apple distribution certificates but their private keys are not installed

In the next command, replace by your actual host name: 1 Therefore install the certificate and key to a permanent location. You cannot use the certificate and key in their current locations, as these may be temporary. The intermediate CA cert is in: /root/.acme.sh//ca.cerĪnd the full chain certs is there: /root/.acme.sh//fullchain.cer On success, you will receive feedback as to the location of the certificate and key: 1 ~/.acme.sh/acme.sh -issue -d -standaloneĪfter a minute or so, the script terminates. ~/.acme.sh/acme.sh -register-account -m an SSL certificate. In the next command, replace by your actual email address: 1 Register your account for a free SSL certificate. ~/.acme.sh/acme.sh -set-default-ca -server letsencrypt Set the default provider to Let’s Encrypt: 1 On Windows you can use the built-in PowerShell app, or you can install a terminal emulator such as PuTTY or XSHELL.ĭownload and install the Acme script for getting a free SSL certificate: 1 In any case, not all protocols support the use of CDN proxying. Adding your domain to Cloudflare is optional, and you can continue to use your domain name registrar’s nameservers if you prefer. For now, just use the DNS features of Cloudflare.

However, if you are going to add a CDN, do not turn on proxying in Cloudflare until the end. This will allow you to insert a content distribution network or CDN in between you and your server. Optionally, add your domain to Cloudflare.Create a DNS A record pointing from your host name to your VPS.Some low-cost registrars are Porkbun, Namesilo, and Namecheap. You need to have ports 80 and 443 on your VPS open for TCP input. In our example we use a Debian 11 VPS, but the X-UI install script supports Ubuntu 16+, Debian 8+, or CentOS 7+. Some popular ones are AWS, Google Cloud, Microsoft Azure, DigitalOcean, Hetzner, and Vultr. Preparationīefore you begin, you need to do three or four things: You can also monitor VPS performance and traffic usage in real time. You can visually build servers for Shadowsocks, V2ray, Xray, Trojan, and other popular protocols. X-UI provides a graphical user interface for managing servers and users.

Apple distribution certificates but their private keys are not installed