Paetukutuku
Ngā Tohu SSL me HTTPS
This article explains what SSL is in plain language, how Kapsule handles SSL automatically for your sites, and what to do if something goes wrong with your certificate.
Ko te āwhina i te SSL me te HTTPS
He Aha te SSL me He Aha te Take?
Ka whakaratonga tetahi tangata i tō paetukutuku, ka haere te mōhiohio i waenganui i ō rātau pūkoro me tō ture. Ahakoa te SSL, ka tonoa tērā mōhiohio i te kupu mārama. Ka taea e te tangata e arohaehae ana i te hononga whatunga ki te pānui, tae atu ki te kupuhipa, te tukurua puka, me ētahi wheako motuhake.
Ko te SSL (Secure Sockets Layer, e karanga nei i nāianei ko TLS engari he mea noa te karanga SSL) ka whakapaipai i tērā hononga. Ko te āhua ārai (padlock icon) i te wāhi pokapū o te pūkoro te tohu ā-aro-ā-aro e whakaatu ana kua mahi te SSL me te hononga e marō ana.
He tino āhuatanga e maha ana kua kaupapa ai te SSL kāore anake he tohu-pokapū:
- E tupu whakamua ng Google i ngā pae ā-haumaru. Ka roa ake te whakatakoto iho o ngā paetukutuku kāore he HTTPS i roto i ngā kitenga rapurapu.
- E whakakāinga te pūkoro. Ko Chrome, Safari, me Firefox katoa e whakaatu ana i ngā tohu "Not Secure" ki ngā kaitirotiro i runga i ngā paetukutuku kāore he SSL.
- Me hiahia te puka me ngā whakauru. E aukati ana ngā pūkoro o nāianei i te tukurua puka i runga i ngā whārangi kāore-HTTPS i ētahi whiringa.
I te poto: me whai te SSL ka mahi i ngā paetukutuku pūmau katoa. Ka whakahaere a Kapsule i tenei mea i a ia ake, nō reira kāore koe e pono ki te hoko, ki te whakakupu ā-tē-ringa rānei i ngā tohu tiaki.
Me Pēhea a Kapsule i te Whakahaere SSL i a ia Ake
Ka waihanga koe i tētahi pae i roto i KPanel me te DNS o tō rohe e tohu ana ki Kapsule, ka tīnei tēahi tohu tiaki SSL i a ia ake me te whakahaere. Kāore koe e pono ki te:
- Hoko tohu tiaki
- Whakatupuranga CSR (Certificate Signing Request)
- Tukurua ā-tē-ringa i ngā konae tohu tiaki
- Whakahae i ētahi mea ā-tē-ringa
Ka whakatakoto a Kapsule i te haumaru-ture tohu tiaki hei tīnei me te whakahaere i ngā tohu tiaki mō ngā pae katoa. Ka āwhina te tohu tiaki i te rohe pakiaka me te www subdomain.
Ānei Ka Tīneia te SSL
Ka tīneia ngā tohu tiaki SSL i a ia ake kua tutuki ai ngā āhuatanga e rua:
- Kua tāpiritia te rohe ki tō kaute Kapsule (e kitea ana i KPanel > Domains)
- Kua whakatūturu te DNS me te A record o te rohe e tohu ana ki tō ture Kapsule
Kua tutuki ai ngā āhuatanga e rua, ka tīmata te tīneinga o te tohu tiaki i a ia ake. I raro i ngā āhuatanga noa, ka whakaatu tō pae i te ārai āwhina (green padlock) i roto i 5 ki te 15 meneti o te whakatūturu DNS.
Kāore e taea te tīnei SSL i mua i te whakatūturu DNS. Ki te kua tohu tō rohe ki Kapsule i tēnei wā, me tatari koe i ngā harikoa roa whānui ki te whakatūturu DNS i te ao whānui i mua ka mahi te SSL. He mea noa me te tumanakohia tenei.
Ngā Tohu Tūngaitanga SSL i roto i KPanel
I Websites i roto i KPanel, e whakaatu ana tēnā pae i tētahi tohu tūngaitanga SSL:
| Tūngaitanga | Tikanga |
|---|---|
| Green padlock / Active | Kei te whai mana te SSL me te pae e tino HTTPS ana |
| Pending | Kua tīneia te tohu tiaki, e tatari ana mō te DNS, te whakarutuhanga rānei |
| Failed | Kāore i taea te tīnei tohu tiaki. Tīpako i te whakaoti āhuatanga i raro iho |
| Expiring Soon | Kei te tata te tohu tiaki ki te whakamutunga (he mea noa te whakahou, mō te mōhiohio anake) |
Me Pēhea Me Te SSL Kāore i Tīneia
Me tonu tonu te SSL e tohu ana i Pending, Failed rānei i muri i ngā meneti 30 me puta mai koe kua whakatūturu te DNS, whakamahi i tēnei rarangi mataotao:
1. Whakamanatia he Whakatūturu DNS
Whakamahi i tēahi taputapu matapae whakatūturu DNS (e whakaatuhia ana mā te rapu paetukutuku mō "DNS propagation checker"). Whakauru i tō rohe me te tirotirohia mēnā ka whakatauira te A record ki tētahi wāhitau IP Kapsule i ngā wāhi tonutanga.
Mēnā kāore, kāore anō kia tutuki te whakatūturu DNS. Tatari i tētahi harikoa anō me te tirotirohi anō.
2. Manatohia he Rohe Kei te Mahi i roto i KPanel
Haere ki KPanel > Domains me te whakamanatia ko tō rohe e tohu ana i Active, Connected rānei. Mēnā e tohu ana i Pending, kāore anō kia whakatūturu te DNS mai i tō rehita.
3. Rapu CAA Record Conflict
Ko te CAA (Certification Authority Authorization) record he ōmitanga DNS record e whakamana ana he aha pea ngā kaiwhakatīnei tohu tiaki i whakaaetia ki te tīnei SSL mō tō rohe. Mēnā he CAA record tō rohe i waihotia mai i tēahi kaiwhakatakoto o mua, ka taea e ia te aukati i te kaiwhakatīnei tohu tiaki a Kapsule.
Hei tirotirohia:
- Haere ki KPanel > Domains > tō rohe > DNS Records
- Rapu i ngā rekoata o te momo CAA
- Mēnā ka kite koe i tēahi CAA record e kore nei e whai te Kapsule, whakakahuitia, whakatūpuranga rānei, whakawhiti ki te tautoko
Mēnā e wareware ana koe mēnā he CAA record te kaupapa, whakatūpuranga ki te tautoko i support@kapsulehost.com me tō ingoa rohe. Ka taea e te kapa te matua i tenei mea i roto i ngā meneti toiti.
4. Whakamanatia e Tohu te Rohe ki te Pae Tika
Mēnā he maha ngā pae i roto i KPanel, whakamanatia he rohe i whakarite ki te pae tika. Haere ki Websites → tō pae → Settings me te whakamanatia e ōrite ana te rohe i tohua ko tāu e rapu ana kia tiakina.
5. Rapu i ngā Conflict o te www ki te Rohe Pakiaka
Ka tīneia te SSL mō te yourdomain.com me te www.yourdomain.com. Mēnā e tohu ana te CNAME record mō te www ki ētahi wāhi kē atu i a Kapsule, ka raru te tini-tohu tiaki www. Tirotirohia te A me te CNAME records i roto i ō whakatakoto DNS.
Whakahou Tohu Tiaki: Tino i a ia Ake
Ka whakahou a Kapsule i ngā tohu tiaki SSL i a ia ake, tata ki te 30 rā i mua i te whakamutunga. Kāore koe e pono ki te kaupapa i ètahi mea.
Ka kitea pea e koe tēahi whakakāinga "Expiring Soon" i roto i KPanel i te wā e tata ana te whakahou. He mōhiohio anake tenei. Ka mahi te ahuatanga whakahou i te waenganui, kāore tō pae e whai i te roa-wāiti i te wā o te whakahou.
Mēnā ka mutu te DNS o tō rohe e tohu ana ki Kapsule (hāuiui, mēnā ka huri anō ngā nameserver ki te taunoa o te rehita), ka rahua te whakahou i a ia ake i te mea kāore e taea e te kaiwhakatīnei tohu tiaki te whakamanatia te mana-whakarau o te rohe. Mēnā e whakaaro ana koe ki te awhina rohe kē atu mai i a Kapsule, kia manatohia ka mutu te SSL me te whakamanatia tēahi pokapū ki te ture akuanui mēnā kāore e whakarite tēahi tohu tiaki hou.
Me Pēhea Mēnā Ka Mutu te SSL
Mēnā ka mutu tēahi tohu tiaki kāore i whakahou:
- Ka kitea e ngā kaitirotiro te pokapū tohu karanga e kī ana e kore e piripiri te hononga. Kāore ā te tonutanga o ngā kaitirotiro e whakaputa i tēnei pokapū tohu karanga.
- Ka hinga pea te tūturu i te rapu whatunga i te mea ka āhuatanga kore pokapū ngā kōkiri.
- Ka āru pea te tukurua puka e ngā pūkoro o nāianei.
I raro i ngā āhuatanga noa, kāore e taea tenei i a Kapsule i te mea he mea noa te whakahou. Ko te āhuatanga anake e taea ai te mutunga he nā te DNS o te rohe kua huri ki ētahi atu wāhi, e aukati ana i te whakahou i a ia ake.
Mēnā ka kitea e koe tēahi tohu karanga mutunga SSL i tō pae kei te ora, whakatūpuranga ki te tautoko i support@kapsulehost.com i te tata. Tāpiri i tō ingoa rohe. Ka matua i te kapa mēnā he rahua whakahou, he āhuatanga whirihora DNS rānei, me te whakaorangia HTTPS i te tata.
Ngā Pātai e Whakarotohia Honui
Ka taea e au te tukurua ā-tē-ringa i taku ake SSL tohu tiaki? Mō te tonutanga o ngā pae, he mea tika te tohu tiaki i a ia ake, kāore pea he pono mō tēahi tohu tiaki āhuahanga. Mēnā he wharewharemate pea mō tēahi tohu tiaki utu nui extended validation (EV) rānei wildcard tohu tiaki, whakatūpuranga ki te tautoko hei kōrero i ō āhuatanga.
He mahi te SSL i runga i ngā subdomain?
Āe. Ka waihanga koe i tētahi pae i runga i tēahi subdomain (hāuiui, shop.yourdomain.com) i roto i KPanel, ka tīneia tēahi tohu tiaki SSL mō tērā subdomain i a ia ake.
Ka tukurua tō pae i runga i HTTP engari ka tohu HTTPS he hapa.
He āhuatanga mōhiohio whakaropu noa tenei, kei te utaina te pae i runga i HTTPS engari ētahi pūhiko (āhua, scripts) e tohua tonu ana mā te http:// URLs. I roto i WordPress, haere ki Settings > General me te whakamanatia ko te WordPress Address me te Site Address e whakamahi ana i https://. Ko tēahi papaplugin penei i "Better Search Replace" ka āwhina ki te whakabōtuitui i ngā http:// whiringa e toe ana i te pūtaiao.