Uhla lwemibhalo ye-athikili
Iphaneli yokulawula ye -VestaCP ilula futhi kulula ukuyisebenzisa: Ukufaka iphaneli yokulawula ye-VestaCP kwenza ukufakwa okuzenzakalelayo kwezitifiketi ze-Let's Encrypt SSL, okwenza ithandwe ochwepheshe be-SEO kwamanye amazwe.
Kuyini Asibhale Ngemfihlo?
I-Let Encrypt Igunya Lesitifiketi Se-SSL elethulwe ngo-Ephreli 2016, 4.
- Ihlinzeka ngesitifiketi samahhala se-X.509 sokubethela kwe-Transport Layer Security (TLS) ngenqubo ezenzakalelayo,
- Idizayinelwe ukuqeda ukudalwa kwamanje mathupha, ukuqinisekiswa, ukusayina, ukufakwa nokubuyekezwa kwezitifiketi zamawebhusayithi avikelekile.
Ikhasi lokungena lephaneli yokulawula ye-VestaCP, lisebenzisa i-port 8083.
Iyini i-port 8083?
- I-8083 yikhasi lommeleli nembobo yefayela yokulanda, iyimbobo enengqondo.
- Kubuchwepheshe benethiwekhi, izimbobo zihlanganisa izimbobo ezibonakalayo nezimbobo ezinengqondo.
Umehluko phakathi kwe-Physical Port kanye ne-Logical Port
- Izimbobo ezibonakalayo zibhekisela ezimbobeni ezikhona ngempela, njengamamodemu e-ADSL, amahabhu, amaswishi, namarutha axhumeka kwamanye amadivayisi enethiwekhi njengezimbobo ze-RJ-45, izimbobo ze-SC, njll.
- Imbobo enengqondo iyimbobo ehlukanisa izinsizakalo ngencazelo enengqondo, njengezimbobo zesevisi kuphrothokholi ye-TCP/IP.Ibanga lenombolo yechweba lingu-0 kuye ku-65535.
Kodwa-ke, okwamanje i-port 8083 yephaneli yokulawula ye-VestaCP iboniswa ngokuzenzakalelayo ngaphandle kwesitifiketi sokuphepha se-SSL...
Ngakho-ke, ngemva kokufaka iphaneli ye-VestaCP , i-Google Chrome izobonisa okulandelayo:
- Ukuxhumeka kwakho akulona uxhumo oluyimfihlo
- Abahlaseli bangase bazame ukuntshontsha imininingwane yakho (isb. amaphasiwedi, ukuxhumana noma imininingwane yekhadi lesikweletu).
Iphaneli yokungena ye-Vesta yenza i-https
Isinyathelo 1: Ngena ngemvume kuphaneli yokuphatha ye-VestaCP usebenzisa igama lomphathi kanye ne-port 8083 ▼
http:// 你的域名:8083/
Isinyathelo 2: Finyelela isevisi yewebhu ye-VestaCP, thola igama lomphathi weseva yakho, bese uchofoza u-Hlela. ▼
Isinyathelo 3: Thola futhi uhlole i-SSL kanye ne-Let's Encrypt. "Vumela i-SSL (Usekelo lwe-SSL)" kanye ne-"Sebenzisa i-Let's Encrypt (Let's Encrypt Support)" ▼
- Bese uchofoza u-Londoloza (umlawuli uchofoza Gcina bese ulinda cishe imizuzu emihlanu ukuze ubuke isicelo sesitifiketi se-SSL)
Isinyathelo sesi-4:Thola indawo yokugcina yesitifiketi evikelekile ethi Masibethele Masibethele igcina isitifiketi sayo se-SSL kuyo /home/username/conf/web/ endaweni. Sicela ubhale izindawo zabo ▼
/home/username/conf/web/ssl.website.crt /home/username/conf/web/ssl.website.key
Iphaneli yokulawula ye-VestaCP, gcina isitifiketi sayo se-SSL segama lomethuleli ku-▼
/usr/local/vesta/ssl/certificate.crt /usr/local/vesta/ssl/certificate.key
Ngakho-ke, kudingeka siqale siqambe kabusha amafayela esitifiketi esidala se-VestaCP komunye umbhalo oyidumi ukuze i-VestaCP ingasakwazi ukuwasebenzisa, bese sixhumanisa lawa mafayela ngokomfanekiso. Sicela ulandele izinyathelo ezingezansi ukuze ufunde ukuthi ungakwenza kanjani lokhu.
Isinyathelo 5: Faka i-SSH kuseva yakho bese ufaka le miyalo emibili ukuze uqambe kabusha amafayela amadala ▼
mv /usr/local/vesta/ssl/certificate.crt /usr/local/vesta/ssl/unusablecer.crt mv /usr/local/vesta/ssl/certificate.key /usr/local/vesta/ssl/unusablecer.key
- Uma le misebenzi elandelayo ihluleka ukusebenza, okubangela ukuthi isixhumanisi se-SSL sihluleke, iwebhusayithi ayikwazi ukuvulwa, kanye nefayela le-SSL "unusablecer"igama, shintsha ubuyele egameni langaphambili"isitifiketi” ngaphandle kokuchitha isikhathi ngokufaka kabusha iphaneli ye-VestaCP.
Isinyathelo 6: Dala isixhumanisi esingokomfanekiso ukuze ukhombe isixhumanisi esisha esingokomfanekiso. Sicela ufake igama lakho lomsebenzisi esikhundleni, njenge: admin. Faka igama lomphathi weseva yakho ye- VPS esikhundleni (FQDN). ▼
ln -s /home/admin/conf/web/ssl.chenweiliang.com.crt /usr/local/vesta/ssl/certificate.crt ln -s /home/admin/conf/web/ssl.chenweiliang.com.key /usr/local/vesta/ssl/certificate.key
Isinyathelo 7: Qala kabusha i-VestaCP
service vesta restart
Isinyathelo 8: Sula i-cache yesiphequluli sakho bese uzama ukungena kuphaneli yokulawula ye-VestaCP futhi usebenzisa i-port 8083.
- Manje i-SSL yakho ku-port 8083 ivikelekile!
Isixazululo sezimvume eziphukile
Ukuze ulungise izimvume eziphukile, faka umyalo olandelayo▼
- intando your.adminpanel.com Faka esikhundleni se-URL yekhonsoli yakho yokuphatha ye-VestaCP.
chgrp mail ssl.your.adminpanel.com.key chmod 660 ssl.your.adminpanel.com.key chgrp mail ssl.your.adminpanel.com.crt chmod 660 ssl.your.adminpanel.com.crt
Okungenhla kuyindlela yokunika amandla isitifiketi se-SSL ngemuva kwe-VestaCP.
Ungaphoqelela kanjani igama lesizinda ukusebenzisa isitifiketi se-https SSL?
Isinyathelo 1: Faka ithempulethi ye-nginx eyenziwe ngokwezifiso ▼
cd /usr/local/vesta/data/templates/web wget http://c.vestacp.com/0.9.8/rhel/force-https/nginx.tar.gz tar -xzvf nginx.tar.gz rm -f nginx.tar.gz
Isinyathelo sesi-2:Setha isifanekiso sommeleli ukuthi siphoqelele-https 
- Dala ukusetha ngaphambilini okusha, noma ngokusetha ngaphambilini okukhona, setha amandla-https njengesifanekiso sommeleli we-Nginx.
- Lapho ungeza abasebenzisi abasha, ungasebenzisa isifanekiso se-force-https ukuze unikeze izimvume kubasebenzisi bohlelo olusethiwe.
I-HTTP iqondiswa kabusha ngokuzenzakalelayo ku-HTTPS
I-VestaCP iyiqondisa kanjani kabusha i-HTTP ku-HTTPS isebenzisa i-htaccess? Ingabe ufuna ukuqondisa kabusha iwebhusayithi yakho ngokuzenzakalela enguqulweni evikelekile (HTTPS) yewebhusayithi yakho ebethelwe?
Efayelini elithi .htaccess, engeza i-syntax elandelayo yokuqondisa kabusha engu-301▼
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R,L]- U-"L" kokungenhla [R,L] usho Okokugcina (Okokugcina), uma ezinye izinhlelo zolimi nazo zinalo L, i-http ayikwazi ukuqondisa kabusha ngokuzenzakalelayo ku-https.
- Ngakho-ke, kunconywa ukuthi uqondise kabusha i-http301 ku-syntax ye-https phezulu (ngaphambi kwamanye ama-syntaxes).
Uma ufuna ukwengeza izitifiketi ezivikelekile ze-SSL kwezinye izizinda zakho kuphaneli yokulawula ye-VestaCP, sicela uhlole lesi sifundo ▼
Ngethemba ukuthi isihloko esithi "I-VestaCP Backend Port 8083 HTTPS Ayisebenzi? Isifundo Sokufaka Isitifiketi se-SSL" esabiwe kubhulogi likaChen Weiliang ( https://www.chenweiliang.com/ ) sizokusiza.
Zizwe ukhululekile ukwabelana ngalesi sixhumanisi sendatshana: https://www.chenweiliang.com/cwl-705.html