Fikelela kwisiphelo sendlela yakho kwisikhangeli sakho sewebhu

Masicinge ukuba ngesizathu esithile asinakungena kwiserver yethu, kuba mhlawumbi, sihamba ezitalatweni kwaye sineselfowuni ngaphezulu kuphela, kwaye kuba singezizo iigeeks okanye nantoni na, asifaki nasiphi na isicelo olu hlobo.

Senza ntoni ke? Ewe, akukho nto, asinakwenza nto de sifike ekhaya okanye sisebenze, singene kwiserver yethu kwaye siyifake Unokonwaba. Kodwa yintoni leyo, uyatya?

Unokonwaba

Unokonwaba izixhobo Umncedisi iwebhu enakho ukuthumela ngaphandle izixhobo zomgca umyalelo a Isiphelo sendlela Iwebhu-esekwe. Le enomzami wokulungisa iyafumaneka nakweyiphi na ibrawuza exhasa JavaScript kunye neCSS y ayifuni Akukho hlobo Faka iplagi eyongezelelweyo ekusebenzeni.

Nangona iprojekthi yoqobo yapheliswa, zikhona ifolokhwe eGithub esivumela ukuba siyifake ukuba asinayo kwindawo yokugcina izinto. Kwimeko ye-Ubuntu 14.04 kunjalo, ke kufuneka sivule i-terminal kwaye sibeke:

$ sudo apt install shellinabox openssl ca-certificates

Kwimeko yeephakeji ezimbini zokugqibela, kunokwenzeka ukuba asinazo esele zifakiwe. Nje ukuba oku kwenziwe, ngoku singafikelela kwisiphelo sendlela yethu kwiwebhu ngokubeka isikhangeli:

http://la_ip_o_nombre_del_servidor:4200

Sebenzisa iShellinabox ngezibuko le-80

Njengoko ubona, ngokwendalo iShellinabox isebenzisa izibuko 4200 kwaye asinakho ukufikelela kuyo ukuba ivaliwe ngumboneleli ngenkonzo wethu. Sinokusebenzisa okwahlukileyo okungakhuselekanga kodwa okusebenzayo, okuza kusetyenziswa Unokonwaba Izibuko 80, nangona kamva ndiza kubonisa ukuba ndiyisebenzisa kanjani 443 ukuba sinayo.

Into esiza kuyenza kukufikelela eShellinabox ngokubeka isikhangeli sethu:

http://la_ip_o_nombre_del_servidor/terminal

Ukwenza oku, into yokuqala esiyenzayo ukufaka i-NGinx:

$ sudo apt install nginx

Ngoku senza ifayile / njl / nginx / indawo enikwe amandla / shellinabox kwaye sayifaka ngaphakathi:

 umncedisi {proxy_set_header Umamkeli $ http_host; proxy_set_header X-Idluliselwe-i-Host $ http_host; proxy_set_header X-Real-IP $ ekude_addr; proxy_set_header X-Idluliselwe-Kwi- $ proxy_add_x_forwarded_for; indawo / itheminali / {proxy_pass http: // localhost: 4200 /; }}

Sihlela ifayile / njl / engagqibekanga / yegobolondo kwaye sibeka esiphelweni:

SHELLINABOX_ARGS="--localhost-only --disable-ssl"

Siqala kwakhona Nginx y Unokonwaba:

$ sudo /etc/init.d/shellinabox qala kwakhona $ sudo /etc/init.d/nginx qala kwakhona

Kwaye ulungile !!

Sebenzisa iShellinabox ngezibuko le-443

Le nkqubo inzima ngakumbi, kuba kufuneka senze izatifikethi zethu ze-SSL. Ngale nto siza kwenza oku kulandelayo:

Kuqala sifaka i-OpenSSL:

$ sudo apt-fumana ukufaka kuvulwa

Senza isitshixo sangasese:

openssl genrsa -out server.key 2024

Sakha isiseko sesatifikethi, apho siya kubeka uthotho lweedatha:

openssl req -new -key server.key -out server.csr

Idatha esiza kuyizalisa iya kuba:

• Igama lelizwe Ikhowudi yelizwe kwifomathi yoonobumba ababini be-ISO (umzekelo: ES, US, CU, MX ..).
• Igama likaRhulumente okanye lePhondo (igama elipheleleyo): Urhulumente okanye iphondo (ex: Florida).
• Indawo Igama: Idolophu okanye isixeko (ex: Miami).
• Igama lombutho: Igama lombutho, (umz: DesdeLinux).
• Igama Leyunithi Yombutho: Icandelo lombutho (umzekelo: iiBlogs).
• Igama eliqhelekileyo: Igama lesizinda okanye i-FQDN. Kubalulekile ukwazi ukuba kukho umahluko phakathi kweeblogi.desdelinux.net kunye desdelinux.net. Kufuneka ubhalise isatifikethi kwenye, okanye enye.
• Idilesi yemeyile: Idilesi ye-imeyile.
• Iphasiwedi yomceli mngeni: Mhlophe.
• Igama lenkampani: Mhlophe.

Ngoku sivelisa isatifikethi se-SSL, esiya kuthatha idatha esiyifakileyo:

openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

Sikopa izatifikethi kwifolda ye-SSL ngaphakathi / njl.

$ sudo cp server.crt /etc/ssl/certs/ssl.crt $ sudo cp server.key /etc/ssl/certs/ssl.key

Sihlela ifayile kwakhona kwifayile / njl / engagqibekanga / yegobolondo kwaye sitshintsha esikubekileyo, sikugqiba:

SHELLINABOX_ARGS="--no-beep"

Ngoku sihlela ifayile / njl / nginx / indawo enikwe amandla / shellinabox kwaye sayifaka ngaphakathi:

 umncedisi {mamela 80; buyela 301 https: // $ host $ request_uri; } umncedisi {mamela 443; igama lomncedisi myvps.com; ssl_certificate /etc/ssl/certs/ssl.crt; ssl_certificate_key /etc/ssl/certs/ssl.key; ssl ivuliwe; ssl_session_cache eyakhiweyo: i-1000 yabelwe: i-SSL: 10m; iinkqubo ssl_protols T1v1.1 TLSv1.2 TLSv5; ssl_ciphers Phezulu :! aNULL:! eNULL :! UKUTHUMELA KWANGAPHANDLE:! ICAMELLIA :! I-DES :! MD4 :! PSK :! RC4200; ssl_prefer_server_ciphers kwi; ukufikelela_log /var/log/nginx/shellinabox.access.log; indawo / isiphelo sendlela {proxy_set_header Umgcini weedola; proxy_set_header X-Real-IP $ ekude_addr; proxy_set_header X-Idluliselwe-Kwi $ proxy_add_x_forwarded_for proxy_set_header X-Idluliselwe-Proto $ scheme; # Lungisa "Kubonakala ngathi iseti yommeleli wakho ophukileyo yophukile." }

Siziqala kwakhona iinkonzo:

$ sudo /etc/init.d/shellinabox qala kwakhona $ sudo /etc/init.d/nginx qala kwakhona

kwaye siyafikelela

http://la_ip_o_nombre_del_servidor/terminal

ekufuneka isiqondise kwakhona:

https://la_ip_o_nombre_del_servidor/terminal

Kwaye kuphelele apho.