BT/Xray/Wp共存环境下 zerossl证书安装

After downloading your certificate, you should have a ZIP containing the following certificate files:

• certificate.crt
• ca_bundle.crt
• private.key

Upload Certificate Files

upload the certificate files above (certificate.crt, ca_bundle.crt and private.key) to /www/server/panel/vhost/cert/www.luluck.com

Merge .crt Files

NGINX requires all .crt files to be merged in order to allow SSL installation. You will need to run the following command in order to merge your certificate.crt and ca_bundle.crt files.

$ cat certificate.crt ca_bundle.crt >> certificate.crt

Convert .crt and .key to .pem

# openssl rsa -in private.key -out privkey.pem

# openssl x509 -in certificate.crt -out fullchain.pem

注：bt面板上不要执行部署ssl证书的步骤！！！因为xray的config,json 文件中已写入:

“certificates”: [

{

  “certificateFile”: “/www/server/panel/vhost/cert/www.luluck.com/fullchain.pem”,

“keyFile”: “/www/server/panel/vhost/cert/www.luluck.com/privkey.pem”

}

                      ]

如按常规方式在BT/xray/wp共存环境下部署证书，如在网站配置文件下写入：

ssl_certificate /www/server/panel/vhost/cert/www.luluck.com/fullchain.pem;

ssl_certificate_key /www/server/panel/vhost/cert/www.luluck.com/privkey.pem;

虽然BT面板中会显示证书部署成功，但实际上浏览器访问不正常！