Asalkii hore ee VestaCP 8083 deked https ma saxantahay?Ku rakib Tababarka Shahaadada SSL

VestaCP Guddiga kantaroolku waa sahlan yahay oo fududahay in la isticmaalo: Ku rakib Guddiga Xakamaynta VestaCP, kaas oo si toos ah u rakibi kara shaqada amniga ee Aan Encrypt SSL shahaado, si ay si fiican u soo dhaweeyeen wadamada shisheeye.SEODhakhaatiirta soo dhawoow.

Waa maxay Aynu Sirinno?

Aynu sir dhigno waa Hay'adda Shahaadada SSL ee la furay Abriil 2016, 4.

• Waxay ku siisaa shahaado X.509 bilaash ah oo loogu talagalay sirta amniga lakabka gaadiidka (TLS) iyada oo loo marayo hab toos ah,
• Loogu talagalay in lagu baabi'iyo abuurista buug-gacmeedka hadda, xaqiijinta, saxiixida, rakibidda iyo cusboonaysiinta shahaadooyinka mareegaha ammaansan.

VestaCP kantaroolka bogga galitaanka, adoo isticmaalaya dekedda 8083.

Waa maxay dekedda 8083?

• 8083 waa bog wakiil oo soo dejisan faylka faylka, waa deked macquul ah.
• Tignoolajiyada shabakada, dekedaha waxaa ku jira dekedo jireed iyo dekedo macquul ah.

Farqiga udhaxeeya Dekedda Jirka iyo Dakadda macquulka ah

• Dekadaha jireed waxay tixraacaan dekedaha dhabta ah ee jira, sida modem ADSL, hubs, switches, iyo router ku xira aaladaha shabakadaha kale sida dekedaha RJ-45, dekedaha SC, iwm.
• Deked macquul ah waa deked ku kala saarta adeegyada macno macquul ah, sida dekedaha adeega ee borotokoolka TCP/IP.Tirada dekeddu waa 0 ilaa 65535.

Si kastaba ha noqotee, hadda dekedda 8083 ee guddiga kontoroolka VestaCP waxaa loo soo bandhigay si caadi ah iyada oo aan la helin shahaadada amniga SSL

Markaa, gudahaKu rakib guddiga VestaCPGadaal,Google ChromeDareenkan ayaa soo bixi doona:

Vesta login panel awood https

Tallaabada 1:Gal guddiga maamulka ee VestaCP adoo isticmaalaya magaca martida iyo dekedda 8083 ▼

http:// 你的域名:8083/

Tallaabada 2: Geli adeega WEB ee VestaCP si aad u hesho magaca martida loo yahay ee seerfarkaaga, dabadeed dhagsii EDIT ▼

Tallaabada 3:Soo hel oo hubi SSL oo Aynu Sirinno "Enable SSL (SSL Support)"iyo"Isticmaal Aynu Sirinno (Aynu Sirin Taageero)" ▼

• Kadib dhagsii Save (maamuluhu waxa uu gujiyaa Save wuxuuna sugayaa ilaa shan daqiiqo si uu u eego codsiga shahaadada SSL)

Tallaabada 4:Soo hel Aan sirino goobta kaydinta shahaadadda sugan Aynu ku xafidno shahaadadeeda SSL gudaha /home/username/conf/web/ goobta. Fadlan qor meelaha ay joogaan ▼

/home/username/conf/web/ssl.website.crt
/home/username/conf/web/ssl.website.key

Guddiga xakamaynta VestaCP, ku kaydi magaca martida loo yahay ee SSL shahaadada gudaha ▼

/usr/local/vesta/ssl/certificate.crt
/usr/local/vesta/ssl/certificate.key

Sidaa darteed, waxaan u baahanahay inaan marka hore u magacowno faylalka shahaadadii VestaCP ee hore qoraalo dhumuc leh si VestaCP aysan mar dambe u isticmaalin, ka dibna si calaamad ah ugu xirno faylashan. Fadlan raac tillaabooyinka hoose si aad u barato sida tan loo sameeyo.

Tallaabada 5:SSH geli serverkaaga oo geli 2dan amar si aad u magacawdo feylkii hore ▼

mv /usr/local/vesta/ssl/certificate.crt /usr/local/vesta/ssl/unusablecer.crt
mv /usr/local/vesta/ssl/certificate.key /usr/local/vesta/ssl/unusablecer.key

• Haddii hawlgallada soo socda ay ku guul daraysteen inay dhaqan galaan, taasoo keenaysa in isku xidhka SSL uu fashilmo, mareegaha lama furi karo, iyo faylka SSL"aan la isticmaali karin"magac, ku noqo magacii hore"shahaadada” adoon waqti lumin dib-u-soo-kicinta guddiga VestaCP.

Tallaabada 6:Samee xiriiriye calaamad si aad u tilmaanto isku xirka astaanta cusub Fadlan ku beddel magacaaga isticmaale, sida:admin doonaa chenweiliang.com Ku beddel magaca martida loo yahay (FQDN) ee server-kaaga VPS▼

ln -s /home/admin/conf/web/ssl.chenweiliang.com.crt /usr/local/vesta/ssl/certificate.crt
ln -s /home/admin/conf/web/ssl.chenweiliang.com.key /usr/local/vesta/ssl/certificate.key

Tallaabada 7:Dib u bilow VestaCP

service vesta restart

Tallaabada 8:Nadiifi khasnad biraawsarkaaga ka dibna isku day inaad mar labaad gasho qaybta kontoroolka VestaCP adoo isticmaalaya dekedda 8083.

• Hadda SSL-kaaga ku yaal dekedda 8083 waa ammaan!

Xalka oggolaanshaha jaban

Si aad u hagaajiso oggolaanshaha jaban, geli amarka soo socda▼

• doonaa aad.adminpanel.com Ku beddel URL-ka Console-kaaga maamulka VestaCP

chgrp mail ssl.your.adminpanel.com.key
chmod 660 ssl.your.adminpanel.com.key
chgrp mail ssl.your.adminpanel.com.crt
chmod 660 ssl.your.adminpanel.com.crt

Midda kore waa habka lagu suurtagelinayo shahaadada SSL ee asalka VestaCP.

Sida loogu qasbo magaca domain in la isticmaalo shahaadada SSL?

Tallaabada 1:Ku rakib template nginx custom▼

cd /usr/local/vesta/data/templates/web
wget http://c.vestacp.com/0.9.8/rhel/force-https/nginx.tar.gz
tar -xzvf nginx.tar.gz
rm -f nginx.tar.gz

Tallaabada 2:Deji template wakiil si aad u qasabto-https

• Abuur horudhac cusub, ama horay u jiray, u deji xoog-https sida template wakiil Nginx.
• Markaad ku darto isticmaaleyaal cusub, waxaad isticmaali kartaa qaab-dhismeedka force-https si aad u qoondayso oggolaanshaha isticmaalayaasha nidaamka hore loo dejiyay.

HTTP si toos ah ayaa loo jiheeyaa HTTPS

Sidee VestaCP HTTP ugu hagaajisaa HTTPS iyadoo la isticmaalayo htaccess? Ma doonaysaa in aad si toos ah ugu jihayso mareegahaaga qaab sugan (HTTPS) ee shabakadaada sir ah?

Faylka .htaccess, ku dar kuwan soo socda 301 redirect syntax▼

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R,L]

• "L" ee kor ku xusan [R,L] macnaheedu waa Dambe (Ugu Dambeeyay), haddii naxwaha kale ay sidoo kale leeyihiin L, http si toos ah looguma hagaajin karo https.
• Sidaa darteed, waxaa lagu talinayaa in loo jiheeyo http301 ilaa https syntax ee ugu sarreeya (ka hor inta aan la isku dhejin).

Haddii aad rabto inaad ku darto shahaadooyin SSL oo sugan xayndaabyadaada kale ee ku jira guddiga kantaroolka ee VestaCP, fadlan eeg casharkan ▼

Sida loo isticmaalo guddiga VestaCP? Ku rakib xafiiska boostada/ku dar magacyo domain oo badan & maamulka faylka