VestaCP abẹlẹ 8083 ibudo https ko wulo?Fi Tutorial ijẹrisi SSL sori ẹrọ

VestaCP Igbimọ iṣakoso jẹ rọrun ati rọrun lati lo: Fi sori ẹrọ Igbimọ Iṣakoso VestaCP, eyiti o le fi iṣẹ aabo sori ẹrọ laifọwọyi ti ijẹrisi SSL Let's Encrypt, nitorinaa o gba daradara nipasẹ awọn orilẹ-ede ajeji.SEOAwọn oṣiṣẹ kaabo.

Kini Jẹ ki a Encrypt?

Jẹ ki a Encrypt jẹ Aṣẹ ijẹrisi SSL ti a ṣe ifilọlẹ ni Oṣu Kẹrin Ọjọ 2016, Ọdun 4.

• Pese iwe-ẹri X.509 ọfẹ fun fifi ẹnọ kọ nkan ti Aabo Layer Transport (TLS) nipasẹ ilana adaṣe kan,
• Ti ṣe apẹrẹ lati yọkuro iṣẹda afọwọṣe lọwọlọwọ, ijẹrisi, iforukọsilẹ, fifi sori ẹrọ ati imudojuiwọn awọn iwe-ẹri fun awọn oju opo wẹẹbu to ni aabo.

Oju-iwe iwọle iṣakoso VestaCP, ni lilo ibudo 8083.

Kini ibudo 8083?

• 8083 jẹ oju-iwe aṣoju ati ibudo faili igbasilẹ, jẹ ibudo ọgbọn kan.
• Ninu imọ-ẹrọ nẹtiwọọki, awọn ebute oko oju omi pẹlu awọn ebute oko oju omi ti ara ati awọn ebute oko oju omi ọgbọn.

Iyatọ Laarin Ibudo Ti ara ati Port Logical

• Awọn ebute oko oju omi ti ara tọka si awọn ebute oko oju omi ti o wa nitootọ, gẹgẹbi awọn modems ADSL, awọn ibudo, awọn iyipada, ati awọn olulana ti o sopọ si awọn ẹrọ nẹtiwọọki miiran gẹgẹbi awọn ebute oko oju omi RJ-45, awọn ebute oko oju omi SC, ati bẹbẹ lọ.
• Ibudo ọgbọn jẹ ibudo ti o ṣe iyatọ awọn iṣẹ nipasẹ itumọ ọgbọn, gẹgẹbi awọn ebute iṣẹ ni ilana TCP/IP.Iwọn nọmba ibudo jẹ 0 si 65535.

Sibẹsibẹ, lọwọlọwọ ibudo 8083 ti igbimọ iṣakoso VestaCP ti han nipasẹ aiyipada laisi ijẹrisi aabo SSL…

Nitorina, ninuFi sori ẹrọ igbimọ VestaCPRu,kiroomu GoogleIlana yii yoo han:

Vesta wiwọle nronu jeki https

Igbesẹ 1:Wọle si igbimọ abojuto VestaCP nipa lilo orukọ olupin ati ibudo 8083 ▼

http:// 你的域名:8083/

Igbesẹ 2: Tẹ iṣẹ WEB ti VestaCP lati wa orukọ olupin rẹ, lẹhinna tẹ Ṣatunkọ ▼

Igbesẹ 3:Wa ki o ṣayẹwo SSL ati Jẹ ki a Encrypt “Mu SSL ṣiṣẹ (Atilẹyin SSL)” ati “Lo Jẹ ki a Encrypt (Jẹ ki a Encrypt Support)” ▼

• Lẹhinna tẹ Fipamọ (oluṣakoso naa tẹ Fipamọ ati duro fun bii iṣẹju marun lati wo ohun elo fun ijẹrisi SSL)

Igbesẹ 4:Wa Jẹ ki a Encrypt ipo ibi ipamọ ijẹrisi to ni aabo Jẹ ká Encrypt tọju ijẹrisi SSL rẹ sinu /home/username/conf/web/ ni ipo. Jọwọ ṣe akojọ awọn ipo wọn ▼

/home/username/conf/web/ssl.website.crt
/home/username/conf/web/ssl.website.key

Igbimọ iṣakoso VestaCP, tọju ijẹrisi SSL orukọ olupin rẹ ni ▼

/usr/local/vesta/ssl/certificate.crt
/usr/local/vesta/ssl/certificate.key

Nitorinaa, a nilo lati kọkọ lorukọ awọn faili ijẹrisi VestaCP atijọ si diẹ ninu awọn ọrọ idalẹnu ki VestaCP ko ni lo wọn mọ, ati lẹhinna sopọ awọn faili wọnyi ni ami apẹẹrẹ. Jọwọ tẹle awọn igbesẹ isalẹ lati ko bi lati ṣe eyi.

Igbesẹ 5:SSH sinu olupin rẹ ki o tẹ awọn ofin 2 wọnyi lati tunrukọ faili atijọ ▼

mv /usr/local/vesta/ssl/certificate.crt /usr/local/vesta/ssl/unusablecer.crt
mv /usr/local/vesta/ssl/certificate.key /usr/local/vesta/ssl/unusablecer.key

• Ti awọn iṣẹ ṣiṣe atẹle wọnyi ba kuna lati mu ipa, nfa ọna asopọ SSL kuna, oju opo wẹẹbu ko le ṣii, ati faili SSL naa "unusablecer"orukọ, yipada pada si orukọ iṣaaju"ijẹrisi” lai jafara akoko tun fi sori ẹrọ igbimọ VestaCP.

Igbesẹ 6:Ṣẹda ọna asopọ aami lati tọka si ọna asopọ aami tuntun Jọwọ rọpo orukọ olumulo rẹ, gẹgẹbi:admin yoo chenweiliang.com Rọpo pẹlu orukọ olupin (FQDN) ti olupin VPS rẹ▼

ln -s /home/admin/conf/web/ssl.chenweiliang.com.crt /usr/local/vesta/ssl/certificate.crt
ln -s /home/admin/conf/web/ssl.chenweiliang.com.key /usr/local/vesta/ssl/certificate.key

Igbesẹ 7:Tun VestaCP bẹrẹ

service vesta restart

Igbesẹ 8:Ko kaṣe aṣawakiri rẹ kuro lẹhinna gbiyanju wọle si ẹgbẹ iṣakoso VestaCP lẹẹkansi nipa lilo ibudo 8083.

• Bayi SSL rẹ lori ibudo 8083 wa ni aabo!

Baje awọn igbanilaaye ojutu

Lati ṣatunṣe awọn igbanilaaye ti o bajẹ, tẹ aṣẹ atẹle ▼

• yoo rẹ.adminpanel.com Rọpo pẹlu URL ti console iṣakoso VestaCP rẹ.

chgrp mail ssl.your.adminpanel.com.key
chmod 660 ssl.your.adminpanel.com.key
chgrp mail ssl.your.adminpanel.com.crt
chmod 660 ssl.your.adminpanel.com.crt

Eyi ti o wa loke ni ọna lati mu ijẹrisi SSL ṣiṣẹ ni abẹlẹ VestaCP.

Bii o ṣe le fi ipa mu orukọ ìkápá lati lo ijẹrisi https SSL?

Igbesẹ 1:Fi awoṣe nginx aṣa sori ẹrọ ▼

cd /usr/local/vesta/data/templates/web
wget http://c.vestacp.com/0.9.8/rhel/force-https/nginx.tar.gz
tar -xzvf nginx.tar.gz
rm -f nginx.tar.gz

Igbesẹ 2:Ṣeto awoṣe aṣoju lati fi agbara mu-https

• Ṣẹda tito tẹlẹ, tabi ni tito tẹlẹ, ṣeto agbara-https gẹgẹbi awoṣe aṣoju Nginx.
• Nigbati o ba n ṣafikun awọn olumulo titun, o le lo awoṣe agbara-https lati fi awọn igbanilaaye si awọn olumulo ti ero tito tẹlẹ.

HTTP ti wa ni laifọwọyi darí si HTTPS

Bawo ni VestaCP ṣe atunṣe HTTP si HTTPS ni lilo htaccess? Ṣe o fẹ lati darí oju opo wẹẹbu rẹ laifọwọyi si ẹya ti o ni aabo (HTTPS) ti oju opo wẹẹbu rẹ ti o jẹ fifipamọ?

Ninu faili .htaccess, ṣafikun sintasi atundari 301 atẹle▼

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R,L]

• “L” ti o wa loke [R,L] tumọ si Ikẹhin (Ikẹhin), ti awọn girama miiran tun ni L yii, http ko le ṣe darí laifọwọyi si https.
• Nitorinaa, o gba ọ niyanju lati tunda http301 si https syntax ni oke (ṣaaju awọn sintasi miiran).

Ti o ba fẹ ṣafikun awọn iwe-ẹri SSL to ni aabo si awọn ibugbe miiran ninu igbimọ iṣakoso VestaCP, jọwọ ṣayẹwo ikẹkọ yii ▼

🔗Bawo ni lati lo nronu VestaCP? Fi sori ẹrọ ifiweranṣẹ / ṣafikun awọn orukọ agbegbe pupọ & iṣakoso faili