[{"data":1,"prerenderedAt":328},["ShallowReactive",2],{"docs:\u002Fdocs\u002Fssl\u002Fdownload":3},{"id":4,"title":5,"body":6,"description":321,"extension":322,"meta":323,"navigation":147,"path":324,"seo":325,"stem":326,"__hash__":327},"docs\u002Fdocs\u002Fssl\u002Fdownload.md","证书下载与删除",{"type":7,"value":8,"toc":315},"minimark",[9,19,23,84,94,98,206,219,222,246,250,253,301,308,311],[10,11,12,13,18],"p",{},"签发成功后,证书随时可以在申请页或 ",[14,15,17],"a",{"href":16},"\u002Frecord","签发记录页"," 下载。这一篇讲清楚三个文件的用途、Nginx 部署写法,以及两种「删除」的区别。",[20,21,22],"h2",{"id":22},"下载哪些文件",[24,25,26,42],"table",{},[27,28,29],"thead",{},[30,31,32,36,39],"tr",{},[33,34,35],"th",{},"文件",[33,37,38],{},"内容",[33,40,41],{},"用途",[43,44,45,60,73],"tbody",{},[30,46,47,54,57],{},[48,49,50],"td",{},[51,52,53],"code",{},"fullchain.pem",[48,55,56],{},"证书链,含站点证书与中间证书",[48,58,59],{},"绝大多数服务器软件的证书配置项用这个",[30,61,62,67,70],{},[48,63,64],{},[51,65,66],{},"privkey.pem",[48,68,69],{},"私钥",[48,71,72],{},"与证书链配对的私钥,妥善保管,不要外泄",[30,74,75,78,81],{},[48,76,77],{},"全部压缩包",[48,79,80],{},"上面两个文件的 zip 整包",[48,82,83],{},"想一次性拿走时用",[85,86,89],"callout",{"title":87,"type":88},"私钥安全","warning",[10,90,91,93],{},[51,92,66],{}," 只属于你自己:不要提交到代码仓库、不要发到群里。泄露私钥等于泄露 HTTPS 身份,应当重新签发并替换。",[20,95,97],{"id":96},"nginx-部署示例","Nginx 部署示例",[99,100,105],"pre",{"className":101,"code":102,"language":103,"meta":104,"style":104},"language-nginx shiki shiki-themes github-dark","server {\n    listen 443 ssl;\n    server_name example.com;\n\n    ssl_certificate     \u002Fetc\u002Fnginx\u002Fssl\u002Ffullchain.pem;\n    ssl_certificate_key \u002Fetc\u002Fnginx\u002Fssl\u002Fprivkey.pem;\n\n    location \u002F {\n        root \u002Fvar\u002Fwww\u002Fhtml;\n    }\n}\n","nginx","",[51,106,107,120,133,142,149,158,167,172,185,194,200],{"__ignoreMap":104},[108,109,112,116],"span",{"class":110,"line":111},"line",1,[108,113,115],{"class":114},"snl16","server",[108,117,119],{"class":118},"s95oV"," {\n",[108,121,123,126,130],{"class":110,"line":122},2,[108,124,125],{"class":114},"    listen ",[108,127,129],{"class":128},"sDLfK","443",[108,131,132],{"class":118}," ssl;\n",[108,134,136,139],{"class":110,"line":135},3,[108,137,138],{"class":114},"    server_name ",[108,140,141],{"class":118},"example.com;\n",[108,143,145],{"class":110,"line":144},4,[108,146,148],{"emptyLinePlaceholder":147},true,"\n",[108,150,152,155],{"class":110,"line":151},5,[108,153,154],{"class":114},"    ssl_certificate ",[108,156,157],{"class":118},"    \u002Fetc\u002Fnginx\u002Fssl\u002Ffullchain.pem;\n",[108,159,161,164],{"class":110,"line":160},6,[108,162,163],{"class":114},"    ssl_certificate_key ",[108,165,166],{"class":118},"\u002Fetc\u002Fnginx\u002Fssl\u002Fprivkey.pem;\n",[108,168,170],{"class":110,"line":169},7,[108,171,148],{"emptyLinePlaceholder":147},[108,173,175,178,182],{"class":110,"line":174},8,[108,176,177],{"class":114},"    location",[108,179,181],{"class":180},"svObZ"," \u002F ",[108,183,184],{"class":118},"{\n",[108,186,188,191],{"class":110,"line":187},9,[108,189,190],{"class":114},"        root ",[108,192,193],{"class":118},"\u002Fvar\u002Fwww\u002Fhtml;\n",[108,195,197],{"class":110,"line":196},10,[108,198,199],{"class":118},"    }\n",[108,201,203],{"class":110,"line":202},11,[108,204,205],{"class":118},"}\n",[10,207,208,209,212,213,215,216,218],{},"上传两个文件到服务器后重载 Nginx(",[51,210,211],{},"nginx -s reload",")即可。其他服务器软件同理:证书项选 ",[51,214,53],{},"(整链),私钥项选 ",[51,217,66],{},"。",[20,220,221],{"id":221},"有效期与续期",[223,224,225,234],"ul",{},[226,227,228,229,233],"li",{},"签发的是 Let's Encrypt 证书,有效期 ",[230,231,232],"strong",{},"90 天",",到期时间在签发记录里可以直接看到。",[226,235,236,237,240,241,245],{},"续期方式就是",[230,238,239],{},"重新签发",":到期前在 ",[14,242,244],{"href":243},"\u002Fssl","申请页"," 对同一域名再申请一次(已托管域名全程自动),新证书下载后替换服务器上的旧文件即可。",[20,247,249],{"id":248},"两种删除的区别","两种「删除」的区别",[10,251,252],{},"平台里删除分两个动作,作用对象完全不同:",[24,254,255,271],{},[27,256,257],{},[30,258,259,262,265,268],{},[33,260,261],{},"动作",[33,263,264],{},"位置",[33,266,267],{},"作用",[33,269,270],{},"可逆性",[43,272,273,287],{},[30,274,275,278,281,284],{},[48,276,277],{},"删除证书文件",[48,279,280],{},"记录的「删除证书」按钮",[48,282,283],{},"删除签发机上保存的证书文件,记录仍显示并标记「证书已删除」",[48,285,286],{},"不可逆,文件删了只能重新签发",[30,288,289,292,295,298],{},[48,290,291],{},"删除签发记录",[48,293,294],{},"记录的「删除记录」菜单项",[48,296,297],{},"仅让这条记录从你的列表里消失(软删除),签发机文件不受影响",[48,299,300],{},"不可恢复,列表没有回收站",[85,302,305],{"title":303,"type":304},"证书已删除之后","info",[10,306,307],{},"一条成功记录被删除证书文件后,列表里仍能看到它并带「证书已删除」标记,但下载与重复删除会被拦截。想再要证书,重新申请一张即可。",[10,309,310],{},"删除签发记录只是整理列表的手段:误删了也不会有人拿着你的证书做什么,签发机上的文件还在;反过来,如果只是想清掉服务器上的证书文件,用「删除证书」就够了,不需要动记录。",[312,313,314],"style",{},"html pre.shiki code .snl16, html code.shiki .snl16{--shiki-default:#F97583}html pre.shiki code .s95oV, html code.shiki .s95oV{--shiki-default:#E1E4E8}html pre.shiki code .sDLfK, html code.shiki .sDLfK{--shiki-default:#79B8FF}html pre.shiki code .svObZ, html code.shiki .svObZ{--shiki-default:#B392F0}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}",{"title":104,"searchDepth":135,"depth":135,"links":316},[317,318,319,320],{"id":22,"depth":122,"text":22},{"id":96,"depth":122,"text":97},{"id":221,"depth":122,"text":221},{"id":248,"depth":122,"text":249},"fullchain.pem 与 privkey.pem 分别用在哪、Nginx 部署示例、证书有效期与续期方式,以及「删除证书文件」和「删除签发记录」两种删除的区别。","md",{},"\u002Fdocs\u002Fssl\u002Fdownload",{"title":5,"description":321},"docs\u002Fssl\u002Fdownload","FQKR_OvAsCyatgwsirqELSQHbcbun06AgiKnr3yheSw",1793537574521]