Amanye amaphakheji wokubamba okwabiwe nge-cPanel awanikeli nge -AutoSSL , noma kuphela ezinhlelweni ezibiza kakhulu. Ngenxa yalokho, awukwazi ukukhipha isitifiketi samahhala se-Let's Encrypt ngesixhumi esibonakalayo se-cPanel, futhi wonke ama-domain anamathele kwisitifiketi esizisayinele sona. Isiphequluli sibonisa ikhasi "njengelingephephile." Isixazululo: thola isitifiketi ngokwakho usebenzisa i-acme.sh bese usifaka nge-cPanel UAPI - ivuselelwa ngokuzenzakalelayo, ngokuphelele ngaphandle kwe-AutoSSL.
I-HTTPS ibilokhu iyimpoqo isikhathi eside. Kuyacasula nakakhulu-ke, lapho iphakheji yakho yokubamba inganikezi indlela elula yokuthola isitifiketi samahhala. Lokhu kwenzeka kaningi kunalokho ongase ucabange, isibonelo ngamaphakheji aphansi angabizi noma ngemva kokushintsha kohlelo lapho isitifiketi singasafakwa khona ngokuzumayo. Kodwa-ke, leli gebe lingavalwa kahle futhi unomphela ngemigqa embalwa yekhodi egobolondweni - inqubo ephelele ichazwe ngezansi.
1. Ngena ngemvume nge-SSH
ssh -p <port> <user>@example.com
2. Faka i-acme.sh
curl https://get.acme.sh | sh -s email=me@example.com
source ~/.bashrc
3. Setha i-Let's Encrypt njenge-CA
acme.sh --set-default-ca --server letsencrypt
4. Isitifiketi sokukhishwa
acme.sh --issue -d example.com -d www.example.com -w ~/public_html
5. Faka ku-cPanel
acme.sh --deploy -d example.com --deploy-hook cpanel_uapi
6. Isheke
uapi SSL installed_hosts
echo | openssl s_client -servername example.com -connect example.com:443 2>/dev/null \
| openssl x509 -noout -issuer -dates
I-hook ibhala isitifiketi kumphathi we-virtual ofanele nge-UAPI. Izilungiselelo zokufakwa ziyalondolozwa – kusukela manje kuqhubeke, i-cron izovuselela ngokuzenzakalelayo futhi ifake konke ngaphambi kokuphelelwa yisikhathi. Umkhiphi uthi “Masibethele,” futhi usuku lokuphelelwa yisikhathi cishe luyizinsuku ezingama-90 esikhathini esizayo. Uma isitifiketi esidala, esizisayinile sisavela, ukulayisha kabusha okuqinile kusiphequluli kuvame ukusiza – isitifiketi sangaphambilini singagcinwa okwesikhashana.
Abanye ababungazi baphatha i-cPanel hook yabo. install_ssl futhi uphendula ngento efana adminbin Cpanel/hooks2/...: exit 255. I-acme.sh isabika ukuthi "isetshenziswe ngempumelelo" - futhi lokho kulungile. Kulesi simo, i-hook iyahluleka ngenxa yesinyathelo esilandelayo (njengokwazisa kwangaphakathi noma umsebenzi wokuvumelanisa ngumhlinzeki we-hosting), hhayi ukufakwa kwangempela.
Kuma-domain ane-umlauts, i-acme.sh igcina isitifiketi ngaphakathi kwifomu le-Punycode (xn--…), kuyilapho i-auto-matcher ye-hook iqhathanisa ifomu le-Unicode. Umphumela: "kufakwe kumasayithi angu-0 kwangu-0" - akukho lutho olufakiwe. Into eyimfihlo ukuthi i-acme.sh iphinde ibike "Impumelelo" lapha, ngakho-ke iphutha liyanakwa kalula. Isixazululo: Sebenza ngqo nesizinda se-Punycode bese ukhubaza ukufanisa okuzenzakalelayo.:
python3 -c "import sys;print(sys.argv[1].encode('idna').decode())" hallöle.de
acme.sh --issue -d xn--hallle-zxa.de -d www.xn--hallle-zxa.de -w ~/public_html
export DEPLOY_CPANEL_AUTO_ENABLED='false'
acme.sh --deploy -d xn--hallle-zxa.de --deploy-hook cpanel_uapiNgokufinyelela kwe-SSH, awudingi i-AutoSSL: i-acme.sh ikhipha isitifiketi, esibizwa ngokuthi cpanel_uapiI--Hook iyayifaka, futhi umsebenzi we-cron ofakiwe uyigcina ivuselelwa ngokuzenzakalelayo. Uma isisethiwe, isevisi yamahhala ye-HTTPS isebenza yodwa njalo. Labo abatshala umzamo wokuqala bazisindisa ekuvuseleleni konke ngesandla esikhathini esizayo - futhi banganweba ikhambi elifanayo kunoma yisiphi isizinda esengeziwe ku-akhawunti efanayo ngomyalo owodwa.