如何为Google Cloud Compute Engine负载均衡器设置Letsencrypt? [英] How to setup Letsencrypt for Google Cloud Compute Engine load balancer?

问题描述

我已经将Google Cloud Project设置为将负载平衡器与自动扩展实例模板结合使用.当前，该实例组只有一个实例.

I've setup my Google Cloud Project to use a load balancer in combination with auto scaling instance templates. Currently the instance group only has one instance.

我的域名成功引用了负载均衡器IP.直到这些步骤，一切都可以正常工作.

My domain name successfully refers to the load balancers IP. Till these steps everything is working correctly.

现在，我想为此项目设置SSL.我想用Letsencrypt服务来做到这一点，但是在尝试设置它时却没有成功.

Now I want to setup SSL for this project. I would like to do this with the Letsencrypt service, however I'm having no success when trying to set this up.

在Google Cloud Engine负载均衡器窗口中，有一个选项可以使用负载均衡器前端的Google Cloud Shell设置一个较早创建的证书.不幸的是，我只能使用Google Cloud Shell创建.csr和.key文件.此外，我可以创建一个不安全的ssl证书并从中获取.cert文件，但是我想使用letencrypt创建一个安全的SSL证书文件. Letsencrypt服务需要直接从执行命令的命令行界面访问域，这可能是我收到指示无法检索域名的错误的原因.

In the Google Cloud Engine load balancer window there is an option to setup an earlier created certificate with Google Cloud shell to the load balancer frontend. Unfortunately I can only create a .csr and .key file with the Google Cloud Shell. Furthermore, I can create an unsafe ssl certificate and get the .cert file from it, but I would like to create a safe SSL cert file using letsencrypt. The Letsencrypt services requires direct access to the domain from to command line interface the commando was executed on, this is probably the reason why I’m getting an error indicating the domain name cannot be retrieved.

我正在寻找一种使用Google Cloud在负载均衡器上安装Letsencrypt证书的方法.有没有一种方法可以让我用letencrypt手动创建.cert文件，而不是直接安装它?如果没有，可以使用其他方法或服务从.csr和.key文件创建.cert文件吗?

I’m looking for a way to install the Letsencrypt certificate on the loadbalancer using Google Cloud. Is there a way how I can manually create a .cert file with letsencrypt instead of installing this directly? If not is there another way or service to create a .cert file from a .csr and .key file?

推荐答案

您可以使用 sslforfree.com ，它会为您调用LetsEncrypt并为您提供下载密钥.它还可以提醒您续订证书. (目前无法在Google LB中自动更新证书)

You can use sslforfree.com, which calls LetsEncrypt for you and gives you the keys for downloading. It can also remind you to renew your certs. (There's currently no way to auto-renew certs in Google LB)

这篇关于如何为Google Cloud Compute Engine负载均衡器设置Letsencrypt?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！