https://blog.margrop.net/en/tag/ssl/ Recent content in SSL on Margrop Blog Hugo -- gohugo.io en-US Wed, 03 Jul 2024 15:32:41 +0800 https://blog.margrop.net/en/post/setting-up-v2ray-and-caddy-on-alpine-linux-lxc-container/ Wed, 03 Jul 2024 15:32:41 +0800 https://blog.margrop.net/en/post/setting-up-v2ray-and-caddy-on-alpine-linux-lxc-container/ Preface In the modern Internet environment, proxy services are becoming more and more important, especially when it is necessary to break through geographical restrictions and improve privacy protection. This article will introduce in detail how to use V2Ray and Caddy to build an SSL WebSocket proxy service provided through IPv6 and domain name on the LXC container of the Alpine Linux 3.19 operating system. Environment preparation Make sure your LXC container is running and has an IPv6 address assigned. https://blog.margrop.net/en/post/lets-encrypt-sync-https-cert-to-pve-and-dsm/ Tue, 02 Feb 2021 19:19:38 +0800 https://blog.margrop.net/en/post/lets-encrypt-sync-https-cert-to-pve-and-dsm/ Last time we talked about Let’s Encrypt通过DNS TXT记录来验证域名有效性, and the last part of the article was about how to use certbot renew for automatic renewal. Then the automatic renewal is successful, how to synchronize it to PVE and DSM? Below we use a script to perform automatic synchronization. Need to configure SSH password-free login on Proxmox VE and DSM servers Automatically synchronize Proxmox VE certificate Proxmox VE synchronized to this machine Proxmox VE synchronized to LAN cp /etc/letsencrypt/live/blog. https://blog.margrop.net/en/post/lets-encrypt-use-dns-txt-acme-challenge-domain-available/ Tue, 19 Jan 2021 10:39:58 +0800 https://blog.margrop.net/en/post/lets-encrypt-use-dns-txt-acme-challenge-domain-available/ When we use letsencrypt to obtain the free HTTPS certificate, letsencrypt needs to verify the domain name. By default it authenticates like this: The certbot program places a file in the root directory of the web directory. The server of letsencrypt accesses this file through the domain name to verify that the domain name you applied for belongs to you. But sometimes we want to set HTTPS for a certain host on the intranet.