CWP7 SSL sese?E faʻafefea ona faʻapipiʻi le igoa ole igoa ole Letsencrypt tusi pasi fua?

E faʻafefea ona faʻapipiʻi Letsencrypt SSL free SSL tusi faamaonia mo CWP7 hostname?

• o lea lava CWP Pulea Vaega AutoSSL ta'iala e fa'apipi'i otometi le Letsencrypt tusipasi SSL fua.

Afai o le CWP7 SSL savali sese "cwpsrv.auaunaga faitaʻitaʻia.", faʻamolemole suʻesuʻe le fofo o le aʻoaʻoga nei▼

CWP Control Panel ua i lalo ma ua le mafai ona maua?

Amata / taofi / toe amata / vaʻai i le tulaga o le auaunaga CWP, lea e mafai ona faia e ala i le faʻaaogaina o poloaiga nei: auaunaga cwpsrv amata auaunaga cwpsrv taofi le auaunaga cwpsrv toe amata le auaunaga cwpsrv tulaga CWP pulega panel auaunaga ua le mafai ona amata...

Fa'afefea ona sui le igoa talimalo ile CWP?

Fa'apea o lou igoa talimalo o server.yourdomain.com

1. Muamua, fatuina se subdomain i le CWP backend:server.yourdomain.com
2. Fa'aopoopo se fa'amaumauga A ile DNS, ole subdomain e fa'asino ile lauLinuxtuatusi IP server.
3. Alu ile → CWP Settings → Suia Hostname ile lisi agavale o cwp.admin e teu ai lou igoa talimalo.

• O le a faʻapipiʻi faʻapipiʻi le SSL, naʻo le pau le tulaga e te setiina se DNS A faʻamaumauga mo le igoa talimalo.
• Afai e leai sau faamaumauga A mo le igoa talimalo, o le a faʻapipiʻi e le CWP se tusi pasi saini a le tagata lava ia.
• Manatua o le igoa talimalo e tatau ona avea ma subdomain ae le o le vaega autu.

Mo le http:// i le https:// redirection, e te mafaia/usr/local/apache/htdocs/.htaccessFausia lenei faila htaccess:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Let's Encrypt o se pule faʻamaonia lea na faʻalauiloaina ia Aperila 2016, 4, ma le faʻamoemoe o le faʻaumatiaina o le tusi lesona o loʻo iai nei, faʻamaonia, sainia, faʻapipiʻi ma faʻafouina tusi faamaonia mo upega tafaʻilagi malupuipuia.

Hostname/FQDN Fa'apipi'i Letsencrypt SSL Tusi Faamaonia

O le a le uiga o le FQDN??

• FQDN (fully qualified domain name) ole igoa ole igoa ole igoa atoa, ole igoa ole igoa ole komipiuta patino po'o le talimalo ile Initaneti.

Fa'afefea ona talosaga mo Let's Encrypt?

O loʻo i ai se module fou o loʻo aofia i le CWP7 Left Menu → WebServer Settings → SSL Certificates, mai iina e mafai ona e faʻapipiʻi Letsencrypt tusipasi mo soʻo se vaega / subdomain e faʻaaoga ai le AutoSSL.

(Afai e te filifilia Fausia Let's Encrypt i le taimi lava e tasi pe a faʻaopoopo se igoa faʻapitonuʻu poʻo se igoa subdomain, e mafai ona e faaseʻeina laasaga o loʻo i luga)

Letsencrypt SSL Faiga Faamaonia

• Letsencrypt mo fa'amaumauga autu ma www alias
• Letsencrypt faaopoopo le igoa ole igoa ma le www. alias
• Letsencrypt mo subdomains ma www.alias
• Letsencrypt e mafai foi ona faʻapipiʻi aganuʻu
• Siaki le aso e muta ai le tusi faamaonia
• fa'afou fa'a-autometi
• Fa'amalo fa'afou fa'amau
• Apache port 443 su'esu'ega fa'apitoa

Fa'afouga otometi o Letsencrypt SSL tusipasi

Ona o le faaletonu, Letsencrypt tusi faamaonia e aoga mo 90 aso.

O le fa'afouga e otometi ma fa'afou tusi pasi i le 30 aso a'o le'i muta.

O loʻo i ai se module fou o loʻo aofia i le CWP7 Left Menu → WebServer Settings → SSL Certificates, mai iina e mafai ona e faʻapipiʻi Letsencrypt tusipasi mo soʻo se vaega / subdomain e faʻaaoga ai le AutoSSL.

Fa'asa'o le faila fa'atulagaina e sui ai le ala tusi fa'amaonia SSL

Ma le isi, e tatau ona e faʻasaʻo le faila faʻapipiʻi ma faʻaopopo le ala ile tusi faʻamaonia SSL (faʻaaliga e aveese le faʻamatalaga, ma suia le ala ia oe lava).

Fa'asa'o le faila fa'atulagaina o le cwpsrv ▼

/usr/local/cwpsrv/conf/cwpsrv.conf

Faʻaopopo i leMataitu mataituinaSSL uafu ▼

listen 2812 ssl;

E iai fo'i le palakalafa ▼ o lo'o mulimuli mai

ssl_certificate /etc/pki/tls/certs/hostname.crt;
ssl_certificate_key /etc/pki/tls/private/hostname.key;

Sui i le ala lea ▼

ssl_certificate /etc/pki/tls/certs/server.yourdomain.com.bundle;
ssl_certificate_key /etc/pki/tls/private/server.yourdomain.com.key;

A maeʻa, aua neʻi galo e toe amata le cwpsrv service ma le poloaiga lenei ▼

service cwpsrv restart

Ona alu lea i le Webserver Settings → WebServers Conf Editor → Apache → /usr/local/apache/conf.d/

Fa'atonu Fa'amatalaga ▼

hostname-ssl.conf

Tuu le parakalafa ▼ o loo i lalo

ssl_certificate /etc/pki/tls/certs/hostname.crt;
ssl_certificate_key /etc/pki/tls/private/hostname.key;

Sui i le ala lea ▼

ssl_certificate /etc/pki/tls/certs/server.yourdomain.com.bundle;
ssl_certificate_key /etc/pki/tls/private/server.yourdomain.com.key;

• Afai o loʻo e faʻaaogaina Nginx, e tatau ona e faia tutusa.

Ona toe amata lea o le Apache (ma Nginx) auaunaga ma ia mautinoa e galue e pei ona masani ai?

systemctl restart httpd
systemctl restart nginx

Mulimuli ane, toe fa'afou le feso'ota'iga saini e va'ai i le taulaga 2087https:// server.yourdomain. com:2087/login/index.phpE i ai se dongle?