Google云端平台：无法在Wordpress实例上使用https（SSL） [英] Google Cloud Platform: Cannot get https (SSL) working on Wordpress Instance

问题描述

我在Google Compute Engine上使用Apache / 2.2.22（Debian）并使用Wordpress安装（点击展开）。

我正在尝试为Wordpress安装设置SSL证书（https）。我创建了一个静态IP，一个私钥，一个CSR，并且已经上传了SSL&中间的crt文件（来自freeSSL.com）到 etc / apache2 / ssl （带有私钥）并给出该文件夹 root：root 权限。

我遵循 https://www.digitalocean.com/community/tutorials/how-to-create-a-ssl-certificate-on- apache-for-debian-7 并更新了default-ssl配置文件（更新路径名为.crt和.key文件，ServerName和ServerAdmin）。

我运行了一个configtest（获得语法OK），启用了default-ssl并重新启动了apache。当我访问 https：// domain 或 https：// ip-address 时，我得到一个此网页是不可用错误（ERR_CONNECTION_CLOSED）。在WordPress上，wordpress安装仍然可以正常加载。

https://www.digicert.com/help/ 给我一个找不到证书的错误，虽然证书在那里。

解决方案

以下是我的工作原理; 首先尝试使用Compute |中的复选框启用HTTPS。计算引擎| VM实例配置设置。如果这个错误信息失败，你可以直接添加防火墙规则......

在Compute |计算引擎|网络页面，选择'默认'网络。然后在防火墙规则下点击添加新规则。使用以下设置;

 名称：allow-https 
 IP范围：0.0.0.0/0 
允许的协议/端口：tcp：443 
目标标记：http-server 
  

所有上面假设你已经耗尽了所有其他的Apache配置选项（ports.conf，虚拟主机等）。

I'm using Apache/2.2.22 (Debian) on Google Compute Engine with a Wordpress Install (click-to-deploy).

I'm trying to setup an SSL certificate (https) for the Wordpress install. I've created a static IP, a private key, a CSR and have uploaded SSL & intermediate crt files (from freeSSL.com) to etc/apache2/ssl (with the private key) and given this folder root:root permission.

I've followed https://www.digitalocean.com/community/tutorials/how-to-create-a-ssl-certificate-on-apache-for-debian-7 and updated default-ssl config file as instructed (updating pathnames to .crt and .key files, ServerName and ServerAdmin).

I ran a configtest (got syntax OK), enabled default-ssl and rebooted apache. When I visit https://domain or https://ip-address, I get a "This Webpage is Unavailable" error (ERR_CONNECTION_CLOSED). The wordpress install still loads ok on http.

The SSL checker at https://www.digicert.com/help/ gives me a "no certificates found" error, although the certificates are there.

解决方案

Here's what worked for me;

First attempt to enable HTTPS with the checkbox in the Compute | Compute Engine | VM Instances config settings. Should this fail with an error message you can add a firewall rule directly...

On the Compute | Compute Engine | Networks page, select the 'default' network. Then under 'Firewall rules' click 'Add a new rule'. Use the following settings;

Name: allow-https
IP Range: 0.0.0.0/0
Allowed Protocol/Ports: tcp:443
Target tags: http-server

All of the above is assuming that you have exhausted all the other apache configuration options (ports.conf, Virtual Hosts etc).

这篇关于Google云端平台：无法在Wordpress实例上使用https（SSL）的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！