VestaCP baya 8083 tashar jiragen ruwa https bata aiki?Shigar da Koyarwar Takaddun shaida na SSL

Kwamitin kula da VestaCP yana da sauƙi kuma mai sauƙin amfani: Shigar da kwamitin kula da VestaCP yana ba da damar shigar da takaddun shaida na SSL na Let's Encrypt ta atomatik, wanda hakan ya sa ya shahara tsakanin ƙwararrun SEO a ƙasashen waje.

Menene Bari Mu Encrypt?

Bari mu Encrypt wata Hukumar Takaddun shaida ce ta SSL wacce aka ƙaddamar a kan Afrilu 2016, 4.

• Yana ba da takardar shedar X.509 kyauta don ɓoyewar Tsaro Layer Tsaro (TLS) ta hanyar tsari mai sarrafa kansa,
• An ƙirƙira don kawar da ƙirƙira na hannu na yanzu, tabbatarwa, sa hannu, shigarwa da sabunta takaddun shaida don amintattun gidajen yanar gizo.

Shafin shiga na VestaCP iko panel, ta amfani da tashar jiragen ruwa 8083.

Menene tashar jiragen ruwa 8083?

• 8083 shafi ne na wakili kuma zazzage tashar fayil, tashar jiragen ruwa ce mai ma'ana.
• A cikin fasahar cibiyar sadarwa, tashoshin jiragen ruwa sun haɗa da tashar jiragen ruwa na zahiri da tashoshi masu ma'ana.

Bambanci Tsakanin Tashar Jiki da Tashar Hankali

• Tashar jiragen ruwa na zahiri suna nufin tashoshin jiragen ruwa waɗanda a zahiri suke, kamar modem ADSL, cibiyoyi, masu sauyawa, da na'urori masu amfani da hanyar sadarwa waɗanda ke haɗa zuwa wasu na'urorin cibiyar sadarwa kamar tashoshin RJ-45, tashoshin SC, da sauransu.
• Tashar jiragen ruwa mai ma'ana tashar jiragen ruwa ce wacce ke bambanta ayyuka ta ma'ana ta hankali, kamar tashar sabis a cikin ka'idar TCP/IP.Matsakaicin lambar tashar jiragen ruwa shine 0 zuwa 65535.

Koyaya, a halin yanzu ana nuna tashar jiragen ruwa 8083 na kwamitin kula da VestaCP ta tsohuwa ba tare da takardar shaidar tsaro ta SSL ba.

Saboda haka, bayan shigar da VestaCP panel , Google Chrome zai nuna wannan saƙo:

Ƙungiyar shiga ta Vesta ta kunna https

Mataki na 1: Shiga cikin kwamitin gudanarwa na VestaCP ta amfani da sunan mai masaukin baki da tashar jiragen ruwa 8083 ▼

http:// 你的域名:8083/

Mataki na 2: Shiga cikin sabis ɗin yanar gizo na VestaCP, nemo sunan mai masaukin uwar garkenka, sannan danna Shirya. ▼

Mataki na 3: Nemo kuma duba SSL sannan mu ɓoye. "Kunna SSL (Tallafin SSL)" da "Yi amfani da Bari Mu ɓoye (Bari Mu ɓoye Tallafin)" ▼

• Sannan danna Ajiye (mai gudanarwa yana danna Ajiye yana jira kusan mintuna biyar don duba aikace-aikacen takardar shaidar SSL)

shafi na 4:Nemo wurin da za mu ɓoye amintaccen wurin ajiyar takaddun shaida Bari mu Encrypt ya adana takardar shaidar SSL a ciki /home/username/conf/web/ a wurin. Da fatan za a jera wurarensu ▼

/home/username/conf/web/ssl.website.crt
/home/username/conf/web/ssl.website.key

Ƙungiyar kula da VestaCP, adana sunan mai masaukin shaidar SSL a cikin ▼

/usr/local/vesta/ssl/certificate.crt
/usr/local/vesta/ssl/certificate.key

Don haka, muna buƙatar mu fara sake suna tsoffin fayilolin takardar shedar VestaCP zuwa wasu rubutu masu banƙyama ta yadda VestaCP ba za ta ƙara amfani da su ba, sannan a haɗa waɗannan fayiloli ta alama. Da fatan za a bi matakan da ke ƙasa don koyon yadda ake yin wannan.

Mataki na 5: SSH a cikin sabar ku kuma shigar da waɗannan umarni guda biyu don sake suna tsoffin fayiloli ▼

mv /usr/local/vesta/ssl/certificate.crt /usr/local/vesta/ssl/unusablecer.crt
mv /usr/local/vesta/ssl/certificate.key /usr/local/vesta/ssl/unusablecer.key

• Idan ayyuka masu zuwa sun kasa yin tasiri, yana haifar da gazawar hanyar haɗin yanar gizon SSL, ba za a iya buɗe gidan yanar gizon ba, kuma fayil ɗin SSL"rashin amfani"suna, canza koma sunan baya"takardar shaidar” ba tare da bata lokaci ba don sake shigar da kwamitin VestaCP.

Mataki na 6: Ƙirƙiri hanyar haɗi ta alama don nuna sabuwar hanyar haɗi ta alama. Da fatan za a maye gurbin sunan mai amfani da sunanka, kamar: admin. Sauya chenweiliang.com da sunan mai masaukin uwar garken VPS ɗinka (FQDN). ▼

ln -s /home/admin/conf/web/ssl.chenweiliang.com.crt /usr/local/vesta/ssl/certificate.crt
ln -s /home/admin/conf/web/ssl.chenweiliang.com.key /usr/local/vesta/ssl/certificate.key

Mataki na 7: Sake kunna VestaCP

service vesta restart

Mataki na 8: Share cache ɗin burauzarka sannan ka sake gwada shiga cikin sashin sarrafawa na VestaCP ta amfani da tashar jiragen ruwa 8083.

• Yanzu SSL ɗinku akan tashar jiragen ruwa 8083 yana da tsaro!

warwarewar izini mafita

Don gyara karya izini, shigar da umarni mai zuwa▼

• so your.adminpanel.com Sauya tare da URL na na'ura mai sarrafa VestaCP na ku.

chgrp mail ssl.your.adminpanel.com.key
chmod 660 ssl.your.adminpanel.com.key
chgrp mail ssl.your.adminpanel.com.crt
chmod 660 ssl.your.adminpanel.com.crt

Abin da ke sama shine hanyar da za a kunna takardar shaidar SSL a bangon VestaCP.

Yadda ake tilasta sunan yankin yin amfani da takardar shedar https SSL?

Mataki na 1: Shigar da samfurin nginx na musamman ▼

cd /usr/local/vesta/data/templates/web
wget http://c.vestacp.com/0.9.8/rhel/force-https/nginx.tar.gz
tar -xzvf nginx.tar.gz
rm -f nginx.tar.gz

shafi na 2:Saita samfurin wakili don tilasta-https

• Ƙirƙiri sabon saiti, ko a cikin saiti na yanzu, saita ƙarfi-https azaman samfuri na wakili na Nginx.
• Lokacin ƙara sabbin masu amfani, zaku iya amfani da samfurin tilasta-https don ba da izini ga masu amfani da tsarin saiti.

HTTP tana turawa ta atomatik zuwa HTTPS

Ta yaya VestaCP ke tura HTTP zuwa HTTPS ta amfani da htaccess? Shin kuna son tura gidan yanar gizon ku ta atomatik zuwa sigar amintaccen (HTTPS) na gidan yanar gizon ku wanda aka rufaffen asiri?

A cikin fayil ɗin .htaccess, ƙara waɗannan 301 redirect syntax▼

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R,L]

• “L” da ke sama [R,L] yana nufin Ƙarshe (Na ƙarshe), idan sauran nahawu ma suna da wannan L, ba za a iya tura http kai tsaye zuwa https ba.
• Saboda haka, ana ba da shawarar a tura http301 zuwa https syntax a saman (kafin sauran kalmomi).

Idan kuna son ƙara amintattun takaddun shaida na SSL zuwa sauran wuraren ku a cikin rukunin kula da VestaCP, da fatan za a duba wannan koyawa ▼

🔗Yaya ake amfani da panel VestaCP? Sanya gidan waya/ƙara sunayen yanki da yawa & sarrafa fayil