ZKEACMS configuration uses HTTPS and zkeacmshttps

ZKEACMS configuration uses HTTPS and zkeacmshttps

Before starting, upgrade your ZKEACMS to the latest version. If you use HTTPS in the old version

 

Https encrypted links can protect your privacy during access, so that your sensitive data will not be peeked at or stolen by others. If your server is outside China and you use https, you can enjoy a more stable access experience. Next, let's take a look at how ZKEACMS configures HTTPS.

Let's Encrypt for free

Deploy ZKEACMS

To deploy ZKEACMS in CentOS, see deploy ZKEACMS in CentOS 7.

Bind a domain name to Nginx

In the previous deployment, because there was only one instance, no domain name was bound. To Use HTTPS, you must first bind a domain name.

vi /etc/nginx/nginx.conf

Edit server_name for your domain name, such as demo.zkea.net

 

Install Certbot

yum -y install yum-utilsyum-config-manager --enable rhui-REGION-rhel-server-extras rhui-REGION-rhel-server-optionalsudo yum install python-certbot-nginx

Open port 443

The domain name is verified when the certificate is installed. open port 443 must be submitted. Otherwise, the verification will fail. If it is already open, skip this step.

firewall-cmd --zone=public --add-port=443/tcp --permanentfirewall-cmd --reload

　　

Start Certbot and install certificates

sudo certbot --nginx

Enter an Email address and press Enter.

 

Next, follow the prompts, for example, agree to the agreement. You will be asked to select a Domain Name and enter the number 1

 

Select the HTTPS mode, whether HTTP and HTTPS coexist or only HTTPS. Here, select 2, Use HTTPS for all, and automatically redirect HTTP to HTTPS

 

You can see the screen below. You can try to access the https://demo.zkea.net.

 

Test your domain name

Https://www.ssllabs.com/ssltest/analyze.html? D = demo.zkea.net

Note:

Let's Encrypt's certificate is valid for only 90 days. When it expires, execute the command to update it, or write a scheduled task that will be automatically renewed.

cerbot renew