Pagoda panel SSL certificate configuration method (Nginx and Apache environment)

Pagoda Panel is a server management software that can easily manage servers through the network, improve operation and maintenance efficiency, and make it easier for users to use servers. It can support Linux operating systems and Windows operating systems. It is a very popular host control panel in China. It can The maintenance of the server is completed through the interactive interface, and the visual interface integration environment is very convenient. After WoSign has applied for an SSL certificate, it can be conveniently and quickly configured on the Pagoda panel. WoSign CA provides manual services and one-on-one technical support, which can help to apply for SSL certificates more quickly and assist users to complete configuration and deployment.

 

1. Get the SSL certificate file

After successfully applying for a certificate at WoSign CA, you will get a .zip compressed package file. After decompression, you will get three folders: ApacheServer, NginxServer, OtherServer. Different servers or devices require different formats. The pagoda panel only needs to use nginx or apache files.

 

2. How to configure the SSL certificate in the Nginx environment of the pagoda panel

1. Unzip to obtain the certificate file

In the Nginx environment, the pagoda panel needs to use the .crt file of NginxServer. Enter the NginxServer folder to see the certificate crt file, as shown in the figure below.

 

For the private key file, the applicant needs to independently find the two files generated together when generating the CSR (if one-click generation of CSR is selected when creating the CSR, the private key file is the .key file automatically downloaded by the browser at that time), see the figure below.

 

2. Configure SSL certificate

(1) The .key suffix in the red box is the private key of the server, fill in the red box on the left side of the panel certificate (copy and paste it in with a text editor)

(2) The .crt suffix in the blue box is the certificate (or pem suffix), fill in the blue box on the right side of the panel certificate (copy and paste it in with a text editor)

 

 

Then save it.

Three, pagoda panel Apache environment configuration SSL certificate method

1. Unzip to obtain the certificate file

Enter the ApacheServer folder and you can see 2 files, which are the public key and the certificate chain, as shown in the figure below

 

For the private key file, the applicant needs to independently find the two files generated together when generating the CSR (if one-click generation of CSR is selected when creating the CSR, the private key file is the .key file automatically downloaded by the browser at that time), see the figure below.

 

2. Configure SSL certificate

 

(1) Merge the certificate public key file and certificate chain file in the blue box: the following is a screenshot in the text editor, the content of the certificate public key file in the blue box is placed on the top, and the certificate chain file content in the blue box is placed below (note whole).

 

(2) The .key suffix in the red box is the private key of the server, fill in the red box on the left side of the panel certificate (copy and paste it in with a text editor);

(3) Fill in the content of the file after merging the certificate public key and the certificate chain into the blue box on the right side of the panel certificate (copy and paste it in with a text editor). If you do not merge and only fill in the domain name certificate in the blue box, the mobile phone access will report missing certificate chain/insecure, etc.; if the order is incorrect, Apache will not start normally.

 

It should be noted that after ssl is enabled, other sites that do not have ssl enabled will automatically access the site where ssl has been deployed.

If the security group does not allow port 443 (ssl), HTTPS access will be impossible.

Most free CDNs do not support SSL. If you cannot access the CDN normally, you can try to close the access.

To enable mandatory https, please make sure that your site does not do other 301 redirects (pseudo-static/js).

Disclaimer: The content refers to the Pagoda panel forum. For more information, please consult technical support. The latest reply provided by the technical staff shall prevail.

Guess you like

Origin blog.csdn.net/WoTrusCA/article/details/131398920