手机篇36.用官方脚本申请证书并创建shadowsocks-libev加插件v2ray-plugin 第二种模式 用debian10

apt-get update && apt-get install -y wget vim wget -qO- get.docker.com | bash mkdir /etc/shadowsocks-libev cd /etc/shadowsocks-libev vim config.json { “server”:”0.0. 0.0″, “server_port”:9000, “password”:”password0″, “timeout”:300, “method”:”aes-256-gcm”, “fast_open”:false, “nameserver”:”8.8.8.8″ , “mode”:”tcp_and_udp”, “plugin”:”v2ray-plugin”, “plugin_opts”:”server;tls;host=zhangsan.tk;cert=/etc/shadowsocks-libev/plugin.crt;key=/ etc/shadowsocks-libev/plugin.key” } 常用软件包注意这步必须的apt-get -y update && apt-get -y install unzip zip wget curl nano sudo ufw socat ntp ntpdate gcc git apt-get -y install netcat curl https://get.acme.sh | sh source ~/.bashrc 生成ECC证书： ~/.acme.sh/acme.sh –issue -d zhangsan.tk –standalone -k ec-256 将ECC证书和密钥安装到/etc/shadowsocks-libev中~/.acme.sh/acme.sh –installcert -d zhangsan.tk –fullchainpath /etc/shadowsocks-libev/plugin.crt –keypath /etc/ shadowsocks-libev/plugin.key –ecc docker run -d –name ss-libev –restart always -p 9000:9000 -p 9000:9000/udp -v /etc/shadow socks-libev:/etc/shadowsocks-libev teddysun/shadowsocks-libev systemctl start docker systemctl enable docker systemctl status docker 以下是网上资料证书和密钥参考用acme.sh 脚本申请证书acme.sh –issue –dns dns_cf -d mydomain.me -k ec-256 安装证书到Shadowsocks-libev 配置文件的目录/etc/shadowsocks-libev acme.sh –installcert -d mydomain.me –fullchain-file /etc/shadowsocks-libev/plugin .crt –key-file /etc/shadowsocks-libev/plugin.key –ecc 安装证书和key 到/root/caddy 目录下acme.sh –installcert -d mydomain.me –fullchain-file /root/ caddy/caddy.crt –key-file /root/caddy/caddy.key –ecc acme.sh –issue –dns dns_cf -d mydomain.me -k ec-256 //用脚本申请证书acme.sh –installcert -d mydomain.me –fullchain-file /etc/ssplugin/plugin.crt –key-file /etc/ssplugin/plugin.key –ecc //安装证书到/etc/ssplugin目录下acme. sh –installcert -d mydomain.me –fullchain-file /root/caddy/caddy.crt –key-file /root/caddy/caddy.key –ecc //安装证书和key到/root/caddy目录下执行下面的命令apt-get update && apt-get -y install socat //安装socat wget -qO- get.acme.sh | bash //安装脚本source ~/. bashrc //让环境变量生效，以后无论在哪个路径，直接使用acme.sh 配置条件申请颁发ECC证书acme.sh –issue –dns dns_cf -d mydomain.me -k ec-256 安装TLS证书curl https ://get.acme.sh | sh 安装成功后执行source ~/.bashrc 以确保脚本所设置的命令别名生效生成ECC证书： sudo ~/.acme.sh/acme.sh –issue -d ZZZ007. ml –standalone -k ec-256 将ECC证书和密钥安装到/etc/trojan 中sudo ~/.acme.sh/acme.sh –installcert -d ZZZ007.ml –fullchainpath /etc/trojan/trojan .crt –keypath /etc/trojan/trojan.key –ecc TLS证书curl https://get.acme.sh | sh 安装成功后执行source ~/.bashrc 以确保脚本所设置的命令别名生效生成ECC证书： sudo ~/.acme.sh/acme.sh –issue -d ggg777.ml –standalone -k ec-256 将ECC证书和密钥安装到/etc/v2ray 中sudo ~/.acme.sh/ acme.sh –installcert -d ggg777.ml –fullchainpath /etc/v2ray/v2ray.crt –keypath /etc/v2ray/v2ray.key –ecc TLS证书（参考V2官网） curl https://get. acme.sh | sh source ~/.bashrc 生成ECC证书： sudo ~/.acme.sh/acme.sh –issue -d XXX007.ml –standalone -k ec-256 将ECC证书和密钥安装到/ etc/v2ray 中sudo ~/.acme.sh/acme.sh –installcert -d XXX007.ml –fullchainpath /etc/v2ray/v2ray.crt –keypath /etc/v2ray/v2ray.key –ecc 以下常用软件包也是非常重要的apt-get update && apt-get -y install socat //安装socat apt-get -y update && apt-get -y install unzip zip wget curl nano sudo ufw socat ntp ntpdate gcc git apt -get -y update && apt-get -y install unzip zip wget curl nano sudo ufw socat ntp ntpdate gcc git .