SslForFree

　　SslForFree网站是一个专门针对站点进行SSL加密服务的平台，一般SSL都是收费的，但是该网站推出的免费版，结合Let'sEncrypt平台来共同实现，让更多的网站拥有"绿色锁头标识"。

　　有个名为Let'sEncrypt的数位凭证认证机构(CA)推出免费SSL/TLS凭证服务，Let'sEncrypt的运作方式没有开放直接从网站输入私密金钥、CSR档案来取得凭证的介面，如果要安装Let'sEncrypt凭证，必须要熟悉Unix指令，才能够在远端主机下指令来取得凭证。

　　SSLForFree让你从网站上取得免费SSL凭证，当然这是连接Let'sEncrypt的凭证签发功能，不过无须自己到主机输入安装指令，即可透过网页介面来取得凭证的相关档案(包括私密金钥、CAbundle和凭证crt档)，再从控制台SSL功能将凭证安装进去就能使用。

　　但是Let'sEncrypt凭证签发为每三个月一次，也就是每90天必须更新(renew)一次，不过不用担心，SSLForFree也已提供订阅通知的机制，你可在稍后填入自己的Email，在凭证过期前就会收到电子邮件通知。

　　申请方法：

　　1.SSLForFree网站后，直接在上方填入你要申请Let'sEncrypt凭证的网域名称，可以用空白来分隔不同的网址，例如「a.domain.comdomain.comother.com」，填入后点选右边的「CreateFreeSSLCertificate」继续。

　　2.为了确定这个网域名称使你所有，会有两种验证方式，如果你的网站本身开启FTP功能的话，可使用「AutomaticFTPVerification」来输入相关资讯完成验证;因为要将验证分段操作给读者看，所以我选择使用手动的验证方式，必须自己下载档案，依照说明上传到主机。点选后，点选下方的「ManuallyVerifyDomain」继续。

　　3.点选网站上提供的档案下载链结，依照说明建立两层资料夹，将档案放进去即可。记得结束前先透过以下两个链结来看看能否正常读取档案，如果不行，代表你的路径可能错误，重新检查一次吧!总之要让两个链结都能正常开启，再点选最下方的「DownloadSSLCertificate」。

　　4.通过验证后，SSLForFree就会开始为你产生SSL凭证。当凭证产生后，你就能在最终的结果页面看到这些资讯。不过在此之前，我会建议你先找到如下面撷图标示出来的「GetNotifiedofExpiration」栏位，设定一组Email和密码，即可在凭证过期前取得通知，以免错过延长(renew)时间。

　　5.从网页最下方点选「DownloadAllSSLCertificateFiles」就能打包这些档案，解压缩后可以取得一个私密金钥(PrivacyKey)、CA_bundle.crt和certificate.crt三个档案，返回你的主机控制台，即可将凭证安装进去。

SslForFree website is a platform for SSL encryption services specifically for the site, generally SSL is charged, but the free version of the website, combined with the Let'sEncrypt platform to achieve, so that more websites have & quot; green lock logo & quot;.

A digital certificate authentication authority (CA) named Let'sEncrypt has launched a free SSL/TLS credential service. The mode of operation of Let'sEncrypt does not open the interface of entering private keys and CSR files directly from the website to obtain vouchers. If you want to install Let'sEncrypt credentials, you must be familiar with the Unix instructions before you can get the vouchers under the instructions of the remote host.

SSLForFree allows you to get free SSL credentials from the website, of course, this is the certificate signing function of connecting Let'sEncrypt, but you do not need to enter the installation instructions to the host computer, you can obtain the relevant files of the certificate (including private key, CAbundle and certificate crt file) through the web interface, and then install the certificate from the console SSL function to be used.

But the Let'sEncrypt certificate is issued every three months, that is, every 90 days must be updated (renew), but do not worry, SSLForFree also provides a mechanism for subscription notification, you can later fill in your own Email, before the expiration of the certificate will receive an email notification.

Application method:

After the 1.SSLForFree website, fill in the domain name of the Let'sEncrypt certificate you want to apply for directly at the top. You can use a blank space to separate different URLs, such as “a.domain.comdomain.comother.com”, and click “CreateFreeSSLCertificate” on the right to continue.

two。 In order to make sure that the domain name is owned by you, there will be two ways of verification. If your site itself turns on the FTP function, you can use “AutomaticFTPVerification” to enter relevant information to complete the verification; because you want to segment the verification operation to the reader, so I choose to use manual verification. I must download the file myself and upload it to the host according to the instructions. After clicking, click “ManuallyVerifyDomain” below to continue.

3. Click the file download link provided on the website, follow the instructions to create a two-tier folder, and put the file in it. Remember to read the file properly through the following two links before you finish. If not, it means your path may be wrong. Check it again. In short, to make both links open properly, click “DownloadSSLCertificate” at the bottom.

4. Once verified, SSLForFree will start to generate SSL credentials for you. When the voucher is generated, you can see this information on the final results page. However, before that, I would recommend that you first find the “GetNotifiedofExpiration” field shown in the icon below, and set a set of Email and passwords to get notification before the certificate expires, so as not to miss the renew time.

5. Click “DownloadAllSSLCertificateFiles” at the bottom of the page to package these files. After unzipping, you can get a private key (PrivacyKey), CA_bundle.crt and certificate.crt, return to your host console, and install the credentials.

SslForFree是针对站点进行SSL加密服务的平台，如果要安装Let’sEncrypt凭证，我们就需要熟悉Unix指令。