Gaskiya ne cewa motsi zuwa HTTPS yana da nasarorin da yafi dacewa dangane da tsaro, bayanin tsare sirri da kuma binciken tashar binciken injiniya. Akwai matsala mai yawa a cikin shafukan yanar gizo ta hanyar amfani da HTTPS a cikin shekarar bara ko haka, kuma ba a taba shi ba. Masana yanar gizo yanzu sun san muhimmancin motsi daga HTTP zuwa HTTPS. A baya can, manyan matsalolin da masu binciken yanar gizon suka fuskanta sune farashin da wahala don saita SSL zuwa yankinsu. Ba'a buƙatar wa masu rubutun ra'ayin yanar gizo ba wanda ke tafiyar da kowane tashar tashar sadarwa.
Yanzu, akwai kamfanonin SSL masu yawa kamar Comodo, StartSSL, Letsencrypt, da dai sauransu, waɗanda suke ba da takaddun shaidar SSL kyauta ga kowa da kowa. A halin yanzu, Bari mu ɓoye shi ne ɗaya daga cikin mafi yawan amfani, masu kyauta na SSL marasa sauki tare da sauƙi shigarwa.
- 1 Ta yaya To Secure Cpanel WordPress Tare da Letsencrypt Free SSL
- 2 Ta yaya To Secure Apache Tare Da Bari mu Encrypt Free SSL A Ubuntu
- 3 Ta yaya To Secure Nginx Tare Da Bari mu Encrypt Free SSL A Ubuntu
-
- 3.0.1 Mataki na 1: Shiga cikin uwar garken
- 3.0.2 Mataki 2: Sabuntawa da Shigar Git
- 3.0.3 Mataki na 3: Shigarwa Bari mu ɓoye abokin ciniki
- 3.0.4 Mataki na 4: Samar da Takaddun shaidar SSL
- 3.0.5 Mataki na 5: Gudanar da SSL tare da uwar garken yanar gizo
- 3.0.6 Mataki na 6: Shirya sabuntawar atomatik bari muyi takaddun shaida
-
- 4 Matsalolin da ke fuskantar ta amfani Amfani da mu:
- 5 Kammalawa
Abubuwan Amfani da Amfani Bari mu encrypt:
- Free SSL. (a fili)
- Gyara shigarwa idan aka kwatanta da sauran masu samarwa.
- Akwai a duk yankuna.
- Tabbatar da yankuna ba tare da buƙatar MX records / email access.
- Sabuntawa ta atomatik.
Disadvantages Of Amfani Bari mu encrypt:
- Babu ƙara takaddun shaida takardun shaida.
- Babu takaddun shaida.
- Ƙimar iyaka don takardar shaidar takardar shaidar.
Duk da rashin fa'ida, zan iya baka shawara ka tafi na Bari mu ɓoye. Wadannan mahimman bayanai suna zuwa hoto ne kawai don rukunin yanar gizo masu halatta da mahimman hanyoyin manufa. Blog na yau da kullun baya shafar kowane ɗayan waɗannan.
Ta yaya To Secure Cpanel WordPress Tare da Letsencrypt Free SSL
Hanyar da ta fi dacewa shine amfani da abin da ke samar da kayan aiki. Ba kowane mai bada sabis ba zai ba ka wannan yanayin ba, amma kafofin ya ce mutane da yawa sun riga sun fara ƙara Bari mu ɓoye alama a cikin tsarin haɗin su. Kamar yadda ka gani, akwai wasu 'yan kasuwa masu ba da kyauta waɗanda suka riga sun kunna wannan alama. Don haka wataƙila, dole ne ku tafi tare Dreamhost or siteground a yanzu.
Kafa Bari mu ɓoye a cikin Dreamhost & Siteground:
Kasancewa a cikin masu shahararrun masu samar da kayan yanar gizon WordPress, suna haɗin haɗin Letsencrypt wanda ya gina shi mai sauƙi.
A Dreamhost, ku kawai buƙatar shiga cikin dashboard da ƙarƙashin sassan domains, kuna buƙatar danna kan amintacce.
Sa'an nan kuma danna kan Ƙara Maɓallin Tsaro. A shafi na gaba, kawai kuna buƙatar zaɓar yankin sannan ku danna Add Yanzu. Wannan zai fara aikin da kuma takardar shaidar SSL na kyauta tare da Bari mu ƙulla.
A Yanar Gizo, shiga cikin Cpanel kuma gungura ƙasa zuwa sashin tsaron. A ƙarƙashin wannan, za ku sami ɗakin mu na encrypt; danna kan shi.
Wannan zai kai ka zuwa shafin shigarwa, inda kake buƙatar zaɓar yankin kuma danna Shigar.
Don ɗakin yanar gizon yanar gizo waɗanda ba su samar da wannan alama ba, dole ne ku bi hanya mai tsawo inda abin ya bambanta daga ɗayan zuwa wani. Yawancin masu samarwa suna da jagora don shigar da takaddun shaidar SSL na 3rd a kan gidan yanar gizon su, kamar Bluehost & Hostgator. Idan ba za ka iya samun irin waɗannan takardun bayanai ba, tuntuɓi mai bada sabis.
Ta yaya To Secure Apache Tare Da Bari mu Encrypt Free SSL A Ubuntu
Don shafukan yanar gizo a kan Apache, kana buƙatar tafiyar da 'yan sauki a kan uwar garke don shigarwa da kuma daidaita Bari mu encrypt. Yana da sauƙi a aiwatar da umurnin idan kana da ilimin ilimi, amma kada ka rikici a kusa da uwar garke idan kun kasance kawai noob.
Mataki na 1: Shiga cikin uwar garken
Tabbatar ka shiga tare da sunan mai amfani wanda ya sami damar isa ga uwar garke.
Mataki 2: Sabuntawa da Shigar Git
Kana buƙatar sabunta uwar garken kuma shigar da shi domin saukewa Bari mu encrypt kai tsaye daga github. Ga umarnin.
Sudo apt-samun ɗaukaka sudo apt-samun shigar git
Mataki na 3: Saukewa da shigar Bari mu ɓoye abokin ciniki
Gudun umarni mai zuwa zai sauke mu Bari mu ɓoye abokin ciniki daga wurin ajiyar hukuma. Za a sauke fayiloli zuwa / fita, wanda shine jagora na kwarai don 3rd jam'iyyar softwares.
sudo git clone https://github.com/letsencrypt/letsencrypt / fita / letsencrypt
Lura: Zaka kuma iya shigar da ita zuwa wani ɗayan kuri'a na zabi.
Mataki na 4: Samar da Takaddun shaidar SSL
Sa'an nan kuma samun damar jagorancin letencrypt.
cd / fita / letsencrypt
Don aiwatar da shigarwar kuma sami takardar shaidar don yankin, yi amfani da na biyu
./letsencrypt-auto --apache -d misali.com -d www.example.com
(Sauya "example.com" tare da sunan yankinka.)
Bayan aiwatar da su, za a umarce ka da zaɓin zaɓuɓɓuka kuma yarda da ka'idodin da yanayi. Samar da adireshin imel mai dacewa don maɓallin ɓacewa da sanarwa. Da zarar an shigar da shigarwa, an nuna sakon taya murna a kan na'urar kwakwalwa.
Mataki na 5: Shirya sabuntawar atomatik bari muyi takaddun shaida
Bari encrypt na samar da takaddun shaidar SSL kyauta wanda ke aiki kawai don 90-days. Saboda haka, kana buƙatar sabunta takardar shaidar kowane lokaci, wanda shine tsari mai sauri. Don shawo kan wannan, muna da wani abu da ake kira aikin cron wanda zai yi sabuntawa ta atomatik.
Yanzu dole mu shirya crontab kuma mu kirkiro sabon aikin cron wanda zai gudana a kowane mako. Gudura wannan umurnin:
sudo crontab -e
Ƙara wannan a ƙarshen crontab:
30 2 * * 1 / ficewa / letsencrypt / letsencrypt-sabuntawar atomatik >> /var/log/le-renew.log
Ta yaya To Secure Nginx Tare Da Bari mu Encrypt Free SSL A Ubuntu
Don shafukan yanar gizo a kan uwar garken Nginx, muna buƙatar shigarwa Bari mu ɓoye ta hanyar aiwatar da umarni kaɗan a cikin na'ura mai kwakwalwa. Kamar yadda na riga an ambata, kada kuyi hakan idan ba ku saba da kalla basirar gudanarwa ba.
Mataki na 1: Shiga cikin uwar garken
Tabbatar ka shiga tare da sunan mai amfani wanda ya sami damar isa ga uwar garke.
Mataki 2: Sabuntawa da Shigar Git
Kuna buƙatar sabunta uwar garke kuma a shigar da shi don saukewa Bari mu ɓoye kai tsaye daga GitHub. Ga umarnin.
Sudo apt-samun sabunta sudo apt-get -y shigar da
Mataki na 3: Shigarwa Bari mu ɓoye abokin ciniki
Gudun wannan umurni don saukewa Bari mu ɓoye ajiyar ajiyar kuɗin mai shiga ga / fita / kariya.
sudo git clone https://github.com/letsencrypt/letsencrypt / fita / letsencrypt
Mataki na 4: Samar da Takaddun shaidar SSL
Akwai hanyoyi daban-daban na samar da SSL. A nan za mu yi amfani da ɗaya daga cikin plugins ko masu ƙwarewa da ake kira "webroot" don samun takardar shaidar SSL.
Je zuwa fayil na tsoho a cikin jagorancin shafin:
sudo nano / sauransu / nginx / shafukan-samuwa / tsoho
Ƙara shinge a kasa a cikin uwar garke. Ajiye da fita.
location ~ /.well-known {bari duk; }
Sa'an nan kuma je zuwa Jagorar mu ta ɓoye:
cd / fita / letsencrypt
Yanzu don fara shigarwa, gudanar da wannan umurnin.
./letsencrypt-auto hakika -a webroot --webroot-path =/ var / www / html -d Misali.com -d www.example.com
lura: Sauya rubutun haske tare da hanyar tushen a cikin uwar garke da sunan yankinku.
A yanzu an fara qaddamar shigarwa. Za a buƙaci ku shigar da adireshin imel ɗinku kuma ku yarda da ka'idodin da yanayi. Da zarar an yi haka, za'a nuna sakon taya murna a kan na'ura.
Yanzu kun ƙirƙiri mažallan da fayilolin da ake bukata don SSL don aiki a kan yankin. Duk waɗannan fayilolin an adana a cikin Bari mu ɓoye shugabancin sub-directory.
Maɓallin keɓaɓɓen:
/etc/letsencrypt/live/example.com/privkey.pem
Your takardar shaidar:
/etc/letsencrypt/live/example.com/cert.pem
Takaddun shaida na matsakaici:
/etc/letsencrypt/live/example.com/chain.pem
Your takardar shaidar da kuma takardun shaida matsakaici concatenated a daidai tsari:
/etc/letsencrypt/live/example.com/fullchain.pem
Mataki na 5: Gudanar da SSL tare da uwar garken yanar gizo
Shirya fayil na sanyi na Nginx wanda ya ƙunshi asusun uwar garke (kamar mun riga muka yi). By tsoho ta:
sudo nano / sauransu / nginx / shafukan-samuwa / tsoho
A cikin sakon uwar garke, sami Lissafi masu zuwa kuma share ko yi musu sharhi.
saurari 80 default_server; listen [::]: 80 default_server ipv6only = akan;
Ƙara waɗannan layuka a cikin uwar garke daya
sauraron 443 ssl; server_name example.com www.example.com; ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
Sauya yankin tare da sunan yankinku.
A karshe, ƙara wannan sabon sabar a sama da baya. Wannan zai sake tura duk buƙatun HTTP zuwa HTTPS.
uwar garke {saurari 80; server_name example.com www.example.com; dawo 301 https: // $ rundunar $ request_uri; }
Ajiye fayil da fita.
Mataki na 6: Shirya sabuntawar atomatik bari muyi takaddun shaida
Bari encrypt na samar da takaddun shaidar SSL kyauta wanda ke aiki kawai don 90-days. Saboda haka, kana buƙatar sabunta takardar shaidar kowane lokaci, wanda shine tsari mai sauri. Don shawo kan wannan, muna da wani abu da ake kira aikin cron wanda zai yi sabuntawa ta atomatik.
Yanzu dole mu shirya crontab kuma mu kirkiro sabon aikin cron wanda zai gudana a kowane mako. Gudura wannan umurnin:
sudo crontab -e
Ƙara wannan a ƙarshen crontab:
30 2 * * 1 / opt / letsencrypt / letsencrypt-auto sabuntawa >> /var/log/le-renew.log 35 2 * * 1 /etc/init.d/nginx reload
Matsalolin da ke fuskantar ta amfani Amfani da mu:
Da farko Bari mu encrypt yana da matsalolin da yawa a cikin tsarin beta, wanda aka gyara tare da lokaci. Duk da haka, akwai matsalar babbar matsala wadda na fuskanta:
Kuskuren da yawa na turawa - Bari mu encrypt [ERR_TOO_MANY_REDIRECTS]:
Yawancinku dole ne ku san wannan kuskure. Yana faruwa a yayin da madaidaicin bai dace ba ko akwai wasu redirections da yawa a cikin uwar garken wanda ba ya ƙare a wata aya ta haka ya kafa ƙirar iyaka. Musamman idan kana da manyan zirga-zirga bugawa your uwar garke.
Magani: Yi amfani da CloudFlare. A cikin dashboard, kewaya zuwa Crypto. Sanya SSL boye-boye zuwa "Full (M)".
Kammalawa
Na amfani da kaina Bari mu encrypt a kan daban-daban blogs kuma ya zuwa yanzu, yana aiki mai kyau kyau a gare ni. Amma tun da har yanzu ba a tallafawa da dama ba ta hanyar watsa labaran yanar gizo masu yawa a halin yanzu, zakuyi tunani game da shi. Idan an yi tallace-tallace a kan VPS ko sabobin sadaukarwa, jeka ba tare da shakka ba. Duk da matsalolin da na fuskanta, bari mu ɓoye kamanninsu.