@lhbc 那个 cdn 链接我在网站里找不到在哪里？
头部加这个字段是主题中的 index.php 吗？

Mixed Content: The page at 'https://yuhaitao.com/the-music-migu-sign-to-send-traffic/' was loaded over HTTPS, but requested an insecure stylesheet 'http://cdn.staticfile.org/normalize/2.1.3/normalize.min.css'. This request has been blocked; the content must be served over HTTPS.
(index):227 Mixed Content: The page at 'https://yuhaitao.com/the-music-migu-sign-to-send-traffic/' was loaded over HTTPS, but requested an insecure image 'http://image.yuhaitao.com/4f632767ac0d_CDB5/Screenshot_20151208140849_cmccwm.mobilemusic.png'. This content should also be served over HTTPS.
(index):227 Mixed Content: The page at 'https://yuhaitao.com/the-music-migu-sign-to-send-traffic/' was loaded over HTTPS, but requested an insecure image 'http://image.yuhaitao.com/4f632767ac0d_CDB5/Screenshot_20151208140918_cmccwm.mobilemusic.png'. This content should also be served over HTTPS.
(index):227 Mixed Content: The page at 'https://yuhaitao.com/the-music-migu-sign-to-send-traffic/' was loaded over HTTPS, but requested an insecure image 'http://image.yuhaitao.com/4f632767ac0d_CDB5/Screenshot_20151208143831_com.sunbelt.androidbutler.png'. This content should also be served over HTTPS.

之前文章的图片链接怎么换成 https?

@tension
多谢礼品码，也能体验泛域名证书了。

@sneezry 谢谢，便利就容易留下安全隐患。

@sneezry
谢谢，我在网上找了个在线生成 crs 的，填上去就行了。
在线生成的会受到攻击吗？
证书更新了两次， crs 应该不变。

@tension 泛域名好像很厉害

@sneezry
在那个网站上下载文件吗？
http://ww3.sinaimg.cn/large/586c28f1jw1f7wozrfnthj20lo0ecn19.jpg

这个网站上生成的上传后没反应。

@sneezry
命令这样写的
openssl req -new -newkey rsa:2048 -nodes
-out qiandao_yuhaitao_com.csr -keyout qiandao_yuhaitao_com.key
-subj "/C=US/ST=California/L=xinye/O=签到 /OU=签到程序 /CN=qiandao.yuhaitao.com"

提交后没反应

http://ww4.sinaimg.cn/large/586c28f1jw1f7wnlhx8dqj20cr04vmxo.jpg
数据库信息输入后，出现这个错误。

@yuhaaitao
到这一步是什么意思？
http://ww1.sinaimg.cn/large/586c28f1jw1f7wn48s4cnj20lr05bdg5.jpg

@mrjoel 谢谢，之前也是参考这篇文章配置的，现在临时服务器不好找，有个版瓦工的 vps ，刚搞了一个不会弄，域名解析不过去。

@sneezry 就是为这个时候准备的呀，正在解析域名
http://ww2.sinaimg.cn/large/586c28f1jw1f7wmtwv2t7j20la00yaa1.jpg
这样对不？

@mrjoel 临时服务器上搭建博客程序，验证后再解析到之前的服务器吗？

用过途牛也是默认有保险的。

新建一个子域名 qiandao.yuhaitao.com 无法在 https://www.sslforfree.com 中签发证书验证，全站默认 https ，无法打开 http://qiandao.yuhaitao.com/.well-known/acme-challenge/PaJY7bcGojWV2e5dWy0QShIX9Db9-DUgcN_oXNiazvU 验证页面，该怎么办？

@JclMiku http://ww4.sinaimg.cn/large/586c28f1jw1f7wjpelmtgj206405bdfy.jpg
改这里面的吗？没有看到 system_url 选项

http://ww2.sinaimg.cn/large/586c28f1jw1f7wharsjwtj20ml088jso.jpg
能打开时是这个样子

http://ww3.sinaimg.cn/large/586c28f1jw1f7wf8paamnj20q0062wg1.jpg
Download the following verification files by clicking on each link below
Download File #1
Create a folder in your domain named ".well-known" if it does not already exist
Create another folder in your domain under ".well-known" named "acme-challenge" if it does not already exist
Upload the downloaded files to the "acme-challenge" folder
Verify successful upload by visiting the following links in your browser
http://qiandao.yuhaitao.com/.well-known/acme-challenge/L-MOPc0V6MbQqoDRSaieNa2q8Rs6Ip6hA9C2h8qBy7k
Click Download SSL Certificate below.
无法打开 http://qiandao.yuhaitao.com/.well-known/acme-challenge/L-MOPc0V6MbQqoDRSaieNa2q8Rs6Ip6hA9C2h8qBy7k
无法生成证书，就无法打开签到站。

@U2FsdGVkX1 typecho 程序，数据库不会改，有没有别的办法，让 https 变成 http?