{"topic":{"id":14904,"title":"给 IP 签证书：Let's Encrypt 划时代的新功能","slug":"topic","categoryId":4,"createdAt":"2025-07-09 08:25:57.709228","bumpedAt":"2025-07-11 14:16:47.003405","views":157,"postsCount":4,"highestPostNumber":4,"likeCount":3,"closed":false,"pinned":false,"pinnedGlobally":false,"pinnedAt":null,"pinnedUntil":null,"isBanner":false,"excerpt":"https://letsencrypt.org/2025/07/01/issuing-our-first-ip-address-certificate/ 使用方法： go install github.com/go-acme/lego/v4/cmd/lego@master # stop :80 web server lego -http --email=\"<YOUR EMAIL>\" --domains=\"<YOUR I…","deletedAt":null,"isAnonymous":false,"category":{"id":4,"name":"谈笑风生","slug":"general","color":"25AAE2"},"author":{"id":4668,"username":"IO","name":null,"avatarUrl":"/uploads/image/86/f2/86f267c0aaa73835a999b7cc3a7e7a701605574eda9a2c2a56f5ddbbba64d1a9.avif"},"tags":[]},"posts":[{"id":60321,"postNumber":1,"raw":"https://letsencrypt.org/2025/07/01/issuing-our-first-ip-address-certificate/\n\n### 使用方法：\n\n```\ngo install github.com/go-acme/lego/v4/cmd/lego@master\n# stop :80 web server\nlego -http --email=\"\" --domains=\"\" --disable-cn=true --accept-tos=true --server=https://acme-staging-v02.api.letsencrypt.org/directory run --profile=shortlived\n\n# 配合 caddy 使用 tls /etc/caddy/ssl/.fullchain.crt /etc/caddy/ssl/.key\nmkdir /etc/caddy/ssl\ncp /root/.lego/certificates/.* /etc/caddy/ssl\ncd /etc/caddy/ssl\ncat .crt .issuer.crt > .fullchain.crt\n\n```\n\nstaging root CA 请勿在生产使用：\n\nhttps://letsencrypt.org/docs/staging-environment/\n\n正式推出还得等等.\n\n### 附记\n\nLE 经常引领 CA 界的创新，反观卖证书挣钱的些商业公司不思进取\n\n2017 年使免费 Wildcard 证书成为可能：\nhttps://letsencrypt.org/2017/07/06/wildcard-certificates-coming-jan-2018/","cooked":"

\n $\"\"$ \n letsencrypt.org\n

\n $\"\"$ \n

We've Issued Our First IP Address Certificate

Update: January 15, 2026\nSix-day and IP address certificates are now generally available. See 6-day and IP Address Certificates are Generally Available for details.\nSince Let’s Encrypt started issuing certificates in 2015, people have repeatedly requested the ability to get certificates for IP addresses, an option that only a few certificate authorities have offered. Until now, they’ve had to look elsewhere, because we haven’t provided that feature.\nToday, we’ve issued our first certificate for an IP address, as we announced we would in January. As with other new certificate features on our engineering roadmap, we’ll now start gradually rolling out this option to more and more of our subscribers.\n

使用方法：

go install github.com/go-acme/lego/v4/cmd/lego@master\n# stop :80 web server\nlego -http --email=\"<YOUR EMAIL>\" --domains=\"<YOUR IP>\"  --disable-cn=true --accept-tos=true --server=https://acme-staging-v02.api.letsencrypt.org/directory run --profile=shortlived\n\n# 配合 caddy 使用 tls /etc/caddy/ssl/<YOUR IP>.fullchain.crt /etc/caddy/ssl/<YOUR IP>.key\nmkdir /etc/caddy/ssl\ncp /root/.lego/certificates/<YOUR IP>.* /etc/caddy/ssl\ncd /etc/caddy/ssl\ncat <YOUR IP>.crt <YOUR IP>.issuer.crt > <YOUR IP>.fullchain.crt\n\n

staging root CA 请勿在生产使用：

\n\n

正式推出还得等等.

附记

LE 经常引领 CA 界的创新，反观卖证书挣钱的些商业公司不思进取

2017 年使免费 Wildcard 证书成为可能：

\n $\"\"$ \n letsencrypt.org\n

\n $\"\"$ \n

Wildcard Certificates Coming January 2018

Update, March 13, 2018\nWildcard certificate support is live.\nLet’s Encrypt will begin issuing wildcard certificates in January of 2018. Wildcard certificates are a commonly requested feature and we understand that there are some use cases where they make HTTPS deployment easier. Our hope is that offering wildcards will help to accelerate the Web’s progress towards 100% HTTPS.\nLet’s Encrypt is currently securing 47 million domains via our fully automated DV certificate issuance and management API. This has contributed heavily to the Web going from 40% to 58% encrypted page loads since Let’s Encrypt’s service became available in December 2015. If you’re excited about wildcard availability and our mission to get to a 100% encrypted Web, we ask that you contribute to our summer fundraising campaign.\n

","createdAt":"2025-07-09 08:25:57.808244","updatedAt":"2025-07-09 08:27:28.444126","replyToPostNumber":null,"replyCount":0,"likeCount":3,"wordCount":121,"liked":false,"bookmarked":false,"polls":[],"reactions":[{"reaction":"❤️","count":3,"users":[{"id":5151,"username":"Soyo34325","name":"Soyo34325"},{"id":5351,"username":"Xrystal-line","name":"羽流弦ノ迹"},{"id":7245,"username":"anon42647320","name":null}],"hasReacted":false}],"wiki":false,"version":1,"publicVersion":1,"deletedAt":null,"isAnonymous":false,"user":{"id":4668,"username":"IO","name":null,"avatarUrl":"/uploads/image/86/f2/86f267c0aaa73835a999b7cc3a7e7a701605574eda9a2c2a56f5ddbbba64d1a9.avif","admin":true,"moderator":false,"signatureRaw":"","signatureCooked":null}},{"id":60671,"postNumber":2,"raw":"用了很久 Caddy，除掉做简单的 reverse_proxy 和自动续签证书外\n感觉还是没得 Nginx 灵活和稳定\n之前还出现过内存泄漏的情况 :bilibili_aojiao:","cooked":"

用了很久 Caddy，除掉做简单的 reverse_proxy 和自动续签证书外
\n感觉还是没得 Nginx 灵活和稳定
\n之前还出现过内存泄漏的情况 $\":bilibili_aojiao:\"$

\n","createdAt":"2025-07-11 14:13:00.175536","updatedAt":"2025-07-11 14:13:00.175536","replyToPostNumber":null,"replyCount":1,"likeCount":0,"wordCount":46,"liked":false,"bookmarked":false,"polls":[],"reactions":[],"wiki":false,"version":1,"publicVersion":1,"deletedAt":null,"isAnonymous":false,"user":{"id":4668,"username":"IO","name":null,"avatarUrl":"/uploads/image/86/f2/86f267c0aaa73835a999b7cc3a7e7a701605574eda9a2c2a56f5ddbbba64d1a9.avif","admin":true,"moderator":false,"signatureRaw":"","signatureCooked":null}},{"id":60672,"postNumber":3,"raw":"你站用的就是 caddy+nginx","cooked":"

你站用的就是 caddy+nginx

\n","createdAt":"2025-07-11 14:15:51.293033","updatedAt":"2025-07-11 14:15:51.293033","replyToPostNumber":2,"replyCount":1,"likeCount":0,"wordCount":7,"liked":false,"bookmarked":false,"polls":[],"reactions":[],"wiki":false,"version":1,"publicVersion":1,"deletedAt":null,"isAnonymous":false,"user":{"id":4668,"username":"IO","name":null,"avatarUrl":"/uploads/image/86/f2/86f267c0aaa73835a999b7cc3a7e7a701605574eda9a2c2a56f5ddbbba64d1a9.avif","admin":true,"moderator":false,"signatureRaw":"","signatureCooked":null}},{"id":60673,"postNumber":4,"raw":"我就是因为你站才入坑 Caddy 的 :grinning_face_with_sweat:\n后来一发不可收拾，只要不是公司的生产环境统统 Caddy 梭哈 :grinning_face_with_sweat:","cooked":"

我就是因为你站才入坑 Caddy 的 😅
\n后来一发不可收拾，只要不是公司的生产环境统统 Caddy 梭哈 😅

\n","createdAt":"2025-07-11 14:16:47.003405","updatedAt":"2025-07-11 14:16:47.003405","replyToPostNumber":3,"replyCount":0,"likeCount":0,"wordCount":39,"liked":false,"bookmarked":false,"polls":[],"reactions":[],"wiki":false,"version":1,"publicVersion":1,"deletedAt":null,"isAnonymous":false,"user":{"id":4668,"username":"IO","name":null,"avatarUrl":"/uploads/image/86/f2/86f267c0aaa73835a999b7cc3a7e7a701605574eda9a2c2a56f5ddbbba64d1a9.avif","admin":true,"moderator":false,"signatureRaw":"","signatureCooked":null}}],"hasMore":false,"lastReadPostNumber":1,"hasUrlPostNumber":false}