{"id":1063,"date":"2023-02-06T18:36:01","date_gmt":"2023-02-06T17:36:01","guid":{"rendered":"https:\/\/monsiteinternet.freeboxos.fr\/?page_id=1063"},"modified":"2023-04-27T20:39:55","modified_gmt":"2023-04-27T18:39:55","slug":"acces-ssl","status":"publish","type":"page","link":"https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/index.php\/acces-ssl\/","title":{"rendered":"Acc\u00e8s SSL"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"1063\" class=\"elementor elementor-1063\">\n\t\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3145ca1 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3145ca1\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-3a883fa\" data-id=\"3a883fa\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e5bea40 elementor-widget elementor-widget-text-editor\" data-id=\"e5bea40\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.18.0 - 20-12-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<h3><span style=\"text-decoration: underline;\"><strong>Etape 11\u00a0\u00a0 Acc\u00e8s en SSL des sites<\/strong><\/span><\/h3><p>Nous allons maintenant cr\u00e9er les acc\u00e8s en SSL de nos sites.<\/p><p>En 1<sup>er<\/sup>, nous activons le module SSL\u00a0:<\/p><pre><em><strong>sudo a2enmod ssl<\/strong><\/em><\/pre><p>Puis nous rechargeons Apache\u00a0:<\/p><pre><em><strong>sudo systemctl reload apache2<\/strong><\/em><\/pre><p>On v\u00e9rifie l\u2019activation\u00a0:<\/p><pre><strong><em>apache2ctl -M | grep ssl<\/em><\/strong><\/pre><p>Maintenant nous installons <strong>CERBOT<\/strong> pour la gestion des certificats avec <strong>Let\u2019s Encrypt<\/strong>.<\/p><p>Mise \u00e0 jour des Packages d\u2019installation, puis installation de <strong>CERBOT<\/strong>\u00a0:<\/p><pre><strong><em>sudo apt update<\/em><\/strong><\/pre><pre><strong><em>sudo apt install certbot<\/em><\/strong><\/pre><p>Ensuite,\u00a0 nous cr\u00e9ons les certificats avec <strong>Let\u2019s Encrypt<\/strong>.<\/p><p>Pour cela, nous lan\u00e7ons la cr\u00e9ation des certificats :<\/p><pre><strong><em>sudo certbot certonly <\/em><\/strong><strong><em>--webroot<\/em><\/strong> <strong><em>-w<\/em><\/strong> <strong><em>\/<\/em><\/strong><strong><em>var<\/em><\/strong><strong><em>\/<\/em><\/strong><strong><em>www<\/em><\/strong><strong><em>\/<\/em><\/strong><strong><em>mon-site-personnel1\/public_html <\/em><\/strong><strong><em>-d<\/em><\/strong> <strong><em>votrenomdedomaine1<\/em><\/strong><strong><em>.hd.free.fr<\/em><\/strong> <strong><em>-d<\/em><\/strong> <strong><em>votrenomdedomaine1<\/em><\/strong><strong><em>.hd.free.fr<\/em><\/strong><\/pre><p>Notez bien l&rsquo;endroit ou les fichiers des certificats sont sauv\u00e9s, \u00e7a peut servir.<\/p><p>Ensuite, il faut modifier L\u2019h\u00f4te virtuel pour utiliser le port <strong>443<\/strong> pour l\u2019utilisation de <strong>HTTPS<\/strong>, le port <strong>80<\/strong> \u00e9tant pour <strong>http.<\/strong><\/p><p>Pour cela, nous allons utiliser <strong>KRUSADER<\/strong> mais en mode <strong>SUPERUTILISATEUR<\/strong> pour modifier les fichiers ad\u00e9quates.<\/p><p>Sans cela, les fichiers n\u2019auraient pas les droits pour \u00eatre modifi\u00e9 dans le mode normal de <strong>KRUSADER.<\/strong><\/p><p><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone size-medium wp-image-1066\" src=\"https:\/\/monsiteinternet.freeboxos.fr\/wp-content\/uploads\/2023\/02\/Krusader1-300x255.png\" alt=\"\" width=\"300\" height=\"255\" srcset=\"https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/wp-content\/uploads\/2023\/02\/Krusader1-300x255.png 300w, https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/wp-content\/uploads\/2023\/02\/Krusader1-1024x869.png 1024w, https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/wp-content\/uploads\/2023\/02\/Krusader1-768x652.png 768w, https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/wp-content\/uploads\/2023\/02\/Krusader1-318x270.png 318w, https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/wp-content\/uploads\/2023\/02\/Krusader1.png 1043w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/p><p>Puis choisir <strong>KRUSADER<\/strong>. A sa premi\u00e8re ouverture, il vous sera demand\u00e9 de le configurer.<\/p><p>Faites autant de fois qu\u2019il le faut <strong>OK <\/strong>ou<strong> Suivant<\/strong> pour valider la configuration.<\/p><p>Puis \u00e0 l\u2019ouverture suivre les infos de l\u2019\u00e9cran suivant.<\/p><p><img decoding=\"async\" class=\"alignnone size-medium wp-image-1067\" src=\"https:\/\/monsiteinternet.freeboxos.fr\/wp-content\/uploads\/2023\/02\/Krusader2-300x192.png\" alt=\"\" width=\"300\" height=\"192\" srcset=\"https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/wp-content\/uploads\/2023\/02\/Krusader2-300x192.png 300w, https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/wp-content\/uploads\/2023\/02\/Krusader2-422x270.png 422w, https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/wp-content\/uploads\/2023\/02\/Krusader2.png 577w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/p><p>Dans <strong>KRUSADER<\/strong>, aller dans le dossier comme ci-dessous, puis cliquer sur le fichier <strong>mon-site-personnel1.conf<\/strong> puis touche <strong>F4<\/strong> pour \u00e9diter le fichier.<\/p><p><img decoding=\"async\" class=\"alignnone size-medium wp-image-1068\" src=\"https:\/\/monsiteinternet.freeboxos.fr\/wp-content\/uploads\/2023\/02\/Krusader3-300x214.png\" alt=\"\" width=\"300\" height=\"214\" srcset=\"https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/wp-content\/uploads\/2023\/02\/Krusader3-300x214.png 300w, https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/wp-content\/uploads\/2023\/02\/Krusader3-379x270.png 379w, https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/wp-content\/uploads\/2023\/02\/Krusader3.png 698w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/p><p>Puis ajoutez ces lignes \u00e0 la fin du fichier actuel\u00a0:<\/p><pre><em>&lt;VirtualHost *:443&gt;\n\u00a0\u00a0\u00a0 ServerName example.com\n\u00a0\u00a0\u00a0 ServerAlias <\/em><strong><em>votrenomdedomaine1<\/em><\/strong><strong><em>.hd.free.fr<\/em><\/strong><em>\n\u00a0\u00a0\u00a0 ServerAdmin <\/em><strong><em>votrenomdedomaine1<\/em><\/strong><strong><em>.hd.free.fr<\/em><\/strong><em>\n\u00a0\u00a0\u00a0 DocumentRoot \/var\/www\/mon-site-personnel1\/public_html\n\u00a0\u00a0\u00a0\u00a0 &lt;Directory \/var\/www\/mon-site-personnel1\/public_html&gt;\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 AllowOverride none\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Require all granted\n\u00a0\u00a0\u00a0\u00a0 &lt;\/Directory&gt;<\/em><\/pre><p><em># directives obligatoires pour TLS<br \/>SSLEngine on<br \/>SSLCertificateFile\u00a0\u00a0\u00a0 \/etc\/letsencrypt\/live\/example.com\/fullchain.pem<br \/>SSLCertificateKeyFile\u00a0\u00a0 \/etc\/letsencrypt\/live\/example.com\/privkey.pem<br \/>Header always set Strict-Transport-Security \u00ab\u00a0max-age=15768000\u00a0\u00bb<br \/>ErrorLog \/var\/log\/apache2\/error.example.com.log<br \/>CustomLog \/var\/log\/apache2\/access.example.com.log combined<br \/>&lt;\/VirtualHost&gt;<\/em><\/p><p>Sauvegardez le fichier puis refermez le.<\/p><p>D\u00e9marrez HEADER\u00a0:<\/p><pre><strong><em>A2enmod header<\/em><\/strong><\/pre><p>Rechargez APACHE pour prendre en compte les modifications\u00a0:<\/p><pre><strong><em>Systemctl restart apache<\/em><\/strong><\/pre><p>Testez l\u2019acc\u00e8s de votre site en <strong>HTTPS<\/strong>\u00a0:<br \/><strong><em>https:\/\/<\/em><\/strong><strong><em>votrenomdedomaine1<\/em><\/strong><strong><em>.hd.free.fr<\/em><\/strong><strong><em><br \/><\/em><\/strong>Si c\u2019est ok, proc\u00e9dez de m\u00eame avec le 2eme site en modifiant le fichier <strong>mon-site-personnel2.conf<\/strong>.<\/p><p>Testez aussi l\u2019acc\u00e8s de votre site en <strong>HTTPS<\/strong>\u00a0:<br \/><strong><em>https:\/\/<\/em><\/strong><strong><em>votrenomdedomaine2.hd.free.fr<\/em><\/strong><\/p><p>Nous modifions maintenant les 2 fichiers pour que la redirection se fasse automatiquement vers HTTPS\u00a0:<\/p><p>Rouvrez le fichier <strong>mon-site-personnel1.conf\u00a0 <\/strong>et ins\u00e9rez les 2 lignes suivantes suivantes :<\/p><pre><em>&lt;VirtualHost *:80&gt;\n<\/em><em>\u00a0\u00a0\u00a0 ServerAdmin <\/em><em>admin2@example.com\n<\/em><em>\u00a0\u00a0\u00a0 ServerName <\/em><em>votrenomdedomaine<strong>2<\/strong><\/em><em>.freeboxos.fr\n<\/em><em>\u00a0\u00a0\u00a0 ServerAlias <\/em><em>votrenomdedomaine<strong>2<\/strong><\/em><em>.freeboxos.fr\n<\/em><em>\u00a0\u00a0\u00a0 DocumentRoot \/var\/www\/<\/em><em>mon-site-personnel<strong>1<\/strong><\/em><em>\/public_html\n<\/em><em>\u00a0\u00a0\u00a0 ErrorLog ${APACHE_LOG_DIR}\/error.log\n<\/em><em>\u00a0\u00a0\u00a0 CustomLog ${APACHE_LOG_DIR}\/access.log combined<\/em><em>\u00a0<\/em><\/pre><p><em> \u00a0\u00a0 LogLevel warn<\/em><em>\u00a0<\/em><\/p><p><strong><em>\u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0# Redirection 301\u00a0 vers le site en HTTPS<br \/><\/em><\/strong><strong><em>\u00a0 Redirect permanent \/ https:\/\/votrenomdedomaine1<\/em><\/strong><strong><em>.hd.free.fr<\/em><\/strong><strong><em>\/<\/em><\/strong><em>\u00a0<\/em><\/p><p><em> \u00a0\u00a0 &lt;Directory \/var\/www\/<\/em><strong><em>mon-site-personnel1<\/em><\/strong><em>\/public_html&gt;<br \/><\/em><em>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 AllowOverride All<br \/><\/em><em>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Require all granted<br \/><\/em><em> \u00a0\u00a0 &lt;\/Directory&gt;<\/em><\/p><p><em>&lt;\/VirtualHost&gt;<\/em><\/p><p>Puis sauvegardez le fichier. Faites de m\u00eame avec le 2eme et sauvegarder le aussi.<\/p><p>On red\u00e9marre APACHE\u00a0:<\/p><pre><strong><em>Systemctl restart apache<\/em><\/strong><\/pre><p>Puis on teste :<\/p><p><strong><em>http:\/\/<\/em><\/strong><strong><em>votrenomdedomaine1<\/em><\/strong><strong><em>.hd.free.fr<\/em><\/strong><\/p><p><strong>http:\/\/votrenomdedomaine2.hd.free.fr<\/strong><\/p><p>Qui devrait renvoyer les 2 sites vers le HTTPS.<\/p><p>Il nous reste maintenant l&rsquo;installation de <strong>WORDPRESS<\/strong>.<\/p><p>Bien sur, si vous le voulez, vous pouvez vous installer un autre Package au lieu de WordPress.<\/p><p><br \/><strong>Mise \u00e0 jour des certificats SSL Let\u2019s Encrypt avec CERTBOT :<\/strong><br \/>D&rsquo;apr\u00e8s le site <strong>https:\/\/doc.ubuntu-fr.org\/apache2<\/strong><\/p><p>Tapez l&rsquo;instruction puis validez:<\/p><pre><em><strong>certbot --apache<\/strong><\/em><\/pre><p>les informations ci-dessous devraient apparaitre en montrant les diff\u00e9rents sites internet de votre serveur UBUNTU:<\/p><p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-1459\" src=\"https:\/\/monsiteinternet.freeboxos.fr\/wp-content\/uploads\/2023\/04\/MAJ-Certbot1-300x71.jpg\" alt=\"\" width=\"562\" height=\"133\" srcset=\"https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/wp-content\/uploads\/2023\/04\/MAJ-Certbot1-300x71.jpg 300w, https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/wp-content\/uploads\/2023\/04\/MAJ-Certbot1-768x183.jpg 768w, https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/wp-content\/uploads\/2023\/04\/MAJ-Certbot1-604x144.jpg 604w, https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/wp-content\/uploads\/2023\/04\/MAJ-Certbot1.jpg 845w\" sizes=\"(max-width: 562px) 100vw, 562px\" \/><\/p><p>vous pouvez alors demander la cr\u00e9ation SSL pour 1 ou plusieurs sites,<br \/>Tapez par exemple\u00a0 :<br \/>1 (pour le 1er site)<br \/>ou par exemple :<br \/>1 2 3 (s\u00e9par\u00e9s par un espace pour les 3 sites)<\/p><p>puis suivez les information indiqu\u00e9es.<\/p><p><strong>Renouvellement automatique des certificats SSL Let\u2019s Encrypt avec CERTBOT :<\/strong><\/p><p>Tapez l&rsquo;instruction puis validez:<\/p><pre><em><strong>certbot renew<\/strong><\/em><\/pre><p>Le renouvellement se fera alors automatiquement, et une tache <strong>CRON<\/strong> sera cr\u00e9\u00e9e automatiquement \u00e0 cet effet, dans <strong>\/etc\/cron.d\/certbot<\/strong> .<br \/>Il est \u00e9galement cr\u00e9\u00e9 un \u00ab<strong> timer<\/strong> \u00bb <strong>systemd<\/strong> qui fait la m\u00eame chose (<strong>\/lib\/systemd\/system\/certbot.timer<\/strong> et <strong>certbot.service<\/strong>).<br \/>Le script sera lanc\u00e9 automatiquement toutes les 12 heures, et les certificats seront renouvel\u00e9s si n\u00e9cessaire.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-914c24e elementor-widget elementor-widget-button\" data-id=\"914c24e\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-md\" href=\"https:\/\/monsiteinternet.freeboxos.fr\/index.php\/wordpress\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">Aller \u00e0 la suite<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Etape 11\u00a0\u00a0 Acc\u00e8s en SSL des sites Nous allons maintenant cr\u00e9er les acc\u00e8s en SSL de nos sites. En 1er, nous activons le module SSL\u00a0: sudo a2enmod ssl Puis nous rechargeons Apache\u00a0: sudo systemctl reload apache2 On v\u00e9rifie l\u2019activation\u00a0: apache2ctl -M | grep ssl Maintenant nous installons CERBOT pour la gestion des certificats avec Let\u2019s Encrypt. Mise \u00e0 jour des Packages d\u2019installation, puis installation de CERBOT\u00a0: sudo apt update sudo apt install certbot Ensuite,\u00a0 nous cr\u00e9ons les certificats avec Let\u2019s&#8230;<\/p>\n<p class=\"read-more\"><a class=\"btn btn-default\" href=\"https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/index.php\/acces-ssl\/\">Lire la suite<span class=\"screen-reader-text\"> Lire la suite<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"wf_page_folders":[33],"class_list":["post-1063","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/index.php\/wp-json\/wp\/v2\/pages\/1063","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/index.php\/wp-json\/wp\/v2\/comments?post=1063"}],"version-history":[{"count":53,"href":"https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/index.php\/wp-json\/wp\/v2\/pages\/1063\/revisions"}],"predecessor-version":[{"id":1474,"href":"https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/index.php\/wp-json\/wp\/v2\/pages\/1063\/revisions\/1474"}],"wp:attachment":[{"href":"https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/index.php\/wp-json\/wp\/v2\/media?parent=1063"}],"wp:term":[{"taxonomy":"wf_page_folders","embeddable":true,"href":"https:\/\/www.internet-et-forum.go.yo.fr\/wp2\/index.php\/wp-json\/wp\/v2\/wf_page_folders?post=1063"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}