Papa Kuhikuhi ʻatikala
He maʻalahi a maʻalahi hoʻi e hoʻohana i ka papa mana VestaCP : ʻO ka hoʻokomo ʻana i ka papa mana VestaCP e hiki ai ke hoʻokomo ʻakomi ʻia o nā palapala hōʻoia Let's Encrypt SSL, e kaulana ai i waena o nā loea SEO ma nā ʻāina ʻē.
He aha ka Let's Encrypt?
ʻO Let's Encrypt kahi SSL Certificate Authority i hoʻokuʻu ʻia ma ʻApelila 2016, 4.
- Hāʻawi i kahi palapala hōʻoia X.509 manuahi no ka hoʻopili ʻana i ka Transport Layer Security (TLS) ma o ke kaʻina hana ʻakomi,
- Hoʻolālā ʻia e hoʻopau i ka hana lima o kēia manawa, hōʻoia, kau inoa, hoʻonohonoho a me ka hoʻonui ʻana i nā palapala hōʻoia no nā pūnaewele paʻa.
ʻO ka ʻaoʻao login panel control VestaCP, me ka hoʻohana ʻana i ke awa 8083.
He aha ke awa 8083?
- ʻO 8083 kahi ʻaoʻao koho a hoʻoiho i ke awa faila, he awa kūpono.
- I loko o ka ʻenehana pūnaewele, aia nā awa i nā awa kino a me nā awa kūpono.
ʻOkoʻa ma waena o ke awa kino a me ke awa noʻonoʻo
- ʻO nā awa kino e pili ana i nā awa e ola maoli ana, e like me nā modem ADSL, nā hub, nā hoʻololi, a me nā mea ala e hoʻopili ai i nā ʻenehana pūnaewele ʻē aʻe e like me nā awa RJ-45, nā awa SC, etc.
- ʻO ke awa logical he awa e hoʻokaʻawale i nā lawelawe ma ke ʻano loiloi, e like me nā awa lawelawe ma ka protocol TCP/IP.ʻO ka pae helu awa ʻo 0 a 65535.
Eia nō naʻe, i kēia manawa ke hōʻike ʻia nei ke awa 8083 o ka VestaCP control panel ma ka paʻamau me ka ʻole o kahi palapala palekana SSL...
No laila, ma hope o ke kau ʻana i ka panela VestaCP , e hōʻike ʻo Google Chrome i ka ʻōlelo aʻe:
- ʻAʻole pili pilikino kāu pili
- Hiki i nā mea hoʻouka ke hoʻāʻo e ʻaihue i kāu ʻike (e laʻa i nā ʻōlelo huna, nā kamaʻilio a i ʻole ka ʻike kāleka hōʻaiʻē).
Hiki iā Vesta login panel https
KaʻAnuʻu Hana 1: E komo i ka papa hoʻokele VestaCP me ka hoʻohana ʻana i ka inoa kikowaena a me ka awa 8083 ▼
http:// 你的域名:8083/
KaʻAnuʻu Hana 2: E komo i ka lawelawe pūnaewele VestaCP, e huli i ka inoa kikowaena o kāu kikowaena, a laila kaomi i ka Hoʻoponopono. ▼
KaʻAnuʻu Hana 3: E huli a nānā iā SSL a me Let's Encrypt. "Enable SSL (SSL Support)" a me "Use Let's Encrypt (Let's Encrypt Support)" ▼
- A laila kaomi Save (koke ka luna i Save a kali no ʻelima mau minuke e ʻike i ka noi no kahi palapala SSL)
KaʻAnuʻu 4:E huli i ka Let's Encrypt secure certificate storage place Let's Encrypt stores kona SSL certificate in /home/username/conf/web/ ma kahi. E ʻoluʻolu e papa inoa i ko lākou mau wahi ▼
/home/username/conf/web/ssl.website.crt /home/username/conf/web/ssl.website.key
VestaCP control panel, mālama i kona inoa inoa SSL palapala ma ▼
/usr/local/vesta/ssl/certificate.crt /usr/local/vesta/ssl/certificate.key
No laila, pono mākou e hoʻololi mua i nā faila palapala VestaCP kahiko i kekahi kikokikona dummy i ʻole e hoʻohana hou ʻo VestaCP iā lākou, a laila pili i kēia mau faila. E ʻoluʻolu e hahai i nā ʻanuʻu ma lalo nei e aʻo pehea e hana ai i kēia.
KaʻAnuʻu Hana 5: SSH i loko o kāu kikowaena a hoʻokomo i kēia mau kauoha ʻelua e hoʻololi i ka inoa o nā faila kahiko ▼
mv /usr/local/vesta/ssl/certificate.crt /usr/local/vesta/ssl/unusablecer.crt mv /usr/local/vesta/ssl/certificate.key /usr/local/vesta/ssl/unusablecer.key
- Inā ʻaʻole e hoʻokō ʻia nā hana ma lalo nei, e hoʻopau ana ka loulou SSL, ʻaʻole hiki ke wehe ʻia ka pūnaewele, a me ka faila SSL "mea hoʻohana ʻole"inoa, hoʻololi i ka inoa mua"palapala” me ka pau ʻole o ka manawa e hoʻokomo hou i ka panel VestaCP.
KaʻAnuʻu Hana 6: E hana i kahi loulou hōʻailona e kuhikuhi i ka loulou hōʻailona hou. E ʻoluʻolu e pani i kou inoa inoa, e like me: admin. E pani iā chenweiliang.com me ka inoa kikowaena o kāu kikowaena VPS (FQDN). ▼
ln -s /home/admin/conf/web/ssl.chenweiliang.com.crt /usr/local/vesta/ssl/certificate.crt ln -s /home/admin/conf/web/ssl.chenweiliang.com.key /usr/local/vesta/ssl/certificate.key
KaʻAnuʻu Hana 7: E hoʻomaka hou iā VestaCP
service vesta restart
KaʻAnuʻu Hana 8: E holoi i kāu waihona polokalamu kele pūnaewele a laila e hoʻāʻo hou e komo i loko o ka panela mana VestaCP me ka hoʻohana ʻana i ka awa 8083.
- I kēia manawa ua paʻa kāu SSL ma ke awa 8083!
Hoʻonā ʻae ʻae ʻia
No ka hoʻoponopono ʻana i nā ʻae i haki, e hoʻokomo i kēia kauoha▼
- kau your.adminpanel.com E hoʻololi me ka URL o kāu console hoʻokele VestaCP.
chgrp mail ssl.your.adminpanel.com.key chmod 660 ssl.your.adminpanel.com.key chgrp mail ssl.your.adminpanel.com.crt chmod 660 ssl.your.adminpanel.com.crt
ʻO ka mea i luna ke ala e hiki ai i ka palapala SSL ma ke kāʻei VestaCP.
Pehea e hoʻoikaika ai i ka inoa inoa e hoʻohana i ka palapala SSL SSL?
KaʻAnuʻu Hana 1: E hoʻouka i kahi kumu hoʻohālike nginx maʻamau ▼
cd /usr/local/vesta/data/templates/web wget http://c.vestacp.com/0.9.8/rhel/force-https/nginx.tar.gz tar -xzvf nginx.tar.gz rm -f nginx.tar.gz
KaʻAnuʻu 2:E hoʻonoho i ka template proxy i ka force-https 
- E hana i kahi preset hou, a i ʻole i kahi preset i loaʻa, e hoʻonohonoho i ka force-https ma ke ʻano o ka hōʻailona proxy Nginx.
- I ka hoʻohui ʻana i nā mea hoʻohana hou, hiki iā ʻoe ke hoʻohana i ka template force-https e hāʻawi i nā ʻae i nā mea hoʻohana o ka papahana preset.
Hoʻihoʻi ʻia ʻo HTTP i HTTPS
Pehea e hoʻihoʻi ai ʻo VestaCP i ka HTTP i HTTPS me ka hoʻohana ʻana i ka htaccess? Makemake ʻoe e hoʻihoʻi hou i kāu pūnaewele i kahi mana palekana (HTTPS) o kāu pūnaewele i hoʻopili ʻia?
Ma ka waihona .htaccess, e hoʻohui i kēia 301 redirect syntax▼
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R,L]- ʻO ka "L" ma luna [R,L] ke ʻano o ka hope (Last), inā loaʻa kēia L i nā grammars ʻē aʻe, ʻaʻole hiki ke hoʻihoʻi ʻia ka http i https.
- No laila, makemake ʻia e hoʻohuli hou i ka http301 i ka syntax https ma luna (ma mua o nā syntax ʻē aʻe).
Inā makemake ʻoe e hoʻohui i nā palapala SSL paʻa i kāu mau kikowaena ʻē aʻe ma ka ʻaoʻao mana VestaCP, e ʻoluʻolu e nānā i kēia kumu aʻo ▼
Me ka manaʻolana, e kōkua iā ʻoe ka ʻatikala "VestaCP Backend Port 8083 HTTPS Invalid? SSL Certificate Installation Tutorial" i kaʻana like ʻia ma ka blog a Chen Weiliang ( https://www.chenweiliang.com/ ).
E ʻoluʻolu e kaʻana like i ka loulou o kēia ʻatikala: https://www.chenweiliang.com/cwl-705.html