Ubuntu20.04にMariaDBおよびPHPとともにOpenLiteSpeedサーバーをインストールおよび構成する方法

OpenLiteSpeedでSSLを設定するには、2つの証明書を設定する必要があります。サーバー全体とLet'sEncryptサイト固有のサーバーの自己署名証明書。

最初に自己署名証明書を作成しましょう。

$ openssl req -x509 -days 365 -newkey rsa:4096 -keyout key.pem -out cert.pem -nodes
Generating a RSA private key
..++++
......................++++
writing new private key to 'key.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (e.g. server FQDN or YOUR name) []:
Email Address []:

すべてのフィールドでEnterキーを押して、空のままにしておくことができます。

証明書は/home/userに保存されるようになりました ディレクトリ。この情報は後で必要になります。

Let's Encryptを使用するには、Certbotツールをインストールする必要があります。

$ sudo apt install certbot

SSL証明書を取得します。

$ sudo certbot certonly --webroot -w /usr/local/lsws/example.com/html/ -d example.com

インタラクティブプロンプトに従います。

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator webroot, Installer None
Enter email address (used for urgent renewal and security notices) (Enter 'c' to
cancel): [email protected]
Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org

-------------------------------------------------------------------------------
Please read the Terms of Service at
https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must agree
in order to register with the ACME server at
https://acme-v02.api.letsencrypt.org/directory
-------------------------------------------------------------------------------
(A)gree/(C)ancel: A

-------------------------------------------------------------------------------
Would you be willing to share your email address with the Electronic Frontier
Foundation, a founding partner of the Let's Encrypt project and the non-profit
organization that develops Certbot? We'd like to send you email about our work
encrypting the web, EFF news, campaigns, and ways to support digital freedom.
-------------------------------------------------------------------------------
(Y)es/(N)o: N
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for example.com
Using the webroot path /usr/local/lsws/example.com/html for all unmatched domains.
Waiting for verification...
Cleaning up challenges

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/example/fullchain.pem. Your key file has 
   been saved at:
   /etc/letsencrypt/live/linode.nspeaks.com/privkey.pem Your cert will
   expire on 2020-09-04. To obtain a new or tweaked version of this
   certificate in the future, simply run certbot again. To
   non-interactively renew *all* of your certificates, run "certbot
   renew"
 - Your account credentials have been saved in your Certbot
   configuration directory at /etc/letsencrypt. You should make a
   secure backup of this folder now. This configuration directory will
   also contain certificates and private keys obtained by Certbot so
   making regular backups of this folder is ideal.
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le

次に、管理コンソールを開き、リスナー>>新しいリスナーの追加に移動します。 次の値を追加します。

Listener Name: SSL
IP Address: ANY
Port: 443
Secure: Yes

完了したら、[保存]をクリックします。次に、仮想ホストマッピングに移動します [SSL]をクリックしてSSLリスナーの下のセクションで、[追加]ボタンをクリックし、次の値を入力します。

Virtual Host: example.com
Domains: example.com

完了したら[保存]をクリックします。

次に、リスナー>>SSLリスナー>>SSLタブ>>SSL秘密鍵と証明書に移動します （[編集]ボタン）、前に作成した自己署名証明書に次の値を入力します。

Private Key File: /home/user/key.pem
Certificate File: /home/user/cert.pem
Chained Certificate: Yes

次に、仮想ホスト>> example.com>>SSLタブ>>SSL秘密鍵と証明書に移動します （[編集]ボタン）そして、次の値にLet'sEncryptCertificateを入力します。

Private Key File: /etc/letsencrypt/live/example.com/privkey.pem
Certificate File: /etc/letsencrypt/live/example.com/fullchain.pem
Chained Certificate: Yes

終了したら[保存]をクリックします。

Gracefulrestartボタンをクリックしてサーバーを再起動します。

$ sudo nano /usr/local/lsws/example.com/html/index.php

<html>
<head>
    <h2>OpenLiteSpeed Server Install Test</h2>
</head>
    <body>
    <?php echo '<p>Hello,</p>';

    // Define PHP variables for the MySQL connection.
    $servername = "localhost";
    $username = "testuser";
    $password = "password";

    // Create a MySQL connection.
    $conn = mysqli_connect($servername, $username, $password);

    // Report if the connection fails or is successful.
    if (!$conn) {
        exit('<p>Your connection has failed.<p>' .  mysqli_connect_error());
    }
    echo '<p>You have connected successfully.</p>';
    ?>
</body>
</html>