VestaCP yekumashure 8083 port https haina basa?Isa SSL Certificate Tutorial

VestaCP control panel iri nyore kushandisa: Kuisa VestaCP control panel kunoita kuti zvitupa zveLet's Encrypt SSL zviitwe otomatiki, zvichiita kuti ive yakakurumbira pakati pevashandi veSEO vari kunze kwenyika.

Chii chinonzi Let's Encrypt?

Let's Encrypt is SSL Certificate Authority yakatangwa muna Kubvumbi 2016, 4.

• Inopa chemahara X.509 chitupa cheTransport Layer Security (TLS) encryption kuburikidza ne automated process,
• Yakagadzirirwa kubvisa yazvino kugadzirwa kwemanyorero, kuonesa, kusaina, kuisa uye kugadzirisa zvitupa zvewebhusaiti akachengeteka.

VestaCP control panel yekupinda peji, uchishandisa port 8083.

Chii chinonzi port 8083?

• 8083 peji reproxy uye dhawunirodha faira chiteshi, ine musoro chiteshi.
• Munetiweki tekinoroji, madoko anosanganisira emuviri madoko uye zvine musoro zviteshi.

Musiyano pakati pePhysical Port uye Logical Port

• Zviteshi zvemuviri zvinoreva zviteshi zviripo chaizvo, senge ADSL modem, hubs, switch, uye marouters anobatana kune mamwe maturusi etiweki akadai seRJ-45 ports, SC ports, nezvimwe.
• Chiteshi chine musoro ichiteshi chinosiyanisa masevhisi nezvinoreva zvine musoro, senge sevhisi zviteshi muTCP/IP protocol.Nhamba yenhamba yechiteshi ndeye 0 kusvika 65535.

Nekudaro, parizvino port 8083 yeVestaCP control panel inoratidzwa nekukasira isina SSL chengetedzo chitupa ...

Saka, mushure mekuisa panel yeVestaCP , Google Chrome icharatidza zvinotevera:

Vesta login panel inogonesa https

Danho 1: Pinda muVestaCP management panel uchishandisa hostname neport 8083 ▼

http:// 你的域名:8083/

Danho rechipiri: Enda kune webhusaiti yeVestaCP, tsvaga zita remushandi weserver yako, wobva wadzvanya Edit. ▼

Danho rechitatu: Tsvaga uye tarisa SSL uye Ngativandire. "Enable SSL (SSL Support)" uye "Use Let's Encrypt (Let's Encrypt Support)" ▼

• Wobva wadzvanya Sevha (maneja anodzvanya Chengeta uye anomirira kweanenge maminetsi mashanu kuti aone chikumbiro cheSSL chitupa)

Chikamu 4 步:Tsvaga iyo Let's Encrypt yakachengeteka seti yekuchengetedza nzvimbo Ngati Encrypt inochengeta yayo SSL chitupa mukati /home/username/conf/web/ munzvimbo. Ndokumbira unyore nzvimbo dzavo ▼

/home/username/conf/web/ssl.website.crt
/home/username/conf/web/ssl.website.key

VestaCP control panel, chengetedza iyo hostname SSL chitupa mu ▼

/usr/local/vesta/ssl/certificate.crt
/usr/local/vesta/ssl/certificate.key

Naizvozvo, isu tinofanirwa kutanga tatumidza zita rekare reVestaCP setifiketi mafaera kune mamwe manyoro manyoro kuitira kuti VestaCP irege kuashandisa, uye wozobatanidza mafaera aya. Ndapota tevera matanho ari pasi apa kuti udzidze kuita izvi.

Danho rechishanu: SSH muserver yako woisa mirairo miviri iyi kuti utumidzezve mafaira ekare ▼

mv /usr/local/vesta/ssl/certificate.crt /usr/local/vesta/ssl/unusablecer.crt
mv /usr/local/vesta/ssl/certificate.key /usr/local/vesta/ssl/unusablecer.key

• Kana mashandiro anotevera akatadza kushanda, zvichiita kuti SSL link ikundikane, webhusaiti haigone kuvhurwa, uye SSL faira "unusablecer"zita, chinja dzokera kune rapfuura"setifiketi” pasina kutambisa nguva kudzoreredza iyo VestaCP pani.

Danho rechitanhatu: Gadzira chinongedzo chekufananidzira chinongedzera kune chinongedzo chitsva chekufananidzira. Ndapota tsiva zita rako rekushandisa, rakadai se: admin. Tsiva chenweiliang.com nezita rehostname reVPS server yako (FQDN). ▼

ln -s /home/admin/conf/web/ssl.chenweiliang.com.crt /usr/local/vesta/ssl/certificate.crt
ln -s /home/admin/conf/web/ssl.chenweiliang.com.key /usr/local/vesta/ssl/certificate.key

Danho rechinomwe: Tangazve VestaCP

service vesta restart

Danho rechisere: Bvisa browser cache yako wobva waedza kupinda muVestaCP control panel zvakare uchishandisa port 8083.

• Iye zvino SSL yako pachiteshi 8083 yakachengeteka!

Yakaputswa mvumo mhinduro

Kugadzirisa mvumo yakaputsika, isa murairo unotevera▼

• kuda your.adminpanel.com Tsiva neiyo URL yeVestaCP yako manejimendi koni.

chgrp mail ssl.your.adminpanel.com.key
chmod 660 ssl.your.adminpanel.com.key
chgrp mail ssl.your.adminpanel.com.crt
chmod 660 ssl.your.adminpanel.com.crt

Iyo iri pamusoro ndiyo nzira yekugonesa SSL chitupa muVestaCP kumashure.

Maitiro ekumanikidza zita rezita kushandisa https SSL chitupa?

Danho 1: Isa template ye nginx yakagadzirwa ▼

cd /usr/local/vesta/data/templates/web
wget http://c.vestacp.com/0.9.8/rhel/force-https/nginx.tar.gz
tar -xzvf nginx.tar.gz
rm -f nginx.tar.gz

Chikamu 2 步:Seta proxy template yekumanikidza-https

• Gadzira preset nyowani, kana mune iripo preset, isa simba-https senge Nginx proxy template.
• Paunenge uchiwedzera vashandisi vatsva, unogona kushandisa simba-https template kupa mvumo kune vashandisi ve preset scheme.

HTTP inodzoserwa otomatiki kuHTTPS

VestaCP inotungamira sei HTTP kuHTTPS uchishandisa htaccess? Iwe unoda kuendesa otomatiki webhusaiti yako kune yakachengeteka (HTTPS) vhezheni yewebhusaiti yako yakavharidzirwa?

Mune .htaccess file, wedzera zvinotevera 301 redirect syntax▼

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R,L]

• Izwi rokuti "L" riri pamusoro [R,L] rinoreva Pekupedzisira (Yekupedzisira), kana mamwe magirama anewo L, http haigone kudzoserwa ku https.
• Naizvozvo, zvinokurudzirwa kutungamirazve http301 kune https syntax kumusoro (pamberi pemamwe masyntaxes).

Kana iwe uchida kuwedzera akachengeteka SSL zvitupa kune ako mamwe madomasi muVestaCP control panel, ndapota tarisa ichi chidzidzo ▼

🔗Mashandisiro eVestaCP pani? Isa post office / wedzera akawanda madomasi mazita & faira manejimendi