Hoʻohui i ka palapala SSL mai DomainFactory ma IIS

I ke au o Let's Encrypt, ua lilo nā pūnaewele i hoʻopāʻālua ʻia i mea maʻamau i kēia manawa. Eia nō naʻe, koi pinepine ʻia nā palapala hōʻoia wildcard a i ʻole nā palapala hōʻoia i hoʻonui ʻia me ka hōʻoia pono o ka mea nona ka hilinaʻi. Hāʻawi ʻo DomainFactory i nā palapala hōʻoia SSL kūpono i hiki ke hoʻohana ʻia ma waho. Hiki ke hoʻonohonoho ʻia ma kahi kikowaena IIS o kēia manawa me ka ʻole o kahi CSR e hoʻohana ana iā OpenSSL . Ma lalo iho nei, e wehewehe pōkole wau i nā ʻanuʻu e pono ai.


ʻO ka mua, koho i ka helu wahi i makemake ʻia e like me ka inoa kikowaena (ma ke komo ʻana iā “www” i hoʻopili ʻia ʻo https://tld.com a me https://www.tld.com ma hope):

SSL palapala IIS

Ma hope o ke koho ʻana i ka palapala i makemake ʻia a me ka lōʻihi, hiki iā DomainFactory ke hana i kāna CSR ponoʻī:

SSL palapala IIS

ʻO ka lua o ka koho (hoʻouka i kāu CSR ponoʻī) ʻaʻole pono a paʻakikī (ma ka paʻamau, ʻaʻole hāʻawi ka IIS i ke koho o ka hoʻopuka ʻana i nā noi encrypted SHA256 i koi ʻia e DomainFactory) Ma hope o ke kauoha kūleʻa, hoʻoiho ʻoe i ka palapala SSL, ke kī pilikino a me ka pūʻolo CA waena:

SSL palapala IIS

I kēia manawa hoʻohui ʻoe i ke kī a me ka palapala i loko o kahi faile pfx me ke kōkua o OpenSSL (hāʻawi i kahi ʻōlelo huna):

openssl pkcs12 -export -out www.tld.com.pfx -inkey www.tld.com.key -in www.tld.com.crt

ʻO ka hope, ua hoʻouka ʻia ka palapala waena i ka kikowaena Windows:

SSL palapala IIS

Ukali ʻia e ka lawe ʻia mai o ka faile pfx i hana ʻia i ka IIS Manager (ma kahi o nā Palapala Hōʻoia Server) ma ke komo ʻana i ka ʻōlelo huna i hāʻawi mua ʻia.:

SSL palapala IIS

ʻO ka hope, hoʻoponopono i nā mea paʻa (hoʻokahi komo me hoʻokahi komo me ka ʻole www):

SSL palapala IIS

Inā hiki ke kikowaena ma waho, wehe ʻoe i ke awa 443 i ka router / firewall.

Hope