Kuskuren SSL na CWP7? Ta yaya sunan mai masaukin zai iya shigar da takardar shedar kyauta ta Letsencrypt?

Yadda ake shigar Letsencrypt SSL takardar shaidar SSL kyauta don sunan mai masaukin CWP7?

• wannan Cibiyar Kula da CWP Jagorar AutoSSL don shigar da takaddun shaida SSL kyauta na Letsencrypt ta atomatik.

Idan saƙon kuskuren CWP7 SSL"cwpsrv.sabis failed.", da fatan za a bincika maganin koyawa mai zuwa▼

CWP Control Panel ya ƙare kuma ba za a iya shiga ba? Fara/Dakatawa/Sake kunnawa/Duba Ayyukan CWP

Fara/tsayawa/sake kunnawa/duba matsayin sabis ɗin CWP, wanda za'a iya yi ta amfani da umarni masu zuwa: sabis ɗin cwpsrv fara sabis cwpsrv tasha sabis cwpsrv sake kunnawa sabis cwpsrv matsayi CWP kula da panel sabis ya kasa farawa...

Yadda ake canza sunan mai masauki a CWP?

Ace sunan mai masaukinku shine server.yourdomain.com

1. Da farko, ƙirƙiri reshen yanki a cikin bayan CWP:server.yourdomain.com
2. Ƙara rikodin a cikin DNS, yankin yanki yana nuna nakuLinuxAdireshin IP na uwar garke.
3. Je zuwa → Saitunan CWP → Canja sunan mai watsa shiri a menu na hagu na cwp.admin don adana sunan mai masaukin ku.

• Za a shigar da SSL ta atomatik, yanayin kawai shine ka saita DNS A rikodin don sunan mai masauki.
• Idan ba ku da rikodin sunan mai masaukin baki, CWP za ta shigar da takardar shedar sa hannu.
• Lura cewa sunan mai masauki ya kamata ya zama yanki kuma ba babban yanki ba.

Don http:// zuwa https:// redirection, za ku iya/usr/local/apache/htdocs/.htaccessƘirƙiri wannan fayil na htaccess:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Bari mu Encrypt wata hukuma ce ta takardar shedar da aka ƙaddamar a ranar 2016 ga Afrilu, 4, tare da manufar kawar da ƙirƙira na hannu, tabbatarwa, sa hannu, shigarwa da sabunta takaddun shaida don amintattun gidajen yanar gizo.

Sunan mai watsa shiri/FQDN Shigar da Takaddun shaida SSL Letsencrypt

Menene FQDN ke nufi??

• FQDN (fully qualified domain name) cikakken sunan yankin da ya cancanta, wanda shine cikakken sunan wani takamaiman kwamfuta ko mai watsa shiri akan Intanet.

Yadda ake nema don Mu Encrypt?

Akwai sabon tsarin da aka haɗa a cikin Menu na Hagu na CWP7 → Saitunan Yanar Gizon Yanar Gizo → Takaddun shaida SSL, daga nan zaku iya shigar da takaddun shaida na Letsencrypt don kowane yanki / yanki ta amfani da AutoSSL.

(Idan ka zaɓi Ƙirƙiri Bari mu Encrypt a lokaci guda lokacin ƙara sunan yanki ko sunan yanki, zaku iya tsallake matakan da ke sama)

Siffofin Takaddun shaida na Letsencrypt SSL

• Letsencrypt don babban asusun asusu da www alias
• Letsencrypt ƙara sunan yanki da www. laƙabi
• Letsencrypt don ƙananan yanki da www.alias
• Letsencrypt kuma na iya shigar da al'ada
• Duba ranar karewa na takaddun shaida
• Sabuntawa ta atomatik
• Maɓallin sabunta sabuntawa
• Apache tashar jiragen ruwa 443 ganowa ta atomatik

Sabunta atomatik na takaddun shaida na Letsencrypt SSL

Ta hanyar tsoho, takaddun shaida na Letsencrypt suna aiki na kwanaki 90.

Sabuntawa ta atomatik ne kuma ana sabunta takaddun shaida kwanaki 30 kafin ƙarewa.

Akwai sabon tsarin da aka haɗa a cikin Menu na Hagu na CWP7 → Saitunan Yanar Gizon Yanar Gizo → Takaddun shaida SSL, daga nan zaku iya shigar da takaddun shaida na Letsencrypt don kowane yanki / yanki ta amfani da AutoSSL.

Shirya fayil ɗin sanyi don maye gurbin hanyar takardar shaidar SSL

Na gaba, kuna buƙatar shirya fayil ɗin sanyi kuma ƙara hanyar zuwa takardar shaidar SSL (bayanin kula don cire sharhi, kuma canza hanyar zuwa naku).

Shirya fayil ɗin sanyi na cwpsrv ▼

/usr/local/cwpsrv/conf/cwpsrv.conf

kara zuwaKulawa da saka idanuSSL tashar jiragen ruwa ▼

listen 2812 ssl;

Akwai kuma sakin layi na gaba ▼

ssl_certificate /etc/pki/tls/certs/hostname.crt;
ssl_certificate_key /etc/pki/tls/private/hostname.key;

Sauya da hanya mai zuwa ▼

ssl_certificate /etc/pki/tls/certs/server.yourdomain.com.bundle;
ssl_certificate_key /etc/pki/tls/private/server.yourdomain.com.key;

Da zarar an gama, kar a manta da sake kunna sabis ɗin cwpsrv tare da umarni mai zuwa ▼

service cwpsrv restart

Sannan je zuwa Saitunan Yanar Gizo → WebServers Conf Edita → Apache → /usr/local/apache/conf.d/

Gyara bayanan martaba ▼

hostname-ssl.conf

Saka sakin layi na gaba ▼

ssl_certificate /etc/pki/tls/certs/hostname.crt;
ssl_certificate_key /etc/pki/tls/private/hostname.key;

Sauya da hanya mai zuwa ▼

ssl_certificate /etc/pki/tls/certs/server.yourdomain.com.bundle;
ssl_certificate_key /etc/pki/tls/private/server.yourdomain.com.key;

• Idan kuna amfani da Nginx, kuna buƙatar yin haka.

Sannan sake kunna sabis ɗin Apache (da Nginx) kuma tabbatar yana aiki kamar yadda aka saba?

systemctl restart httpd
systemctl restart nginx

A ƙarshe, sake sabunta hanyar shiga don duba tashar jiragen ruwa 2087https:// server.yourdomain. com:2087/login/index.phpAkwai dongle?