Njehie CWP7 SSL? Kedu otu aha nnabata ga-esi wụnye asambodo efu Letsencrypt?

Otu esi etinye akwụkwọ SSL n'efu Letsencrypt SSL maka aha nnabata CWP7?

• nke a Ogwe njikwa CWP Ntuziaka AutoSSL ka ịwụnye asambodo SSL efu Letsencrypt na-akpaghị aka.

Ọ bụrụ na ị hụta ozi njehie " cwpsrv.service dara ." na CWP7 SSL, biko gaa na nkuzi a maka azịza ▼

🔗CWP njikwa adaala na enweghị ike ịnweta ya?

Kedu otu m ga-esi gbanwee aha onye nnabata na CWP?

Were ya na aha nnabata gị bụ server.yourdomain.com

1. Nke mbụ, mepụta ngalaba subdomain na azụ azụ CWP:server.yourdomain.com
2. Tinye ndekọ na DNS, subdomain na-atụ aka gịLinuxAdreesị IP nkesa.
3. Gaa na → Ntọala CWP → Gbanwee aha nnabata na menu aka ekpe nke cwp.admin iji chekwaa aha nnabata gị.

• A ga-etinye SSL na-akpaghị aka, naanị ọnọdụ bụ na ị melite DNS ndekọ maka aha nnabata.
• Ọ bụrụ na ịnweghị ndekọ maka aha nnabata, CWP ga-etinye asambodo ejiri aka ya bịa.
• Rịba ama na aha nnabata kwesịrị ịbụ subdomain ọ bụghị ngalaba bụ isi.

Maka http:// ka https:// redirection, ị nwere ike/usr/local/apache/htdocs/.htaccessMepụta faịlụ htaccess a:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Ka anyị Encrypt bụ ikike asambodo ewepụtara na Eprel 2016, 4, n'ebumnobi iwepụ akwụkwọ ntuziaka dị ugbu a, nkwenye, ibinye aka, ntinye na nwelite asambodo maka webụsaịtị echedoro.

Aha nnabata/FQDN Wụnye Asambodo SSL Letsencrypt

Gịnị ka FQDN pụtara?

• FQDN (fully qualified domain name) aha ngalaba tozuru oke, nke bụ ngalaba aha zuru oke nke otu kọmputa ma ọ bụ onye ọbịa na ịntanetị.

Kedu otu m ga-esi tinye akwụkwọ maka Let's Encrypt?

Enwere modul ọhụrụ gụnyere na CWP7 NchNhr aka ekpe → Ntọala WebServer → Asambodo SSL, site n'ebe ahụ ị nwere ike iwunye asambodo Letsencrypt maka ngalaba/ subdomain ọ bụla site na iji AutoSSL.

(Ọ bụrụ na ị họrọ Mepụta Ka anyị Encrypt n'otu oge mgbe ị na-agbakwunye ngalaba aha ma ọ bụ aha subdomain, ị nwere ike ịgafe usoro ndị a dị n'elu)

Njirimara Asambodo SSL Letsencrypt

• Letsencrypt maka ngalaba akaụntụ na www utu aha
• Letsencrypt tinye ngalaba aha na www. utu aha
• Letsencrypt maka subdomains na www.alias
• Letsencrypt nwekwara ike ịwụnye omenala
• Lelee ụbọchị njedebe nke akwụkwọ ahụ
• akpaaka-emeghari ohuru
• Kwado bọtịnụ mmeghari ohuru
• Ọdụ ụgbọ mmiri Apache 443 nchọpụta akpaaka

Na-akpakwa aka ọhụrụ nke Letsencrypt SSL asambodo

Site na ndabara, asambodo Letsencrypt dị irè maka ụbọchị 90.

Mmeghari ohuru na akpaaka, a na-emeghachikwa asambodo ụbọchị iri atọ tupu ngafe.

Enwere modul ọhụrụ gụnyere na CWP7 NchNhr aka ekpe → Ntọala WebServer → Asambodo SSL, site n'ebe ahụ ị nwere ike iwunye asambodo Letsencrypt maka ngalaba/ subdomain ọ bụla site na iji AutoSSL.

Dezie faịlụ nhazi iji dochie ụzọ akwụkwọ SSL

Na-esote, ịkwesịrị idezi faịlụ nhazi ma tinye ụzọ na akwụkwọ SSL (dee ka ị wepụ okwu ahụ, ma gbanwee ụzọ nke gị).

Dezie faịlụ nhazi cwpsrv ▼

/usr/local/cwpsrv/conf/cwpsrv.conf

Tinye nlekota Monit na ọdụ ụgbọ mmiri SSL ▼

listen 2812 ssl;

E nwekwara paragraf na-esonụ ▼

ssl_certificate /etc/pki/tls/certs/hostname.crt;
ssl_certificate_key /etc/pki/tls/private/hostname.key;

Dochie ụzọ na-esonụ ▼

ssl_certificate /etc/pki/tls/certs/server.yourdomain.com.bundle;
ssl_certificate_key /etc/pki/tls/private/server.yourdomain.com.key;

Ozugbo emechara, echefula ịmalitegharị ọrụ cwpsrv site na iji iwu a ▼

service cwpsrv restart

Gaa na Ntọala Weebụ → WebServers Conf Editor → Apache → /usr/local/apache/conf.d/

Dezie profaịlụ ▼

hostname-ssl.conf

Tinye paragraf na-esonụ ▼

ssl_certificate /etc/pki/tls/certs/hostname.crt;
ssl_certificate_key /etc/pki/tls/private/hostname.key;

Dochie ụzọ na-esonụ ▼

ssl_certificate /etc/pki/tls/certs/server.yourdomain.com.bundle;
ssl_certificate_key /etc/pki/tls/private/server.yourdomain.com.key;

• Ọ bụrụ na ị na-eji Nginx, ị ga-eme otu ihe ahụ.

Mgbe ahụ malitegharịa ọrụ Apache (na Nginx) wee hụ na ọ na-arụ ọrụ dịka ọ na-adị?

systemctl restart httpd
systemctl restart nginx

N'ikpeazụ, megharịa njikọ nbanye iji lelee ọdụ ụgbọ mmiri 2087https:// server.yourdomain. com:2087/login/index.phpEnwere dongle?