Amanye amaphakheji wokubamba okwabiwe nge-cPanel awanikezi i-AutoSSL noma awanikeze ngamanani aphezulu kuphela. Umphumela: Awukwazi ukukhipha isitifiketi samahhala esithi Masibethele usebenzisa isixhumi esibonakalayo se-cPanel, futhi zonke izizinda zinamathele kusitifiketi esizisayinise. Isiphequluli sibonisa ikhasi “njengelingavikelekile”. Indlela yokuphuma: zitholele isitifiketi ngokwakho nge-acme.sh bese usifaka usebenzisa i-cPanel UAPI - ivuselelwa ngokuzenzakalelayo, ngaphandle kwe-AutoSSL.
I-HTTPS ibilokhu iyimpoqo isikhathi eside. Kuyacasula nakakhulu-ke, lapho iphakheji yakho yokubamba inganikezi indlela elula yokuthola isitifiketi samahhala. Lokhu kwenzeka kaningi kunalokho ongase ucabange, isibonelo ngamaphakheji aphansi angabizi noma ngemva kokushintsha kohlelo lapho isitifiketi singasafakwa khona ngokuzumayo. Kodwa-ke, leli gebe lingavalwa kahle futhi unomphela ngemigqa embalwa yekhodi egobolondweni - inqubo ephelele ichazwe ngezansi.
1. Ngena ngemvume nge-SSH
ssh -p <port> <user>@example.com
2. Faka i-acme.sh
curl https://get.acme.sh | sh -s email=me@example.com
source ~/.bashrc
3. Setha i-Let's Encrypt njenge-CA
acme.sh --set-default-ca --server letsencrypt
4. Isitifiketi sokukhishwa
acme.sh --issue -d example.com -d www.example.com -w ~/public_html
5. Faka ku-cPanel
acme.sh --deploy -d example.com --deploy-hook cpanel_uapi
6. Isheke
uapi SSL installed_hosts
echo | openssl s_client -servername example.com -connect example.com:443 2>/dev/null \
| openssl x509 -noout -issuer -dates
Ihuku libhala isitifiketi ku-vHost efanele nge-UAPI. Ukulungiselelwa kokupha kulondoloziwe - kusukela manje kuqhubeke i-cron ivuselela futhi ifaka yonke into ngokuzimela ngaphambi kokuthi iphelelwe yisikhathi. Umkhiphi uthi “Asibethele” futhi idethi yokuphelelwa yisikhathi icishe ibe yizinsuku ezingama-90 esikhathini esizayo. Uma kunalokho kuvela isitifiketi esidala, esizisayinele, ukulayisha kabusha kanzima esipheqululini kuvame ukusiza - isitifiketi sangaphambilini singagcinwa okwesikhashana.
Abanye ababungazi baphatha i-cPanel hook yabo. install_ssl futhi uphendula ngento efana adminbin Cpanel/hooks2/...: exit 255. i-acme.sh isabika ukuthi "isetshenziswe ngempumelelo" - futhi lokho kulungile. Kulesi simo, ihhuku ihluleka ngenxa yesinyathelo esilandelayo (isb. isaziso sangaphakathi noma umsebenzi wokuvumelanisa ovela kumsingathi), hhayi ngenxa yokufakwa kwangempela.
Kuma-domain ane-umlauts, i-acme.sh igcina isitifiketi ngaphakathi kwifomu le-Punycode (xn--…), ngenkathi i-auto-matcher ye-hook iqhathanisa ifomu le-Unicode. Umphumela: "kusetshenziswe kumasayithi angu-0 kwangu-0" - akukho okufakiwe. Into ekhohlisayo ukuthi i-acme.sh iphinda ibike "Impumelelo" lapha, ngakho-ke iphutha alinakwa kalula. Isixazululo: Sebenza ngokuqondile nesizinda se-Punycode bese uvala imodi ezenzakalelayo:
python3 -c "import sys;print(sys.argv[1].encode('idna').decode())" hallöle.de
acme.sh --issue -d xn--hallle-zxa.de -d www.xn--hallle-zxa.de -w ~/public_html
export DEPLOY_CPANEL_AUTO_ENABLED='false'
acme.sh --deploy -d xn--hallle-zxa.de --deploy-hook cpanel_uapiNgokufinyelela kwe-SSH, awudingi i-AutoSSL: i-acme.sh ikhipha isitifiketi, esibizwa ngokuthi cpanel_uapiI--Hook iyayifaka, futhi umsebenzi we-cron ofakiwe uyigcina ivuselelwa ngokuzenzakalelayo. Uma isisethiwe, isevisi yamahhala ye-HTTPS isebenza yodwa njalo. Labo abatshala umzamo wokuqala bazisindisa ekuvuseleleni konke ngesandla esikhathini esizayo - futhi banganweba ikhambi elifanayo kunoma yisiphi isizinda esengeziwe ku-akhawunti efanayo ngomyalo owodwa.