VestaCP kumbuyo 8083 doko https ndi yolakwika?Ikani SSL Certificate Tutorial

VestaCP Gulu lowongolera ndilosavuta komanso losavuta kugwiritsa ntchito: Ikani VestaCP Control Panel, yomwe ingathe kukhazikitsa ntchito ya chitetezo cha Let's Encrypt SSL certificate, kotero kuti imalandiridwa bwino ndi mayiko akunja.SEOOgwiritsa mwalandira.

Kodi Let's Encrypt ndi chiyani?

Let's Encrypt ndi SSL Certificate Authority yomwe idakhazikitsidwa pa Epulo 2016, 4.

• Amapereka satifiketi yaulere ya X.509 ya kubisa kwa Transport Layer Security (TLS) kudzera munjira yodzichitira okha,
• Zapangidwa kuti zithetse kupangidwa kwapamanja kwaposachedwa, kutsimikizira, kusaina, kukhazikitsa ndi kukonzanso ziphaso zamawebusayiti otetezeka.

Tsamba lolowera gulu la VestaCP, pogwiritsa ntchito doko 8083.

Kodi port 8083 ndi chiyani?

• 8083 ndi tsamba loyimira ndikutsitsa fayilo, ndi doko lomveka.
• Muukadaulo wamaukadaulo, madoko amaphatikiza madoko akuthupi ndi madoko omveka.

Kusiyana Pakati pa Physical Port ndi Logical Port

• Madoko akuthupi amatanthawuza madoko omwe alipo, monga ma modemu a ADSL, ma hubs, ma switch, ndi ma routers omwe amalumikizana ndi zida zina za netiweki monga madoko a RJ-45, madoko a SC, ndi zina zambiri.
• Doko lomveka ndi doko lomwe limasiyanitsa mautumiki ndi matanthauzo omveka, monga madoko amtundu wa TCP/IP protocol.Chiwerengero cha doko ndi 0 mpaka 65535.

Komabe, pakadali pano doko 8083 la gulu lowongolera la VestaCP likuwonetsedwa mosakhazikika popanda chiphaso chachitetezo cha SSL ...

Choncho, muIkani gulu la VestaCPKumbuyo,Google ChromeChidziwitso ichi chikuwoneka:

Pulogalamu yolowera ya Vesta imathandizira https

Khwerero 1:Lowani ku gulu la admin la VestaCP pogwiritsa ntchito dzina la alendo ndi doko 8083 ▼

http:// 你的域名:8083/

Khwerero 2: Lowetsani ntchito ya WEB ya VestaCP kuti mupeze dzina la seva yanu, kenako dinani EDIT ▼

Khwerero 3:Pezani ndikuyang'ana SSL ndipo Tiyeni Tilembetse "Yambitsani SSL (SSL Support)" ndi "Gwiritsani ntchito Let's Encrypt (Tiyeni Tilembetse)" ▼

• Kenako dinani Sungani (woyang'anira akudina Sungani ndikudikirira pafupifupi mphindi zisanu kuti muwone pulogalamu ya satifiketi ya SSL)

Khwerero 4:Pezani Tiyeni Tibisire malo otetezedwa a satifiketi Tiyeni Tilembetsere satifiketi yake ya SSL mkati /home/username/conf/web/ mmalo. Chonde lembani malo awo ▼

/home/username/conf/web/ssl.website.crt
/home/username/conf/web/ssl.website.key

Gulu lowongolera la VestaCP, sungani satifiketi yake ya SSL mu ▼

/usr/local/vesta/ssl/certificate.crt
/usr/local/vesta/ssl/certificate.key

Chifukwa chake, tifunika kutchulanso mafayilo akale a satifiketi ya VestaCP ku zolemba zina kuti VestaCP isawagwiritsenso ntchito, kenako ndikulumikiza mafayilowa mophiphiritsa. Chonde tsatirani njira zotsatirazi kuti mudziwe momwe mungachitire izi.

Khwerero 5:SSH mu seva yanu ndikuyika malamulo awiriwa kuti mutchulenso fayilo yakale ▼

mv /usr/local/vesta/ssl/certificate.crt /usr/local/vesta/ssl/unusablecer.crt
mv /usr/local/vesta/ssl/certificate.key /usr/local/vesta/ssl/unusablecer.key

• Ngati zotsatirazi zikulephera kuchitika, kupangitsa kuti ulalo wa SSL ulephereke, tsambalo silingatsegulidwe, ndipo fayilo ya SSL "osagwiritsa ntchito"dzina, sinthani ku dzina lakale"kalata” osataya nthawi kukhazikitsanso gulu la VestaCP.

Khwerero 6:Pangani ulalo wophiphiritsa kuti muloze ku ulalo watsopano wophiphiritsa Chonde lowetsani dzina lanu lolowera, monga:boma ndidzatero chenweiliang.com Bwezerani ndi dzina la alendo (FQDN) la seva yanu ya VPS▼

ln -s /home/admin/conf/web/ssl.chenweiliang.com.crt /usr/local/vesta/ssl/certificate.crt
ln -s /home/admin/conf/web/ssl.chenweiliang.com.key /usr/local/vesta/ssl/certificate.key

Khwerero 7:Yambitsaninso VestaCP

service vesta restart

Khwerero 8:Chotsani msakatuli wanu ndikuyesanso kulowa pagawo lowongolera la VestaCP pogwiritsa ntchito port 8083.

• Tsopano SSL yanu padoko 8083 ndi yotetezeka!

Yankho la zilolezo zosweka

Kuti mukonze zilolezo zosweka, lowetsani lamulo ili▼

• ndidzatero your.adminpanel.com M'malo ndi URL ya VestaCP management console.

chgrp mail ssl.your.adminpanel.com.key
chmod 660 ssl.your.adminpanel.com.key
chgrp mail ssl.your.adminpanel.com.crt
chmod 660 ssl.your.adminpanel.com.crt

Zomwe zili pamwambazi ndi njira yopezera satifiketi ya SSL kumbuyo kwa VestaCP.

Momwe mungakakamize dzina la domain kuti mugwiritse ntchito satifiketi ya https SSL?

Gawo 1:Ikani template ya nginx ▼

cd /usr/local/vesta/data/templates/web
wget http://c.vestacp.com/0.9.8/rhel/force-https/nginx.tar.gz
tar -xzvf nginx.tar.gz
rm -f nginx.tar.gz

Khwerero 2:Khazikitsani template ya proxy kuti ikakamize-https

• Pangani zokonzeratu zatsopano, kapena pazomwe zilipo, ikani mphamvu-https ngati template ya proxy ya Nginx.
• Mukawonjezera ogwiritsa ntchito atsopano, mutha kugwiritsa ntchito template ya Force-https kuti mupereke zilolezo kwa ogwiritsa ntchito dongosolo lokhazikitsidwa.

HTTP imalunjika ku HTTPS

Kodi VestaCP imatsogolera bwanji HTTP ku HTTPS pogwiritsa ntchito htaccess? Kodi mukufuna kuwongolera tsamba lanu kuti likhale lotetezeka (HTTPS) latsamba lanu lomwe lili ndi encryption?

Mufayilo ya .htaccess, yonjezerani mawu otsatirawa a 301 otsogoleranso▼

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R,L]

• "L" pamwambapa [R,L] amatanthauza Last (Last), ngati galamala ina ilinso ndi L, http sangatumizidwenso ku https.
• Chifukwa chake, tikulimbikitsidwa kuti mutsogolere http301 kupita ku https syntax pamwamba (pamaso pa ma syntaxes ena).

Ngati mukufuna kuwonjezera ziphaso zotetezedwa za SSL kumadera anu ena mu gulu lowongolera la VestaCP, chonde onani phunziro ili ▼

🔗Momwe mungagwiritsire ntchito gulu la VestaCP? Ikani positi ofesi / onjezani mayina angapo amtundu & kasamalidwe ka mafayilo