Papa Kuhikuhi ʻatikala
Pehea e hoʻouka ai iā Letsencrypt SSL palapala SSL manuahi no ka inoa inoa CWP7?
- o kēia CWP Control Panel Alakaʻi AutoSSL e hoʻokomo maʻalahi iā Letsencrypt i nā palapala SSL manuahi.
Inā ʻo ka CWP7 SSL memo hewa "cwpsrv.lawelawe failed.", e ʻoluʻolu e nānā i ka hoʻonā o kēia kumu aʻo▼
Pehea e hoʻololi ai i ka inoa inoa ma CWP?
Inā paha ʻo kou inoa hoʻokipa server.yourdomain.com
- ʻO ka mea mua, e hana i kahi subdomain ma ka CWP backend:
server.yourdomain.com
- Hoʻohui i kahi moʻolelo A ma DNS, kuhikuhi ka subdomain i kāuLinuxHelu IP kikowaena.
- E hele i → CWP Settings → Change Hostname ma ka ʻaoʻao hema o cwp.admin e mālama i kou inoa inoa.
- E hoʻokomo maʻalahi ʻia ʻo SSL, ʻo ke kūlana wale nō e hoʻonohonoho ʻoe i kahi moʻolelo DNS A no ka inoa host.
- Inā ʻaʻohe ʻoe moʻolelo A no ka inoa hoʻokipa, e hoʻokomo ʻo CWP i kahi palapala hōʻailona pūlima.
- E hoʻomanaʻo i ka inoa o ka hostname he subdomain a ʻaʻole ke kikowaena nui.
No ka http:// i ka https:// hoʻohuli hou, hiki iā ʻoe/usr/local/apache/htdocs/.htaccess
E hana i kēia faila htaccess:
RewriteEngine On RewriteCond %{HTTPS} off RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
ʻO Let's Encrypt kahi mana palapala i hoʻokuʻu ʻia ma ʻApelila 2016, 4, me ka manaʻo e hoʻopau i ka hana lima o kēia manawa, hōʻoia, kau inoa, hoʻokomo a me ka hoʻonui ʻana i nā palapala hōʻoia no nā pūnaewele paʻa.
Hostname/FQDN E hoʻokomo iā Letsencrypt SSL Certificate
- FQDN (
fully qualified domain name
) ka inoa kikowaena piha piha, ʻo ia ka inoa piha piha o kahi kamepiula kikoʻī a mea hoʻokipa paha ma ka Pūnaewele.
Pehea e noi ai no Let's Encrypt?
Aia kekahi module hou i loko o ka CWP7 Left Menu → WebServer Settings → SSL Certificates, mai laila mai hiki iā ʻoe ke hoʻokomo i nā palapala Letsencrypt no kekahi domain / subdomain e hoʻohana ana i AutoSSL.
(Inā koho ʻoe i ka Create Let's Encrypt i ka manawa like i ka hoʻohui ʻana i kahi inoa domain a i ʻole inoa subdomain, hiki iā ʻoe ke hoʻokuʻu i nā ʻanuʻu i luna)
Letsencrypt SSL palapala hiʻona
- Letsencrypt no ka waihona moʻokāki nui a me www alias
- Letsencrypt hoʻohui i ka inoa inoa a me www. alias
- Letsencrypt no nā subdomains a me www.alias
- Hiki iā Letsencrypt ke hoʻokomo maʻamau
- E nānā i ka lā pau o ka palapala hōʻoia
- hōʻano hou ʻana
- Pihi hoʻohou
- ʻIke ʻakomi ʻo Apache port 443
Hoʻohou hou i nā palapala Letsencrypt SSL
Ma ka maʻamau, kūpono nā palapala Letsencrypt no 90 mau lā.
Hoʻololi ʻia ka hana hou ʻana a hōʻano hou ʻia nā palapala hōʻoia 30 mau lā ma mua o ka pau ʻana.
Aia kekahi module hou i loko o ka CWP7 Left Menu → WebServer Settings → SSL Certificates, mai laila mai hiki iā ʻoe ke hoʻokomo i nā palapala Letsencrypt no kekahi domain / subdomain e hoʻohana ana i AutoSSL.
Hoʻoponopono i ka faila hoʻonohonoho e pani i ke ala palapala SSL
A laila, pono ʻoe e hoʻoponopono i ka faila hoʻonohonoho a hoʻohui i ke ala i ka palapala SSL (e hoʻomaopopo e wehe i ka manaʻo, a hoʻololi i ke ala iā ʻoe iho).
Hoʻoponopono i ka faila hoʻonohonoho cwpsrv ▼
/usr/local/cwpsrv/conf/cwpsrv.conf
Pākuʻi iKa nānā ʻana i ka monitawa SSL ▼
listen 2812 ssl;
Aia nō ka paukū ▼
ssl_certificate /etc/pki/tls/certs/hostname.crt; ssl_certificate_key /etc/pki/tls/private/hostname.key;
E hoʻololi me kēia ala ▼
ssl_certificate /etc/pki/tls/certs/server.yourdomain.com.bundle; ssl_certificate_key /etc/pki/tls/private/server.yourdomain.com.key;
Ke hana ʻia, mai poina e hoʻomaka hou i ka lawelawe cwpsrv me kēia kauoha ▼
service cwpsrv restart
A laila e hele i ka Pūnaewele Pūnaewele → WebServers Conf Editor → Apache → /usr/local/apache/conf.d/
Hoʻoponopono i ka moʻolelo ▼
hostname-ssl.conf
E kau i ka paukū ▼
ssl_certificate /etc/pki/tls/certs/hostname.crt; ssl_certificate_key /etc/pki/tls/private/hostname.key;
E hoʻololi me kēia ala ▼
ssl_certificate /etc/pki/tls/certs/server.yourdomain.com.bundle; ssl_certificate_key /etc/pki/tls/private/server.yourdomain.com.key;
- Inā ʻoe e hoʻohana ana iā Nginx, pono ʻoe e hana like.
A laila e hoʻomaka hou i ka lawelawe ʻo Apache (a me Nginx) a hōʻoia i ka hana e like me ka maʻamau?
systemctl restart httpd systemctl restart nginx
ʻO ka hope, e hōʻano hou i ka loulou e ʻike i ke awa 2087https:// server.yourdomain. com:2087/login/index.php
Aia kekahi dongle?
Hope Chen Weiliang Blog ( https://www.chenweiliang.com/ ) kaʻana like "CWP7 SSL hewa? Pehea e hoʻokomo ai ka hostname i ka palapala hōʻoia manuahi Letsencrypt?", He mea kōkua iā ʻoe.
Welina mai e kaʻana like i ka loulou o kēia ʻatikala:https://www.chenweiliang.com/cwl-27950.html
Welina mai i ke kahawai Telegram o ka moʻomanaʻo ʻo Chen Weiliang e kiʻi i nā mea hou loa!
📚 He waiwai nui kēia alakaʻi, 🌟He manawa kakaikahi kēia, mai poina! ⏰⌛💨
Kaʻana like a like inā makemake ʻoe!
ʻO kāu kaʻana like a me kou makemake ʻo kā mākou hoʻoikaika mau!