Qaar ka mid ah xirmooyinka martigelinta la wadaago ee cPanel ma bixiyaan AutoSSL ama kaliya waxay bixiyaan qiimeyaal sare. Natiijadu: Ma soo saari kartid bilaash Aan ku sirno shahaado iyada oo loo sii marayo interface cPanel, dhammaan xayndaabyaduna waxay ku xayiran yihiin shahaado is-saxiix ah. Barrawsarku wuxuu u muujiyaa bogga sida "aan ammaan ahayn". Sida looga baxo: hel shahaadada naftaada acme.sh oo ku rakib iyada oo loo marayo cPanel UAPI - si toos ah u cusbooneysiin, iyada oo aan lahayn AutoSSL.
HTTPS muddo dheer ayay ahayd mid waajib ah. Markaa, way ka sii niyad jab badan tahay marka xirmadaada martigelinta aysan bixin hab ku habboon oo lagu helo shahaado bilaash ah. Tani waxay dhacdaa inta badan inta aad u malaynayso, tusaale ahaan xirmooyinka heerka gelitaanka ee jaban ama ka dib isbeddelka qorshaha halkaas oo shahaadada si lama filaan ah looguma darin. Si kastaba ha ahaatee, farqigan waxaa si qurux badan oo joogto ah loo xiri karaa iyadoo la adeegsanayo dhowr sadar oo kood ah oo ku jira qolofka - habka oo dhammaystiran ayaa hoos lagu sharraxay.
1. Ku gal SSH
ssh -p <port> <user>@example.com
2. Ku rakib acme.sh
curl https://get.acme.sh | sh -s email=me@example.com
source ~/.bashrc
3. U deji Aan Qarinno sida CA
acme.sh --set-default-ca --server letsencrypt
4. Soo saar shahaado
acme.sh --issue -d example.com -d www.example.com -w ~/public_html
5. Ku rakib cPanel
acme.sh --deploy -d example.com --deploy-hook cpanel_uapi
6. Hubi
uapi SSL installed_hosts
echo | openssl s_client -servername example.com -connect example.com:443 2>/dev/null \
| openssl x509 -noout -issuer -dates
Jillaabku wuxuu u qorayaa shahaadada vHost ku habboon iyada oo loo sii marayo UAPI. Dejinta dejinta waa la keydiyay - hadda wixii ka dambeeya cron wuu cusbooneysiiyaa oo wax walba u rakibaa si madax bannaan ka hor inta uusan dhicin. Soo saaraha waa "Aan sir dhigno" taariikhda dhicitaankuna waa ku dhawaad 90 maalmood mustaqbalka. Haddii shahaadadii hore, ee is-saxiixday ay muuqato, beddelka adag ee browserka ayaa badanaa caawisa - shahaadadii hore si ku meel gaar ah ayaa loo kaydin karaa.
Martigeliyeyaasha qaar ayaa sameeya jillaabkooda cPanel. install_ssl oo ka jawaaba wax la mid ah adminbin Cpanel/hooks2/...: exit 255. acme.sh wali waxay soo tebisay "si guul leh ayaa la geeyey" - taasina waa sax. Xaaladdan oo kale, jillaabku wuu ku guuldareystaa sababtoo ah tillaabada xigta (tusaale ogeysiis gudaha ah ama isku-dubarid shaqo oo ka socota martigeliyaha), ma aha sababtoo ah rakibidda dhabta ah.
Domain-yada leh umlauts, acme.sh waxay shahaadada ku kaydisaa gudaha foomka Punycode (xn--…), halka jilbahu isbarbar dhigaya foomka Unicode. Natiijadu: "la geeyay 0 ee 0 goobood" - waxba lama rakibo. Waxyaabaha khiyaanada leh ayaa ah in acme.sh ay sidoo kale ka warbixiso "guuleysiga" halkan, markaa qaladka si fudud ayaa loo illoobay. Xalka: Si toos ah ula shaqee domainka Punycode oo dami habka auto:
python3 -c "import sys;print(sys.argv[1].encode('idna').decode())" hallöle.de
acme.sh --issue -d xn--hallle-zxa.de -d www.xn--hallle-zxa.de -w ~/public_html
export DEPLOY_CPANEL_AUTO_ENABLED='false'
acme.sh --deploy -d xn--hallle-zxa.de --deploy-hook cpanel_uapiMarka aad gasho SSH, uma baahnid AutoSSL: acme.sh waxay bixisaa shahaadada, taas oo cpanel_uapi-Hook-ku wuu rakibayaa, shaqada cron-ka ee ku jirtana si toos ah ayuu u cusbooneysiinayaa. Marka la rakibo, adeegga HTTPS ee bilaashka ah si joogto ah ayuu u shaqeeyaa. Kuwa maalgeliya dadaalka bilowga ah waxay naftooda u badbaadiyaan cusboonaysiin kasta oo gacanta ah mustaqbalka - waxayna u fidin karaan xalka isku midka ah domain kasta oo dheeraad ah oo ku jira isla akoonka iyagoo wata hal amar.