Phoso ea CWP7 SSL?Lebitso la moamoheli le ka kenya setifikeiti sa mahala sa Letsencrypt joang?

U ka kenya setifikeiti sa mahala sa Letsencrypt SSL sa SSL joang bakeng sa lebitso la moamoheli oa CWP7?

• sena ke Sehlopha sa Taolo sa CWP Tataiso ea AutoSSL ea ho kenya litifikeiti tsa mahala tsa Letsencrypt mahala tsa SSL.

Haeba molaetsa oa phoso oa CWP7 SSL "cwpsrv.tšebeletso failed.", ka kopo sheba tharollo ea thuto e latelang▼

CWP Control Panel e theohile 'me ha e khonehe?Qala/Emisa/Qala bocha/Sheba Litšebeletso tsa CWP

Qala/emisa/qala bocha/sheba boemo ba tshebeletso ya CWP, e ka etswang ka ho sebedisa ditaelo tse latelang: tshebeletso ya cwpsrv qala tshebeletso cwpsrv stop service cwpsrv restart service cwpsrv boemo tshebeletso ya phanele ya taolo ya CWP e hlotswe ho qala...

Mokhoa oa ho fetola lebitso la moamoheli ho CWP?

Ha re re lebitso la moamoheli oa hau ke server.yourdomain.com

1. Taba ea mantlha, theha subdomain ho CWP backend:server.yourdomain.com
2. Kenya rekoto ea A ho DNS, sebaka sa subdomain se supa ho hauLinuxAterese ea IP ea seva.
3. Eya ho → Litlhophiso tsa CWP → Fetola Lebitso la Moamoheli ho menu e letšehali ea cwp.admin ho boloka lebitso la moamoheli oa hau.

• SSL e tla kenngoa ka bo eona, boemo feela ke hore u thehe rekoto ea DNS A bakeng sa lebitso la moamoheli.
• Haeba u sena rekoto ea A bakeng sa lebitso la moamoheli, CWP e tla instola setifikeiti se ingoletseng.
• Hlokomela hore lebitso la moamoheli e lokela ho ba subdomain eseng sebaka se seholo.

Bakeng sa http:// ho https:// redirection, u ka khona/usr/local/apache/htdocs/.htaccessTheha faele ena ea htaccess:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Let's Encrypt ke bolaoli ba setifikeiti bo qalileng ka la 2016 Mmesa, 4, ka sepheo sa ho felisa tšebetso ea hajoale ea matsoho, netefatso, ho saena, ho kenya le ho nchafatsa litifikeiti bakeng sa liwebsaete tse sireletsehileng.

Lebitso la Host/FQDN Kenya Letsencrypt SSL Certificate

FQDN e bolela'ng??

• FQDN (fully qualified domain name) domain name e tšoanelehang ka botlalo, e leng lebitso le felletseng la komporo e itseng kapa moamoheli Marang-rang.

Mokhoa oa ho etsa kopo ea Lets Encrypt?

Ho na le mojule o mocha o kenyellelitsoeng ho CWP7 Left Menu → Litlhophiso tsa WebServer → Litifikeiti tsa SSL, ho tloha moo o ka kenya litifikeiti tsa Letsencrypt bakeng sa domain/subdomain efe kapa efe o sebelisa AutoSSL.

(Haeba u khetha Create Let's Encrypt ka nako e ts'oanang ha u eketsa lebitso la domain kapa subdomain name, u ka tlola mehato e kaholimo)

Likarolo tsa Setifikeiti sa Letsencrypt SSL

• Letsencrypt bakeng sa domain domain ea mantlha le www alias
• Letsencrypt eketsa domain name le www. alias
• Letsencrypt bakeng sa subdomains le www.alias
• Letsencrypt e ka boela ea kenya tloaelo
• Sheba letsatsi la ho felloa ke nako ha setifikeiti
• Nchafatsa ka ho iketsa
• Qobella konopo ea nchafatso
• Apache port 443 auto-detection

Nchafatso ea boiketsetso ea litifikeiti tsa Letsencrypt SSL

Ka ho sa feleng, litifikeiti tsa Letsencrypt li sebetsa matsatsi a 90.

Nchafatso e ea iketsa 'me litifikeiti li nchafatsoa matsatsi a 30 pele li felloa ke nako.

Ho na le mojule o mocha o kenyellelitsoeng ho CWP7 Left Menu → Litlhophiso tsa WebServer → Litifikeiti tsa SSL, ho tloha moo o ka kenya litifikeiti tsa Letsencrypt bakeng sa domain/subdomain efe kapa efe o sebelisa AutoSSL.

Fetola faele ea tlhophiso ho khutlisa tsela ea setifikeiti sa SSL

Ka mor'a moo, o hloka ho hlophisa faele ea tlhophiso mme o kenye tsela ea setifikeiti sa SSL (hlokomela ho tlosa maikutlo, le ho fetola tsela ea hau).

Fetola faele ea tlhophiso ea cwpsrv ▼

/usr/local/cwpsrv/conf/cwpsrv.conf

kenyeletsa hoMonit monitoringBoema-kepe ba SSL ▼

listen 2812 ssl;

Hape ho na le serapa se latelang ▼

ssl_certificate /etc/pki/tls/certs/hostname.crt;
ssl_certificate_key /etc/pki/tls/private/hostname.key;

Fetola ka tsela e latelang ▼

ssl_certificate /etc/pki/tls/certs/server.yourdomain.com.bundle;
ssl_certificate_key /etc/pki/tls/private/server.yourdomain.com.key;

Ha u se u qetile, u se ke ua lebala ho qala ts'ebeletso ea cwpsrv ka taelo e latelang ▼

service cwpsrv restart

Ebe u ea ho Litlhophiso tsa Webserver → WebServers Conf Editor → Apache → /usr/local/apache/conf.d/

Fetola Boemo ▼

hostname-ssl.conf

Beha serapa se latelang ▼

ssl_certificate /etc/pki/tls/certs/hostname.crt;
ssl_certificate_key /etc/pki/tls/private/hostname.key;

Fetola ka tsela e latelang ▼

ssl_certificate /etc/pki/tls/certs/server.yourdomain.com.bundle;
ssl_certificate_key /etc/pki/tls/private/server.yourdomain.com.key;

• Haeba u sebelisa Nginx, u lokela ho etsa se tšoanang.

Ebe u qala ts'ebeletso ea Apache (le Nginx) 'me u netefatse hore e sebetsa joalo ka tloaelo?

systemctl restart httpd
systemctl restart nginx

Qetellong, tsosolosa sehokelo sa ho kena ho sheba port 2087https:// server.yourdomain. com:2087/login/index.phpHo na le dongle?