Aṣiṣe CWP7 SSL Bawo ni orukọ olupin ṣe le fi ijẹrisi ọfẹ Letsencrypt sori ẹrọ?

Bii o ṣe le fi ijẹrisi SSL ọfẹ Letsencrypt SSL sori ẹrọ fun orukọ olupin CWP7?

Aṣiṣe CWP7 SSL Bawo ni orukọ olupin ṣe le fi ijẹrisi ọfẹ Letsencrypt sori ẹrọ?

  • eyi ni Igbimọ Iṣakoso CWP Itọsọna AutoSSL lati fi awọn iwe-ẹri SSL ọfẹ Letsencrypt sori ẹrọ laifọwọyi.

Ti ifiranṣẹ aṣiṣe CWP7 SSL "cwpsrv.iṣẹ failed.", jọwọ lọ kiri lori ojutu ti ikẹkọ atẹle▼

Bii o ṣe le yi orukọ olupin pada ni CWP?

Ṣebi orukọ olupin rẹ jẹ server.yourdomain.com

  1. Ni akọkọ, ṣẹda subdomain ni ẹhin CWP:server.yourdomain.com
  2. Ṣafikun igbasilẹ A ni DNS, subdomain tọka si tirẹLinuxAdirẹsi IP olupin.
  3. Lọ si → Eto CWP → Yi orukọ ogun pada ni akojọ osi ti cwp.admin lati fi orukọ olupin rẹ pamọ.
  • SSL yoo fi sii laifọwọyi, ipo nikan ni pe o ṣeto igbasilẹ DNS kan fun orukọ olupin naa.
  • Ti o ko ba ni igbasilẹ A fun orukọ agbalejo, CWP yoo fi ijẹrisi ti o fowo si ara ẹni sori ẹrọ.
  • Ṣe akiyesi pe orukọ olupin yẹ ki o jẹ subdomain kii ṣe aaye akọkọ.

Fun http:// si https:// redirection, o le/usr/local/apache/htdocs/.htaccessṢẹda faili htaccess yii:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Jẹ ki a Encrypt jẹ aṣẹ ijẹrisi ti o ṣe ifilọlẹ ni Oṣu Kẹrin Ọjọ 2016, Ọdun 4, pẹlu ero ti imukuro ẹda afọwọṣe lọwọlọwọ, ijẹrisi, iforukọsilẹ, fifi sori ẹrọ ati imudojuiwọn awọn iwe-ẹri fun awọn oju opo wẹẹbu to ni aabo.

Orukọ ogun/FQDN Fi Iwe-ẹri SSL Letsencrypt sori ẹrọ

Kini FQDN tumọ si??

  • FQDNfully qualified domain name) Orukọ ìkápá ti o ni kikun, eyiti o jẹ orukọ ìkápá kikun ti kọnputa kan pato tabi gbalejo lori Intanẹẹti.

Bii o ṣe le waye fun Jẹ ki a Encrypt?

Module tuntun wa ti o wa ninu Akojọ aṣyn osi CWP7 → Eto WebServer → Awọn iwe-ẹri SSL, lati ibẹ o le fi awọn iwe-ẹri Letsencrypt sori ẹrọ fun eyikeyi agbegbe / subdomain nipa lilo AutoSSL.

(Ti o ba yan Ṣẹda Jẹ ki a Encrypt ni akoko kanna nigbati o ṣafikun orukọ ìkápá kan tabi orukọ subdomain, o le foju awọn igbesẹ ti o wa loke)

Letsencrypt SSL Awọn ẹya ara ẹrọ ijẹrisi

  • Letsencrypt fun aaye akọọlẹ akọkọ ati www inagijẹ
  • Letsencrypt ṣafikun orukọ ìkápá ati www. inagijẹ
  • Letsencrypt fun subdomains ati www.alias
  • Letsencrypt tun le fi aṣa sori ẹrọ
  • Ṣayẹwo ọjọ ipari ti ijẹrisi naa
  • auto-tunse
  • Fi agbara mu isọdọtun bọtini
  • Apache ibudo 443 auto-iwari

Isọdọtun aifọwọyi ti awọn iwe-ẹri Letsencrypt SSL

Nipa aiyipada, awọn iwe-ẹri Letsencrypt wulo fun awọn ọjọ 90.

Isọdọtun jẹ aifọwọyi ati pe awọn iwe-ẹri jẹ isọdọtun 30 ọjọ ṣaaju ipari.

Module tuntun wa ti o wa ninu Akojọ aṣyn osi CWP7 → Eto WebServer → Awọn iwe-ẹri SSL, lati ibẹ o le fi awọn iwe-ẹri Letsencrypt sori ẹrọ fun eyikeyi agbegbe / subdomain nipa lilo AutoSSL.

Ṣatunkọ faili iṣeto ni lati rọpo ọna ijẹrisi SSL

Nigbamii ti, o nilo lati satunkọ faili iṣeto ni ati fi ọna kun si ijẹrisi SSL (akọsilẹ lati yọ ọrọ naa kuro, ki o yi ọna pada si tirẹ).

Ṣatunkọ faili iṣeto cwpsrv ▼

/usr/local/cwpsrv/conf/cwpsrv.conf

fi kun unMonit monitoringSSL ibudo▼

listen 2812 ssl;

Ìpínrọ̀ tó tẹ̀ lé e yìí tún wà ▼

ssl_certificate /etc/pki/tls/certs/hostname.crt;
ssl_certificate_key /etc/pki/tls/private/hostname.key;

Rọpo pẹlu ọna atẹle ▼

ssl_certificate /etc/pki/tls/certs/server.yourdomain.com.bundle;
ssl_certificate_key /etc/pki/tls/private/server.yourdomain.com.key;

Ni kete ti o ti ṣe, maṣe gbagbe lati tun bẹrẹ iṣẹ cwpsrv pẹlu aṣẹ atẹle ▼

service cwpsrv restart

Lẹhinna lọ si Eto Oju opo wẹẹbu → Olootu Conf WebServers → Apache → /usr/local/apache/conf.d/

Profaili Ṣatunkọ ▼

hostname-ssl.conf

Fi ìpínrọ̀ tó tẹ̀ lé e yìí sí ▼

ssl_certificate /etc/pki/tls/certs/hostname.crt;
ssl_certificate_key /etc/pki/tls/private/hostname.key;

Rọpo pẹlu ọna atẹle ▼

ssl_certificate /etc/pki/tls/certs/server.yourdomain.com.bundle;
ssl_certificate_key /etc/pki/tls/private/server.yourdomain.com.key;
  • Ti o ba nlo Nginx, o nilo lati ṣe kanna.

Lẹhinna tun bẹrẹ iṣẹ Apache (ati Nginx) ati rii daju pe o ṣiṣẹ bi igbagbogbo?

systemctl restart httpd
systemctl restart nginx

Ni ipari, sọ ọna asopọ iwọle lati wo ibudo 2087https:// server.yourdomain. com:2087/login/index.phpṢe dongle kan wa?

Ireti Chen Weiliang Blog ( https://www.chenweiliang.com/ ) pín "Aṣiṣe CWP7 SSL? Bawo ni orukọ olupin ṣe fi iwe-ẹri ọfẹ Letsencrypt sori ẹrọ?", Eyi ti o ṣe iranlọwọ fun ọ.

Kaabo lati pin ọna asopọ ti nkan yii:https://www.chenweiliang.com/cwl-27950.html

Kaabọ si ikanni Telegram ti bulọọgi Chen Weiliang lati gba awọn imudojuiwọn tuntun!

🔔 Jẹ ẹni akọkọ lati gba “ChatGPT Akoonu Titaja AI Itọsọna Lilo Ọpa” ti o niyelori ni itọsọna oke ikanni! 🌟
📚 Itọsọna yii ni iye nla, 🌟Eyi jẹ aye to ṣọwọn, maṣe padanu rẹ! ⏰⌛💨
Pin ati fẹran ti o ba fẹ!
Pinpin rẹ ati awọn ayanfẹ jẹ iwuri wa lemọlemọfún!

 

发表 评论

Adirẹsi imeeli rẹ kii yoo ṣe atẹjade. Awọn aaye ti o nilo ni a lo * 标注

yi lọ si oke