ../cert/$DOMAIN
$ACME \
--issue \
--dns $DNS_ID \
-d *.$DOMAIN
# 使用 Service Worker 的基本是高版本浏览器和操作系统，
# 因此去除了 RSA，只用 ECC 算法。
$ACME \
--issue \
--dns $DNS_ID \
-d *.$DOMAIN \
--keylength ec-256
$ACME \
--install-cert -d *.$DOMAIN \
--key-file ../cert/$DOMAIN/rsa.key \
--fullchain-file ../cert/$DOMAIN/rsa.cer
$ACME \
--install-cert -d *.$DOMAIN --ecc \
--key-file ../cert/$DOMAIN/ecc.key \
--fullchain-file ../cert/$DOMAIN/ecc.cer
echo "
ssl_certificate cert/$DOMAIN/rsa.cer;
ssl_certificate_key cert/$DOMAIN/rsa.key;
ssl_certificate cert/$DOMAIN/ecc.cer;
ssl_certificate_key cert/$DOMAIN/ecc.key;
" > ../cert/$DOMAIN/ngx.conf