Ìwé Directory
Bii o ṣe le fi ijẹrisi SSL ọfẹ Letsencrypt SSL sori ẹrọ fun orukọ olupin CWP7?
- eyi ni Igbimọ Iṣakoso CWP Itọsọna AutoSSL lati fi awọn iwe-ẹri SSL ọfẹ Letsencrypt sori ẹrọ laifọwọyi.
Ti ifiranṣẹ aṣiṣe CWP7 SSL "cwpsrv.iṣẹ failed.", jọwọ lọ kiri lori ojutu ti ikẹkọ atẹle▼
Bii o ṣe le yi orukọ olupin pada ni CWP?
Ṣebi orukọ olupin rẹ jẹ server.yourdomain.com
- Ni akọkọ, ṣẹda subdomain ni ẹhin CWP:
server.yourdomain.com
- Ṣafikun igbasilẹ A ni DNS, subdomain tọka si tirẹLinuxAdirẹsi IP olupin.
- Lọ si → Eto CWP → Yi orukọ ogun pada ni akojọ osi ti cwp.admin lati fi orukọ olupin rẹ pamọ.
- SSL yoo fi sii laifọwọyi, ipo nikan ni pe o ṣeto igbasilẹ DNS kan fun orukọ olupin naa.
- Ti o ko ba ni igbasilẹ A fun orukọ agbalejo, CWP yoo fi ijẹrisi ti o fowo si ara ẹni sori ẹrọ.
- Ṣe akiyesi pe orukọ olupin yẹ ki o jẹ subdomain kii ṣe aaye akọkọ.
Fun http:// si https:// redirection, o le/usr/local/apache/htdocs/.htaccess
Ṣẹda faili htaccess yii:
RewriteEngine On RewriteCond %{HTTPS} off RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
Jẹ ki a Encrypt jẹ aṣẹ ijẹrisi ti o ṣe ifilọlẹ ni Oṣu Kẹrin Ọjọ 2016, Ọdun 4, pẹlu ero ti imukuro ẹda afọwọṣe lọwọlọwọ, ijẹrisi, iforukọsilẹ, fifi sori ẹrọ ati imudojuiwọn awọn iwe-ẹri fun awọn oju opo wẹẹbu to ni aabo.
Orukọ ogun/FQDN Fi Iwe-ẹri SSL Letsencrypt sori ẹrọ
- FQDN
fully qualified domain name
) Orukọ ìkápá ti o ni kikun, eyiti o jẹ orukọ ìkápá kikun ti kọnputa kan pato tabi gbalejo lori Intanẹẹti.
Bii o ṣe le waye fun Jẹ ki a Encrypt?
Module tuntun wa ti o wa ninu Akojọ aṣyn osi CWP7 → Eto WebServer → Awọn iwe-ẹri SSL, lati ibẹ o le fi awọn iwe-ẹri Letsencrypt sori ẹrọ fun eyikeyi agbegbe / subdomain nipa lilo AutoSSL.
(Ti o ba yan Ṣẹda Jẹ ki a Encrypt ni akoko kanna nigbati o ṣafikun orukọ ìkápá kan tabi orukọ subdomain, o le foju awọn igbesẹ ti o wa loke)
Letsencrypt SSL Awọn ẹya ara ẹrọ ijẹrisi
- Letsencrypt fun aaye akọọlẹ akọkọ ati www inagijẹ
- Letsencrypt ṣafikun orukọ ìkápá ati www. inagijẹ
- Letsencrypt fun subdomains ati www.alias
- Letsencrypt tun le fi aṣa sori ẹrọ
- Ṣayẹwo ọjọ ipari ti ijẹrisi naa
- auto-tunse
- Fi agbara mu isọdọtun bọtini
- Apache ibudo 443 auto-iwari
Isọdọtun aifọwọyi ti awọn iwe-ẹri Letsencrypt SSL
Nipa aiyipada, awọn iwe-ẹri Letsencrypt wulo fun awọn ọjọ 90.
Isọdọtun jẹ aifọwọyi ati pe awọn iwe-ẹri jẹ isọdọtun 30 ọjọ ṣaaju ipari.
Module tuntun wa ti o wa ninu Akojọ aṣyn osi CWP7 → Eto WebServer → Awọn iwe-ẹri SSL, lati ibẹ o le fi awọn iwe-ẹri Letsencrypt sori ẹrọ fun eyikeyi agbegbe / subdomain nipa lilo AutoSSL.
Ṣatunkọ faili iṣeto ni lati rọpo ọna ijẹrisi SSL
Nigbamii ti, o nilo lati satunkọ faili iṣeto ni ati fi ọna kun si ijẹrisi SSL (akọsilẹ lati yọ ọrọ naa kuro, ki o yi ọna pada si tirẹ).
Ṣatunkọ faili iṣeto cwpsrv ▼
/usr/local/cwpsrv/conf/cwpsrv.conf
fi kun unMonit monitoringSSL ibudo▼
listen 2812 ssl;
Ìpínrọ̀ tó tẹ̀ lé e yìí tún wà ▼
ssl_certificate /etc/pki/tls/certs/hostname.crt; ssl_certificate_key /etc/pki/tls/private/hostname.key;
Rọpo pẹlu ọna atẹle ▼
ssl_certificate /etc/pki/tls/certs/server.yourdomain.com.bundle; ssl_certificate_key /etc/pki/tls/private/server.yourdomain.com.key;
Ni kete ti o ti ṣe, maṣe gbagbe lati tun bẹrẹ iṣẹ cwpsrv pẹlu aṣẹ atẹle ▼
service cwpsrv restart
Lẹhinna lọ si Eto Oju opo wẹẹbu → Olootu Conf WebServers → Apache → /usr/local/apache/conf.d/
Profaili Ṣatunkọ ▼
hostname-ssl.conf
Fi ìpínrọ̀ tó tẹ̀ lé e yìí sí ▼
ssl_certificate /etc/pki/tls/certs/hostname.crt; ssl_certificate_key /etc/pki/tls/private/hostname.key;
Rọpo pẹlu ọna atẹle ▼
ssl_certificate /etc/pki/tls/certs/server.yourdomain.com.bundle; ssl_certificate_key /etc/pki/tls/private/server.yourdomain.com.key;
- Ti o ba nlo Nginx, o nilo lati ṣe kanna.
Lẹhinna tun bẹrẹ iṣẹ Apache (ati Nginx) ati rii daju pe o ṣiṣẹ bi igbagbogbo?
systemctl restart httpd systemctl restart nginx
Ni ipari, sọ ọna asopọ iwọle lati wo ibudo 2087https:// server.yourdomain. com:2087/login/index.php
Ṣe dongle kan wa?
Ireti Chen Weiliang Blog ( https://www.chenweiliang.com/ ) pín "Aṣiṣe CWP7 SSL? Bawo ni orukọ olupin ṣe fi iwe-ẹri ọfẹ Letsencrypt sori ẹrọ?", Eyi ti o ṣe iranlọwọ fun ọ.
Kaabo lati pin ọna asopọ ti nkan yii:https://www.chenweiliang.com/cwl-27950.html
Kaabọ si ikanni Telegram ti bulọọgi Chen Weiliang lati gba awọn imudojuiwọn tuntun!
📚 Itọsọna yii ni iye nla, 🌟Eyi jẹ aye to ṣọwọn, maṣe padanu rẹ! ⏰⌛💨
Pin ati fẹran ti o ba fẹ!
Pinpin rẹ ati awọn ayanfẹ jẹ iwuri wa lemọlemọfún!