Yuli 26, 2018

Ta yaya To Motsa Daga HTTP To HTTPS A WordPress Amfani Free SSL Tare Bari Bari mu Encrypt

Gaskiya ne cewa motsi zuwa HTTPS yana da nasarorin da yafi dacewa dangane da tsaro, bayanin tsare sirri da kuma binciken tashar binciken injiniya. Akwai matsala mai yawa a cikin shafukan yanar gizo ta hanyar amfani da HTTPS a cikin shekarar bara ko haka, kuma ba a taba shi ba. Masana yanar gizo yanzu sun san muhimmancin motsi daga HTTP zuwa HTTPS. A baya can, manyan matsalolin da masu binciken yanar gizon suka fuskanta sune farashin da wahala don saita SSL zuwa yankinsu. Ba'a buƙatar wa masu rubutun ra'ayin yanar gizo ba wanda ke tafiyar da kowane tashar tashar sadarwa.

Yanzu, akwai kamfanonin SSL masu yawa kamar Comodo, StartSSL, Letsencrypt, da dai sauransu, waɗanda suke ba da takaddun shaidar SSL kyauta ga kowa da kowa. A halin yanzu, Bari mu ɓoye shi ne ɗaya daga cikin mafi yawan amfani, masu kyauta na SSL marasa sauki tare da sauƙi shigarwa.

Abubuwan Amfani da Amfani Bari mu encrypt:

  • Free SSL. (a fili)
  • Gyara shigarwa idan aka kwatanta da sauran masu samarwa.
  • Akwai a duk yankuna.
  • Tabbatar da yankuna ba tare da buƙatar MX records / email access.
  • Sabuntawa ta atomatik.

Disadvantages Of Amfani Bari mu encrypt:

  • Babu ƙara takaddun shaida takardun shaida.
  • Babu takaddun shaida.
  • Ƙimar iyaka don takardar shaidar takardar shaidar.

Duk da rashin fa'ida, zan iya baka shawara ka tafi na Bari mu ɓoye. Wadannan mahimman bayanai suna zuwa hoto ne kawai don rukunin yanar gizo masu halatta da mahimman hanyoyin manufa. Blog na yau da kullun baya shafar kowane ɗayan waɗannan.

Ta yaya To Secure Cpanel WordPress Tare da Letsencrypt Free SSL

Hanyar da ta fi dacewa shine amfani da abin da ke samar da kayan aiki. Ba kowane mai bada sabis ba zai ba ka wannan yanayin ba, amma kafofin ya ce mutane da yawa sun riga sun fara ƙara Bari mu ɓoye alama a cikin tsarin haɗin su. Kamar yadda ka gani, akwai wasu 'yan kasuwa masu ba da kyauta waɗanda suka riga sun kunna wannan alama. Don haka wataƙila, dole ne ku tafi tare Dreamhost or siteground a yanzu.

Kafa Bari mu ɓoye a cikin Dreamhost & Siteground:

Kasancewa a cikin masu shahararrun masu samar da kayan yanar gizon WordPress, suna haɗin haɗin Letsencrypt wanda ya gina shi mai sauƙi.

A Dreamhost, ku kawai buƙatar shiga cikin dashboard da ƙarƙashin sassan domains, kuna buƙatar danna kan amintacce.

mafarini mamallakin asiri

Sa'an nan kuma danna kan Ƙara Maɓallin Tsaro. A shafi na gaba, kawai kuna buƙatar zaɓar yankin sannan ku danna Add Yanzu. Wannan zai fara aikin da kuma takardar shaidar SSL na kyauta tare da Bari mu ƙulla.

A Yanar Gizo, shiga cikin Cpanel kuma gungura ƙasa zuwa sashin tsaron. A ƙarƙashin wannan, za ku sami ɗakin mu na encrypt; danna kan shi.

damar yanar gizo

Wannan zai kai ka zuwa shafin shigarwa, inda kake buƙatar zaɓar yankin kuma danna Shigar.

Don ɗakin yanar gizon yanar gizo waɗanda ba su samar da wannan alama ba, dole ne ku bi hanya mai tsawo inda abin ya bambanta daga ɗayan zuwa wani. Yawancin masu samarwa suna da jagora don shigar da takaddun shaidar SSL na 3rd a kan gidan yanar gizon su, kamar Bluehost & Hostgator. Idan ba za ka iya samun irin waɗannan takardun bayanai ba, tuntuɓi mai bada sabis.

Ta yaya To Secure Apache Tare Da Bari mu Encrypt Free SSL A Ubuntu

Don shafukan yanar gizo a kan Apache, kana buƙatar tafiyar da 'yan sauki a kan uwar garke don shigarwa da kuma daidaita Bari mu encrypt. Yana da sauƙi a aiwatar da umurnin idan kana da ilimin ilimi, amma kada ka rikici a kusa da uwar garke idan kun kasance kawai noob.

Mataki na 1: Shiga cikin uwar garken

Tabbatar ka shiga tare da sunan mai amfani wanda ya sami damar isa ga uwar garke.

Mataki 2: Sabuntawa da Shigar Git

Kana buƙatar sabunta uwar garken kuma shigar da shi domin saukewa Bari mu encrypt kai tsaye daga github. Ga umarnin.

Sudo apt-samun ɗaukaka sudo apt-samun shigar git

Mataki na 3: Saukewa da shigar Bari mu ɓoye abokin ciniki

Gudun umarni mai zuwa zai sauke mu Bari mu ɓoye abokin ciniki daga wurin ajiyar hukuma. Za a sauke fayiloli zuwa / fita, wanda shine jagora na kwarai don 3rd jam'iyyar softwares.

sudo git clone https://github.com/letsencrypt/letsencrypt / fita / letsencrypt

Lura: Zaka kuma iya shigar da ita zuwa wani ɗayan kuri'a na zabi.

Mataki na 4: Samar da Takaddun shaidar SSL

Sa'an nan kuma samun damar jagorancin letencrypt.

cd / fita / letsencrypt

Don aiwatar da shigarwar kuma sami takardar shaidar don yankin, yi amfani da na biyu

./letsencrypt-auto --apache -d misali.com -d www.example.com

(Sauya "example.com" tare da sunan yankinka.)

Bayan aiwatar da su, za a umarce ka da zaɓin zaɓuɓɓuka kuma yarda da ka'idodin da yanayi. Samar da adireshin imel mai dacewa don maɓallin ɓacewa da sanarwa. Da zarar an shigar da shigarwa, an nuna sakon taya murna a kan na'urar kwakwalwa.

Mataki na 5: Shirya sabuntawar atomatik bari muyi takaddun shaida

Bari encrypt na samar da takaddun shaidar SSL kyauta wanda ke aiki kawai don 90-days. Saboda haka, kana buƙatar sabunta takardar shaidar kowane lokaci, wanda shine tsari mai sauri. Don shawo kan wannan, muna da wani abu da ake kira aikin cron wanda zai yi sabuntawa ta atomatik.

Yanzu dole mu shirya crontab kuma mu kirkiro sabon aikin cron wanda zai gudana a kowane mako. Gudura wannan umurnin:

sudo crontab -e

Ƙara wannan a ƙarshen crontab:

30 2 * * 1 / ficewa / letsencrypt / letsencrypt-sabuntawar atomatik >> /var/log/le-renew.log

Ta yaya To Secure Nginx Tare Da Bari mu Encrypt Free SSL A Ubuntu

Don shafukan yanar gizo a kan uwar garken Nginx, muna buƙatar shigarwa Bari mu ɓoye ta hanyar aiwatar da umarni kaɗan a cikin na'ura mai kwakwalwa. Kamar yadda na riga an ambata, kada kuyi hakan idan ba ku saba da kalla basirar gudanarwa ba.

Mataki na 1: Shiga cikin uwar garken

Tabbatar ka shiga tare da sunan mai amfani wanda ya sami damar isa ga uwar garke.

Mataki 2: Sabuntawa da Shigar Git

Kuna buƙatar sabunta uwar garke kuma a shigar da shi don saukewa Bari mu ɓoye kai tsaye daga GitHub. Ga umarnin.

Sudo apt-samun sabunta sudo apt-get -y shigar da

Mataki na 3: Shigarwa Bari mu ɓoye abokin ciniki

Gudun wannan umurni don saukewa Bari mu ɓoye ajiyar ajiyar kuɗin mai shiga ga / fita / kariya.

sudo git clone https://github.com/letsencrypt/letsencrypt / fita / letsencrypt

Mataki na 4: Samar da Takaddun shaidar SSL

Akwai hanyoyi daban-daban na samar da SSL. A nan za mu yi amfani da ɗaya daga cikin plugins ko masu ƙwarewa da ake kira "webroot" don samun takardar shaidar SSL.

Je zuwa fayil na tsoho a cikin jagorancin shafin:

sudo nano / sauransu / nginx / shafukan-samuwa / tsoho

Ƙara shinge a kasa a cikin uwar garke. Ajiye da fita.

location ~ /.well-known {bari duk; }

Sa'an nan kuma je zuwa Jagorar mu ta ɓoye:

cd / fita / letsencrypt

Yanzu don fara shigarwa, gudanar da wannan umurnin.

./letsencrypt-auto hakika -a webroot --webroot-path =/ var / www / html -d Misali.com -d www.example.com

lura: Sauya rubutun haske tare da hanyar tushen a cikin uwar garke da sunan yankinku.

A yanzu an fara qaddamar shigarwa. Za a buƙaci ku shigar da adireshin imel ɗinku kuma ku yarda da ka'idodin da yanayi. Da zarar an yi haka, za'a nuna sakon taya murna a kan na'ura.

Yanzu kun ƙirƙiri mažallan da fayilolin da ake bukata don SSL don aiki a kan yankin. Duk waɗannan fayilolin an adana a cikin Bari mu ɓoye shugabancin sub-directory.

Maɓallin keɓaɓɓen:

/etc/letsencrypt/live/example.com/privkey.pem

Your takardar shaidar:

/etc/letsencrypt/live/example.com/cert.pem

Takaddun shaida na matsakaici:

/etc/letsencrypt/live/example.com/chain.pem

Your takardar shaidar da kuma takardun shaida matsakaici concatenated a daidai tsari:

/etc/letsencrypt/live/example.com/fullchain.pem

 Mataki na 5: Gudanar da SSL tare da uwar garken yanar gizo

Shirya fayil na sanyi na Nginx wanda ya ƙunshi asusun uwar garke (kamar mun riga muka yi). By tsoho ta:

sudo nano / sauransu / nginx / shafukan-samuwa / tsoho

A cikin sakon uwar garke, sami Lissafi masu zuwa kuma share ko yi musu sharhi.

saurari 80 default_server; listen [::]: 80 default_server ipv6only = akan;

Ƙara waɗannan layuka a cikin uwar garke daya

sauraron 443 ssl; server_name example.com www.example.com; ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;

Sauya yankin tare da sunan yankinku.

A karshe, ƙara wannan sabon sabar a sama da baya. Wannan zai sake tura duk buƙatun HTTP zuwa HTTPS.

uwar garke {saurari 80; server_name example.com www.example.com; dawo 301 https: // $ rundunar $ request_uri; }

Ajiye fayil da fita.

Mataki na 6: Shirya sabuntawar atomatik bari muyi takaddun shaida

Bari encrypt na samar da takaddun shaidar SSL kyauta wanda ke aiki kawai don 90-days. Saboda haka, kana buƙatar sabunta takardar shaidar kowane lokaci, wanda shine tsari mai sauri. Don shawo kan wannan, muna da wani abu da ake kira aikin cron wanda zai yi sabuntawa ta atomatik.

Yanzu dole mu shirya crontab kuma mu kirkiro sabon aikin cron wanda zai gudana a kowane mako. Gudura wannan umurnin:

sudo crontab -e

Ƙara wannan a ƙarshen crontab:

30 2 * * 1 / opt / letsencrypt / letsencrypt-auto sabuntawa >> /var/log/le-renew.log 35 2 * * 1 /etc/init.d/nginx reload

Matsalolin da ke fuskantar ta amfani Amfani da mu:

Da farko Bari mu encrypt yana da matsalolin da yawa a cikin tsarin beta, wanda aka gyara tare da lokaci. Duk da haka, akwai matsalar babbar matsala wadda na fuskanta:

Kuskuren da yawa na turawa - Bari mu encrypt [ERR_TOO_MANY_REDIRECTS]:

Yawancinku dole ne ku san wannan kuskure. Yana faruwa a yayin da madaidaicin bai dace ba ko akwai wasu redirections da yawa a cikin uwar garken wanda ba ya ƙare a wata aya ta haka ya kafa ƙirar iyaka. Musamman idan kana da manyan zirga-zirga bugawa your uwar garke.

Magani: Yi amfani da CloudFlare. A cikin dashboard, kewaya zuwa Crypto. Sanya SSL boye-boye zuwa "Full (M)". 

saitin gajimare

Kammalawa

Na amfani da kaina Bari mu encrypt a kan daban-daban blogs kuma ya zuwa yanzu, yana aiki mai kyau kyau a gare ni. Amma tun da har yanzu ba a tallafawa da dama ba ta hanyar watsa labaran yanar gizo masu yawa a halin yanzu, zakuyi tunani game da shi. Idan an yi tallace-tallace a kan VPS ko sabobin sadaukarwa, jeka ba tare da shakka ba. Duk da matsalolin da na fuskanta, bari mu ɓoye kamanninsu.

Game da marubucin 

Anvesh


{"email": "Adireshin imel ba daidai ba ne", "url": "Adireshin gidan yanar gizo ba shi da inganci", "required": "Filin da ake buƙata ya ɓace"}