Kuskuren SSL na CWP7? Ta yaya sunan mai masaukin zai iya shigar da takardar shedar kyauta ta Letsencrypt?

Yadda ake shigar Letsencrypt SSL takardar shaidar SSL kyauta don sunan mai masaukin CWP7?

• wannan Cibiyar Kula da CWP Jagorar AutoSSL don shigar da takaddun shaida SSL kyauta na Letsencrypt ta atomatik.

Idan kun ci karo da saƙon kuskuren " cwpsrv.service ya gaza ." tare da CWP7 SSL, da fatan za a duba koyawa mai zuwa don mafita ▼

🔗 Kwamitin kula da CWP ya ƙare kuma ba zai iya shiga ba?

Ta yaya zan canza sunan mai masaukin baki a cikin CWP?

Ace sunan mai masaukinku shine server.yourdomain.com

1. Da farko, ƙirƙiri reshen yanki a cikin bayan CWP:server.yourdomain.com
2. Ƙara rikodin a cikin DNS, yankin yanki yana nuna nakuLinuxAdireshin IP na uwar garke.
3. Je zuwa → Saitunan CWP → Canja sunan mai watsa shiri a menu na hagu na cwp.admin don adana sunan mai masaukin ku.

• Za a shigar da SSL ta atomatik, yanayin kawai shine ka saita DNS A rikodin don sunan mai masauki.
• Idan ba ku da rikodin sunan mai masaukin baki, CWP za ta shigar da takardar shedar sa hannu.
• Lura cewa sunan mai masauki ya kamata ya zama yanki kuma ba babban yanki ba.

Don http:// zuwa https:// redirection, za ku iya/usr/local/apache/htdocs/.htaccessƘirƙiri wannan fayil na htaccess:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Bari mu Encrypt wata hukuma ce ta takardar shedar da aka ƙaddamar a ranar 2016 ga Afrilu, 4, tare da manufar kawar da ƙirƙira na hannu, tabbatarwa, sa hannu, shigarwa da sabunta takaddun shaida don amintattun gidajen yanar gizo.

Sunan mai watsa shiri/FQDN Shigar da Takaddun shaida SSL Letsencrypt

Menene ma'anar FQDN?

• FQDN (fully qualified domain name) cikakken sunan yankin da ya cancanta, wanda shine cikakken sunan wani takamaiman kwamfuta ko mai watsa shiri akan Intanet.

Ta yaya zan nemi izinin Let's Encrypt?

Akwai sabon tsarin da aka haɗa a cikin Menu na Hagu na CWP7 → Saitunan Yanar Gizon Yanar Gizo → Takaddun shaida SSL, daga nan zaku iya shigar da takaddun shaida na Letsencrypt don kowane yanki / yanki ta amfani da AutoSSL.

(Idan ka zaɓi Ƙirƙiri Bari mu Encrypt a lokaci guda lokacin ƙara sunan yanki ko sunan yanki, zaku iya tsallake matakan da ke sama)

Siffofin Takaddun shaida na Letsencrypt SSL

• Letsencrypt don babban asusun asusu da www alias
• Letsencrypt ƙara sunan yanki da www. laƙabi
• Letsencrypt don ƙananan yanki da www.alias
• Letsencrypt kuma na iya shigar da al'ada
• Duba ranar karewa na takaddun shaida
• Sabuntawa ta atomatik
• Maɓallin sabunta sabuntawa
• Apache tashar jiragen ruwa 443 ganowa ta atomatik

Sabunta atomatik na takaddun shaida na Letsencrypt SSL

Ta hanyar tsoho, takaddun shaida na Letsencrypt suna aiki na kwanaki 90.

Sabuntawa ta atomatik ne kuma ana sabunta takaddun shaida kwanaki 30 kafin ƙarewa.

Akwai sabon tsarin da aka haɗa a cikin Menu na Hagu na CWP7 → Saitunan Yanar Gizon Yanar Gizo → Takaddun shaida SSL, daga nan zaku iya shigar da takaddun shaida na Letsencrypt don kowane yanki / yanki ta amfani da AutoSSL.

Shirya fayil ɗin sanyi don maye gurbin hanyar takardar shaidar SSL

Na gaba, kuna buƙatar shirya fayil ɗin sanyi kuma ƙara hanyar zuwa takardar shaidar SSL (bayanin kula don cire sharhi, kuma canza hanyar zuwa naku).

Shirya fayil ɗin sanyi na cwpsrv ▼

/usr/local/cwpsrv/conf/cwpsrv.conf

Ƙara sa ido kan Monit zuwa tashar SSL ▼

listen 2812 ssl;

Akwai kuma sakin layi na gaba ▼

ssl_certificate /etc/pki/tls/certs/hostname.crt;
ssl_certificate_key /etc/pki/tls/private/hostname.key;

Sauya da hanya mai zuwa ▼

ssl_certificate /etc/pki/tls/certs/server.yourdomain.com.bundle;
ssl_certificate_key /etc/pki/tls/private/server.yourdomain.com.key;

Da zarar an gama, kar a manta da sake kunna sabis ɗin cwpsrv tare da umarni mai zuwa ▼

service cwpsrv restart

Sannan je zuwa Saitunan Yanar Gizo → WebServers Conf Edita → Apache → /usr/local/apache/conf.d/

Gyara bayanan martaba ▼

hostname-ssl.conf

Saka sakin layi na gaba ▼

ssl_certificate /etc/pki/tls/certs/hostname.crt;
ssl_certificate_key /etc/pki/tls/private/hostname.key;

Sauya da hanya mai zuwa ▼

ssl_certificate /etc/pki/tls/certs/server.yourdomain.com.bundle;
ssl_certificate_key /etc/pki/tls/private/server.yourdomain.com.key;

• Idan kuna amfani da Nginx, kuna buƙatar yin haka.

Sannan sake kunna sabis ɗin Apache (da Nginx) kuma tabbatar yana aiki kamar yadda aka saba?

systemctl restart httpd
systemctl restart nginx

A ƙarshe, sake sabunta hanyar shiga don duba tashar jiragen ruwa 2087https:// server.yourdomain. com:2087/login/index.phpAkwai dongle?