Nruab Let’s Encrypt SSL rau Ubuntu nrog OpenLiteSpeed thiab txuas hnub nyoog tsis siv neeg

Lus piav qhia txog Let’s Encrypt SSL

Let’s Encrypt yog ib lub koomhaum muab daim ntawv pov thawj uas qhib thiab ua haujlwm tsis siv neeg, muab daim ntawv pov thawj TLS/SSL pub dawb rau pej xeem sawv daws. Qhov kev pabcuam no yog muab los ntawm Internet Security Research Group (ISRG). Phau ntawv qhia no yuav qhia koj yuav ua li cas nruab daim ntawv pov thawj Let’s Encrypt SSL rau ntawm Ubuntu 20.04 server nrog OpenLiteSpeed (~Apache) siv Certbot installer. Thaum ua tiav phau ntawv qhia no, koj lub server yuav muaj daim ntawv pov thawj siv tau thiab yuav hloov txhua qhov kev thov HTTP mus rau HTTPS.

Yam yuav tsum muaj ua ntej nruab Let’s Encrypt SSL

Let’s Encrypt SSL: Phau ntawv qhia no xav tias koj twb tau tsim ib lub Ubuntu server los ntawm Vultr nrog OpenLiteSpeed lossis Apache, muaj ib lub npe sau uas taw mus rau lub server tus IP address, thiab koj tau nkag mus nrog cai root.

Nruab Certbot: Let’s Encrypt SSL

Nruab Let’s Encrypt SSL: Txoj kev pom zoo rau nruab Certbot yog siv Snap.

Xyuas kom meej tias snapd tau hloov tshiab lawm.

$ sudo snap install core; sudo snap refresh core

Tshem tawm certbot-auto thiab lwm cov pob Certbot uas twb muaj nyob hauv koj lub operating system.

$ sudo apt-get remove certbot

Nruab Certbot nrog Snap.

$ sudo snap install --classic certbot

Txuas Certbot rau /usr/bin.

$ sudo ln -s /snap/bin/certbot /usr/bin/certbot

Xaiv txoj kev uas koj xav khiav Certbot:

Koj puas pom zoo ncua koj lub vev xaib ib ntus?

• Yog, kuv lub web server tam sim no tsis khiav ntawm lub tshuab no.
  Nres koj lub web server, ces khiav lo lus txib no kom tau daim ntawv pov thawj. Certbot yuav qhib ib lub web server ib ntus ntawm koj lub tshuab.

$ sudo certbot certonly --standalone

• Tsis yog, kuv yuav tsum cia kuv lub web server khiav mus ntxiv.
  Yog tias koj muaj ib lub web server uas siv chaw nres nkoj 80 thiab tsis xav nres nws thaum Certbot khiav, khiav lo lus txib no thiab ua raws li cov lus qhia hauv terminal.

$ sudo certbot certonly --webroot

Yuav siv lub webroot plugin, koj lub server yuav tsum tau teeb tsa kom muab cov ntaub ntawv hauv cov nplaub tshev zais. Yog tias /.well-known raug xử lý tshwj xeeb hauv koj lub web server qhov kev teeb tsa, tej zaum koj yuav tsum hloov qhov kev teeb tsa kom ntseeg tau tias cov ntaub ntawv hauv /.well-known/acme-challenge raug koj lub web server muab kev pab.

Lus ceeb toom tseem ceeb

Nruab koj daim ntawv pov thawj

Koj yuav tsum nruab daim ntawv pov thawj tshiab rau hauv koj lub web server cov ntaub ntawv teeb tsa.

Xyuas Let’s Encrypt SSL kev txuas hnub nyoog tsis siv neeg

Cov pob Certbot hauv koj lub kaw lus los nrog ib qho cron job lossis timer system systemd uas yuav txuas hnub nyoog koj daim ntawv pov thawj tsis siv neeg ua ntej nws tas sijhawm. Koj yuav tsis tas khiav Certbot dua, tshwj tsis yog koj hloov qhov kev teeb tsa. Koj tuaj yeem xyuas koj daim ntawv pov thawj qhov kev txuas hnub nyoog tsis siv neeg los ntawm kev khiav lo lus txib no:

$ sudo certbot renew --dry-run

Lo lus txib txuas hnub nyoog ntawm certbot raug nruab rau hauv ib qho ntawm cov chaw hauv qab no:

/etc/crontab/ ;/etc/cron.*/* ;systemctl list-timers

Yog tias qhov kev txuas hnub nyoog tsis siv neeg ua tsis tiav, xyuas qhov kev thov txuas hnub nyoog tsis siv neeg ntawm /etc/letsencrypt/renewal/domain.com.conf kom pom tias puas tau teeb tsa raug lawm (xws li hauv qhov piv txwv hauv qab no).

renew_before_expiry = 30 days
version = 2.9.0
archive_dir = /etc/letsencrypt/archive/saibabc.com
cert = /etc/letsencrypt/live/saibabc.com/cert.pem
privkey = /etc/letsencrypt/live/saibabc.com/privkey.pem
chain = /etc/letsencrypt/live/saibabc.com/chain.pem
fullchain = /etc/letsencrypt/live/saibabc.com/fullchain.pem
Options used in the renewal process
[renewalparams]
account = 56bb8680ab21b3db38f6d756e69139be
authenticator = webroot
webroot_path = /var/www/html/saibabc.com
server = https://acme-v02.api.letsencrypt.org/directory
key_type = ecdsa
[[webroot_map]]
saibabc.com = /var/www/html/saibabc.com
www.saibabc.com = /var/www/html/saibabc.com

Paub meej tias Certbot tau ua haujlwm

Kom paub meej tias koj lub vev xaib tau teeb tsa raug lawm, mus rau https://yourwebsite.com/ hauv browser thiab nrhiav lub cim xauv hauv URL bar.

Zoo siab, koj tau ua tiav kev nruab Let’s Encrypt SSL uas yuav txuas hnub nyoog tsis siv neeg thaum yuav tas sijhawm.

Nyeem ntxiv: Txhim kho kev ruaj ntseg thiab kev ua tau zoo nrog Ubuntu Server: Phau ntawv qhia kev teeb tsa