Difference between revisions of "Sentora SSL Letsencrypt"

From MS Computech
Jump to: navigation, search
Line 1: Line 1:
วิธีการติดตั้ง SSL Letsencrypt บน Centos 7 Sentira
+
วิธีการติดตั้ง SSL Letsencrypt บน Centos 7 Sentora
 
<pre>
 
<pre>
 
yum install git mod_ssl openssl python-certbot-apache
 
yum install git mod_ssl openssl python-certbot-apache

Revision as of 00:47, 18 January 2017

วิธีการติดตั้ง SSL Letsencrypt บน Centos 7 Sentora

yum install git mod_ssl openssl python-certbot-apache
nano /etc/httpd/conf.d/ssl.conf

nano /etc/httpd/conf.d/ssl.conf

#Listen 443 https
git clone https://github.com/letsencrypt/letsencrypt
cd letsencrypt
./letsencrypt-auto --help
service httpd stop
./letsencrypt-auto certonly --standalone -d domain.com -d www.domain.com
service httpd start

Changing Sentora port: On Sentora Panel go to Admin -> Module Admin -> Apache Config > Override a Virtualhost [Select VHost] -> Tick Port Override. Forward Port 80 to Overriden Port: 443 Custom Entry:

SSLEngine on
SSLProtocol ALL -SSLv2 -SSLv3
SSLHonorCipherOrder On
SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
SSLCertificateFile /etc/letsencrypt/live/domain.com/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/domain.com/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/domain.com/chain.pem
# Keeping bellow for future upgrades.
# Requires Apache >= 2.4
SSLCompression off
php -q /etc/sentora/panel/bin/daemon.php
service apache2 restart

Your domain should now be secured by SSL. You can test it here: https://www.ssllabs.com/ssltest/