Ezinye iiphakheji zokubamba ekwabelwana ngazo kunye ne-cPanel aziboneleli nge-AutoSSL okanye zinikezela kuphela ngamaxabiso aphezulu. Isiphumo: Awunako ukukhupha isatifikethi sasimahla esithi MasiFinyele ngojongano lwecPanel, kwaye zonke iindawo zixingekile kwisatifikethi esizisayinileyo. Isikhangeli sibonisa iphepha "njengelingakhuselekanga". Indlela yokuphuma: fumana isatifikethi ngokwakho nge-acme.sh kwaye uyifake nge-cPanel UAPI-ukuhlaziya ngokuzenzekelayo, ngaphandle kwe-AutoSSL.
I-HTTPS ibisoloko iyimfuneko. Kuyacaphukisa ngakumbi ke ngoko, xa iphakheji yakho yokubamba inganikeli ngendlela elula yokufumana isatifikethi sasimahla. Oku kwenzeka rhoqo kunokuba unokucinga, umzekelo ngeepakeji ezingabizi kakhulu zokungena okanye emva kotshintsho lwesicwangciso apho isatifikethi singasafakwanga ngequbuliso. Nangona kunjalo, esi sikhewu sinokuvalwa kakuhle nangokusisigxina ngemigca embalwa yekhowudi kwiqokobhe - inkqubo epheleleyo ichazwe ngezantsi.
1. Ngena nge-SSH
ssh -p <port> <user>@example.com
2. Faka i-acme.sh
curl https://get.acme.sh | sh -s email=me@example.com
source ~/.bashrc
3. Seta i-Masibhale nge-Encrypt njenge-CA
acme.sh --set-default-ca --server letsencrypt
4. Isatifikethi sokukhupha
acme.sh --issue -d example.com -d www.example.com -w ~/public_html
5. Faka kwi-cPanel
acme.sh --deploy -d example.com --deploy-hook cpanel_uapi
6. Itshekhi
uapi SSL installed_hosts
echo | openssl s_client -servername example.com -connect example.com:443 2>/dev/null \
| openssl x509 -noout -issuer -dates
Ihuku ibhala isatifikethi kwi-vHost efanelekileyo nge-UAPI. Ukusetwa kwe-deploy kugcinwe - ukusukela ngoku i-cron ihlaziya kwaye ifake yonke into ngokuzimeleyo ngaphambi kokuba iphelelwe lixesha. Umkhuphi uthi "Masibethele" kwaye umhla wokuphelelwa lixesha malunga neentsuku ezingama-90 kwixesha elizayo. Ukuba esidala, isatifikethi esizisayinileyo sivela endaweni yoko, ukulayishwa kwakhona kanzima kwisikhangeli ngokuqhelekileyo kuyanceda - isatifikethi sangaphambili sinokugcinwa okwethutyana.
Abanye ababuki be-host baqhuba i-cPanel hook yabo. install_ssl kwaye uphendula ngento efana adminbin Cpanel/hooks2/...: exit 255. acme.sh isabika "ithunyelwe ngempumelelo" - kwaye ichanekile. Kulo mzekelo, ikhonkco liyasilela ngenxa yenyathelo elilandelayo (umzekelo, isaziso sangaphakathi okanye umsebenzi wongqamaniso osuka kumamkeli), hayi ngenxa yofako lokwenene.
Kwiindawo ezine-umlauts, i-acme.sh igcina isatifikethi ngaphakathi kwifomu yePunycode (xn--…), ngelixa i-auto-matcher ye-hook ithelekisa ifom ye-Unicode. Isiphumo: "ifakwe kwi-0 yeendawo ze-0" - akukho nto ifakiweyo. Into ekhohlisayo kukuba i-acme.sh iphinda ibike "Impumelelo" apha, ngoko ke impazamo ayihoywa ngokulula. Isisombululo: Sebenza ngokuthe ngqo kwi-domain yePunycode kwaye ucime imo ye-auto:
python3 -c "import sys;print(sys.argv[1].encode('idna').decode())" hallöle.de
acme.sh --issue -d xn--hallle-zxa.de -d www.xn--hallle-zxa.de -w ~/public_html
export DEPLOY_CPANEL_AUTO_ENABLED='false'
acme.sh --deploy -d xn--hallle-zxa.de --deploy-hook cpanel_uapiNgokufikelela kwi-SSH, awudingi i-AutoSSL: i-acme.sh ikhupha isatifikethi, esi cpanel_uapiI--Hook iyayifaka, kwaye umsebenzi we-cron obandakanyiweyo uyigcina ihlaziywa ngokuzenzekelayo. Nje ukuba imiselwe, inkonzo ye-HTTPS yasimahla isebenza yodwa ngokuqhubekayo. Abo batyala imali yokuqala bayasindisa yonke inguqulelo eyenziwe ngesandla kwixesha elizayo - kwaye banokwandisa isisombululo esifanayo kuyo nayiphi na idomeyini eyongezelelweyo kwiakhawunti enye ngomyalelo omnye.