VestaCP kumbuyo 8083 doko https ndi yolakwika?Ikani SSL Certificate Tutorial

VestaCP control panel ndi yosavuta kugwiritsa ntchito: Kukhazikitsa VestaCP control panel kumathandiza kukhazikitsa ma certificate a SSL a Let's Encrypt okha, zomwe zimapangitsa kuti ikhale yotchuka pakati pa akatswiri a SEO akunja.

Kodi Let's Encrypt ndi chiyani?

Let's Encrypt ndi SSL Certificate Authority yomwe idakhazikitsidwa pa Epulo 2016, 4.

• Amapereka satifiketi yaulere ya X.509 ya kubisa kwa Transport Layer Security (TLS) kudzera munjira yodzichitira okha,
• Zapangidwa kuti zithetse kupangidwa kwapamanja kwaposachedwa, kutsimikizira, kusaina, kukhazikitsa ndi kukonzanso ziphaso zamawebusayiti otetezeka.

Tsamba lolowera gulu la VestaCP, pogwiritsa ntchito doko 8083.

Kodi port 8083 ndi chiyani?

• 8083 ndi tsamba loyimira ndikutsitsa fayilo, ndi doko lomveka.
• Muukadaulo wamaukadaulo, madoko amaphatikiza madoko akuthupi ndi madoko omveka.

Kusiyana Pakati pa Physical Port ndi Logical Port

• Madoko akuthupi amatanthawuza madoko omwe alipo, monga ma modemu a ADSL, ma hubs, ma switch, ndi ma routers omwe amalumikizana ndi zida zina za netiweki monga madoko a RJ-45, madoko a SC, ndi zina zambiri.
• Doko lomveka ndi doko lomwe limasiyanitsa mautumiki ndi matanthauzo omveka, monga madoko amtundu wa TCP/IP protocol.Chiwerengero cha doko ndi 0 mpaka 65535.

Komabe, pakadali pano doko 8083 la gulu lowongolera la VestaCP likuwonetsedwa mosakhazikika popanda chiphaso chachitetezo cha SSL ...

Chifukwa chake, mukakhazikitsa gulu la VestaCP , Google Chrome idzawonetsa izi:

Pulogalamu yolowera ya Vesta imathandizira https

Gawo 1: Lowani mu gulu loyang'anira la VestaCP pogwiritsa ntchito dzina la hostname ndi doko 8083 ▼

http:// 你的域名:8083/

Gawo 2: Pezani ntchito ya pa intaneti ya VestaCP, pezani dzina la seva yanu, kenako dinani Sinthani. ▼

Gawo 3: Pezani ndikuwona SSL ndi Tiyeni Titseke. "Yambitsani SSL (SSL Support)" ndi "Gwiritsani Ntchito Tiyeni Titseke (Let's Encrypt Support)" ▼

• Kenako dinani Sungani (woyang'anira akudina Sungani ndikudikirira pafupifupi mphindi zisanu kuti muwone pulogalamu ya satifiketi ya SSL)

Khwerero 4:Pezani Tiyeni Tibisire malo otetezedwa a satifiketi Tiyeni Tilembetsere satifiketi yake ya SSL mkati /home/username/conf/web/ mmalo. Chonde lembani malo awo ▼

/home/username/conf/web/ssl.website.crt
/home/username/conf/web/ssl.website.key

Gulu lowongolera la VestaCP, sungani satifiketi yake ya SSL mu ▼

/usr/local/vesta/ssl/certificate.crt
/usr/local/vesta/ssl/certificate.key

Chifukwa chake, tifunika kutchulanso mafayilo akale a satifiketi ya VestaCP ku zolemba zina kuti VestaCP isawagwiritsenso ntchito, kenako ndikulumikiza mafayilowa mophiphiritsa. Chonde tsatirani njira zotsatirazi kuti mudziwe momwe mungachitire izi.

Gawo 5: Lowetsani SSH mu seva yanu ndikulowetsa malamulo awiriwa kuti musinthe mafayilo akale ▼

mv /usr/local/vesta/ssl/certificate.crt /usr/local/vesta/ssl/unusablecer.crt
mv /usr/local/vesta/ssl/certificate.key /usr/local/vesta/ssl/unusablecer.key

• Ngati zotsatirazi zikulephera kuchitika, kupangitsa kuti ulalo wa SSL ulephereke, tsambalo silingatsegulidwe, ndipo fayilo ya SSL "osagwiritsa ntchito"dzina, sinthani ku dzina lakale"kalata” osataya nthawi kukhazikitsanso gulu la VestaCP.

Gawo 6: Pangani ulalo wophiphiritsa kuti uloze ulalo watsopano wophiphiritsa. Chonde sinthani dzina lanu lolowera, monga: admin. Sinthani chenweiliang.com ndi dzina la seva yanu ya VPS (FQDN). ▼

ln -s /home/admin/conf/web/ssl.chenweiliang.com.crt /usr/local/vesta/ssl/certificate.crt
ln -s /home/admin/conf/web/ssl.chenweiliang.com.key /usr/local/vesta/ssl/certificate.key

Gawo 7: Yambitsaninso VestaCP

service vesta restart

Gawo 8: Chotsani malo osungira a msakatuli wanu kenako yesani kulowa mu gulu lowongolera la VestaCP pogwiritsa ntchito doko 8083.

• Tsopano SSL yanu padoko 8083 ndi yotetezeka!

Yankho la zilolezo zosweka

Kuti mukonze zilolezo zosweka, lowetsani lamulo ili▼

• ndidzatero your.adminpanel.com M'malo ndi URL ya VestaCP management console.

chgrp mail ssl.your.adminpanel.com.key
chmod 660 ssl.your.adminpanel.com.key
chgrp mail ssl.your.adminpanel.com.crt
chmod 660 ssl.your.adminpanel.com.crt

Zomwe zili pamwambazi ndi njira yopezera satifiketi ya SSL kumbuyo kwa VestaCP.

Momwe mungakakamize dzina la domain kuti mugwiritse ntchito satifiketi ya https SSL?

Gawo 1: Ikani template ya nginx ▼

cd /usr/local/vesta/data/templates/web
wget http://c.vestacp.com/0.9.8/rhel/force-https/nginx.tar.gz
tar -xzvf nginx.tar.gz
rm -f nginx.tar.gz

Khwerero 2:Khazikitsani template ya proxy kuti ikakamize-https

• Pangani zokonzeratu zatsopano, kapena pazomwe zilipo, ikani mphamvu-https ngati template ya proxy ya Nginx.
• Mukawonjezera ogwiritsa ntchito atsopano, mutha kugwiritsa ntchito template ya Force-https kuti mupereke zilolezo kwa ogwiritsa ntchito dongosolo lokhazikitsidwa.

HTTP imalunjika ku HTTPS

Kodi VestaCP imatsogolera bwanji HTTP ku HTTPS pogwiritsa ntchito htaccess? Kodi mukufuna kuwongolera tsamba lanu kuti likhale lotetezeka (HTTPS) latsamba lanu lomwe lili ndi encryption?

Mufayilo ya .htaccess, yonjezerani mawu otsatirawa a 301 otsogoleranso▼

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R,L]

• "L" pamwambapa [R,L] amatanthauza Last (Last), ngati galamala ina ilinso ndi L, http sangatumizidwenso ku https.
• Chifukwa chake, tikulimbikitsidwa kuti mutsogolere http301 kupita ku https syntax pamwamba (pamaso pa ma syntaxes ena).

Ngati mukufuna kuwonjezera ziphaso zotetezedwa za SSL kumadera anu ena mu gulu lowongolera la VestaCP, chonde onani phunziro ili ▼

🔗Momwe mungagwiritsire ntchito gulu la VestaCP? Ikani positi ofesi / onjezani mayina angapo amtundu & kasamalidwe ka mafayilo