如何设置阿里云 OSS 的免费 SSL 证书

'use strict';
const Greenlock = require('greenlock');
const email = 'xxx@xxx.com';

// domain: xxx.1688.com
// ossConfig: { accessKeyId, accessKeySecret, region, bucket }
module.exports = (domain, ossConfig, workdir) =>
  new Promise((resolve, reject) => {

    const greenlock = Greenlock.create({
      configDir: './config',
      packageRoot: workdir,
      packageAgent: 'Greenlock/v1.0',
      maintainerEmail: email,
      // staging: true,
      notify: function (event, details) {
        console.log(event, details);

        if ('error' === event) {
          reject(details)
        }

        if ('cert_issue' === event) {
          resolve();
        }
      },
    });

    greenlock.manager.defaults({
      agreeToTerms: true,
      subscriberEmail: email,
      challenges: {
        'http-01': {
          module: 'acme-http-01-oss',
          ...ossConfig
        },
      },
    });

    greenlock
      .add({
        subject: domain,
        altnames: [domain],
      })
      .then(function (data) {
        console.log('data, ', data);
      })
      .catch(function (e) {
        reject(e);
      });
  });

const Core = require('@alicloud/pop-core');
const path = require('path');
const fs = require('fs');
const moment = require('moment');

// CDN 域名查看：https://cdn.console.aliyun.com/domain/detail/xxxx.com/https
// SSL 证书查看：https://yundun.console.aliyun.com/?p=cas#/certExtend/upload

module.exports = ({ accessKeyId, accessKeySecret, domain, workdir }) =>
  new Promise((resolve, reject) => {
    const client = new Core({
      accessKeyId,
      accessKeySecret,
      // securityToken: '<your-sts-token>', // use STS Token
      endpoint: 'https://cdn.aliyuncs.com',
      apiVersion: '2018-05-10',
    });

    const params = {
      DomainName: domain,
      ServerCertificateStatus: 'on',
      ForceSet: '1',
      PrivateKey: fs.readFileSync(
        path.join(workdir, './config/live/' + domain, './privkey.pem')
      ),
      ServerCertificate: fs.readFileSync(
        path.join(workdir, './config/live/' + domain, './fullchain.pem')
      ),
      CertName: domain + moment().format('_YYYY-MM-DD_HH-mm-ss'),
    };

    const requestOption = {
      method: 'POST',
    };

    client.request('SetDomainServerCertificate', params, requestOption).then(
      result => {
        resolve(result);
      },
      ex => {
        reject(ex);
      }
    );
  });