{"id":37394,"date":"2015-09-04T12:11:46","date_gmt":"2015-09-04T04:11:46","guid":{"rendered":"http:\/\/www.url.com.tw\/blog\/?p=37394"},"modified":"2015-10-28T09:45:49","modified_gmt":"2015-10-28T01:45:49","slug":"%e3%80%90%e6%95%b8%e4%bd%8d3c%e3%80%91godaddy-stardard-ssl-certificate-%e7%b6%b2%e7%ab%99%e5%8a%a0%e5%af%86-ssl%e6%86%91%e8%ad%89%e7%94%b3%e8%ab%8b%e8%a8%ad%e5%ae%9a%e8%88%87%e5%8f%96%e5%be%97","status":"publish","type":"post","link":"https:\/\/www.url.com.tw\/blog\/?p=37394","title":{"rendered":"\u3010\u6578\u4f4d3C\u3011GoDaddy Stardard SSL Certificate \u7db2\u7ad9\u52a0\u5bc6, SSL\u6191\u8b49\u7533\u8acb,\u8a2d\u5b9a\u8207\u53d6\u5f97"},"content":{"rendered":"

\u4f5c\u8005\uff1a\u795e\u79d8\u7684\u6c34\u539f\u8aa0<\/a> <\/p>\n

因為新系統要上線的緣故<\/p>\n

所以這次要來申請SSL憑證<\/span><\/strong>做加密<\/p>\n

 <\/p>\n

考慮到管理上的方便性, 還是選擇在去你爸的(GoDaddy)服務商<\/a><\/strong><\/span>購買<\/p>\n

基本上就是在官方網站上選擇Web Security, 再選擇SSL  Certificate<\/strong><\/span><\/p>\n

\"snap0745.jpg\"<\/a><\/p>\n

\"snap0746.jpg\"<\/a><\/p>\n

 <\/p>\n

以前比較沒接觸這方面<\/p>\n

沒想到SSL的種類還有好幾種…<\/p>\n

依據需求, 可以選擇不同種類的<\/p>\n

像是如果只需要用在單一網域, 可以選擇 Portect One Website的Standard SSL<\/span><\/span><\/strong><\/span><\/p>\n

如果是<\/span>多個網域…則可以考慮Protect Multiple Website的UCC\/SAN的SSL<\/strong><\/span><\/p>\n

倘若是需要保護單一域名下的所有子網域…就可以選擇Protect All subdomains的Wildcard SSL<\/strong><\/span><\/span><\/p>\n

其實國內的廠商也是這樣分…但是價格貴很多@@”<\/p>\n

以中華電信推出的SSL憑證來說…單網域一年就要NT$12,000…<\/p>\n

不過每間廠商推出的憑證服務內容不盡相同, 還是要看網站的需求, 不能單純看價格<\/strong><\/span><\/p>\n

太過便宜甚至是免費的服務則可能會產生其他安全性的問題<\/p>\n

\"snap0748.jpg\"<\/a><\/p>\n

 <\/p>\n

今天因為只有需要針對單一域名, 選擇最基本的就可以囉<\/p>\n

\"snap0727.jpg\"<\/a><\/p>\n

\"snap0728.jpg\"<\/a><\/p>\n

 <\/p>\n

結帳過後<\/p>\n

可以回到帳戶的服務總覽<\/p>\n

最下面會出現一個SSL Certificates的部分<\/strong><\/span><\/p>\n

在設定前會顯示”New Certificate”<\/strong><\/span><\/p>\n

點選右側的Manage就可以開始設定<\/strong><\/span><\/p>\n

\"snap0725.jpg\"<\/a><\/p>\n

 <\/p>\n

設定需要先提供網站的CSR資料(certificate signing request, CSR)<\/strong><\/span><\/p>\n

\"snap0726.jpg\"<\/a><\/p>\n

 <\/p>\n

CSR資料需要在網站主機上產生<\/p>\n

針對不同的系統方式也就不盡相同<\/p>\n

好在GoDaddy上也提供了許多不同的產生步驟教學<\/p>\n

\"snap0747.jpg\"<\/a><\/p>\n

 <\/p>\n

以nginx為例…<\/p>\n

\"snap0731.jpg\"<\/a><\/p>\n

 <\/p>\n

最後會產出認證檔案<\/p>\n

類似像這樣…<\/p>\n

再把這整塊全部複製貼到剛剛設定那裡頭<\/p>\n

\"snap0741.jpg\"<\/a><\/p>\n

 <\/p>\n

填好後送出就會跳到這樣的畫面…<\/p>\n

大概等個十分鐘左右, 應該就會完成<\/p>\n

\"snap0732.jpg\"<\/a><\/p>\n

 <\/p>\n

完成後的畫面大概是這個樣子<\/p>\n

左上的Download就是讓你下載安裝到網站主機的憑證<\/strong><\/span><\/p>\n

下方則是效期等等的相關資訊<\/strong><\/span><\/p>\n

右側的則是可以放在網頁上的認證貼紙<\/strong><\/span><\/p>\n

\"snap0734.jpg\"<\/a><\/p>\n

\"snap0737.jpg\"<\/a><\/p>\n

 <\/p>\n

同時, 你應該也會收到E-mail通知~~<\/p>\n

\"snap0735.jpg\"<\/a><\/p>\n

 <\/p>\n

點選下載憑證<\/p>\n

會出現主機類型供選擇<\/p>\n

選取自己需要的就可以了…<\/p>\n

像這次使用的nginx主機沒有出現在這裡<\/p>\n

就只好選擇Other囉…<\/p>\n

\"snap0736.jpg\"<\/a><\/p>\n

 <\/p>\n

回過頭來看一下帳戶的服務清單<\/p>\n

剛剛的New Certificate已經變成Standard SSL<\/p>\n

如果要管理一樣是到右邊的Manage<\/p>\n

\"snap0738.jpg\"<\/a><\/p>\n

 <\/p>\n

點選Option則會顯示目前你的憑證狀態與類型<\/p>\n

\"snap0742.jpg\"<\/a><\/p>\n

 <\/p>\n

等主機端都安裝設定好<\/p>\n

之後瀏覽該網站應該就會在網址附近顯示像是這樣的畫面…或是多了一顆鎖頭@@<\/p>\n

不同的瀏覽器可以看到的內容可能會不太一樣, 總之是被加密了 \"😛\"<\/p>\n

\"snap0744.jpg\"<\/a><\/p>\n

\"snap0739.jpg\"<\/a><\/p>\n

\"snap0740.jpg\"<\/a><\/p>\n

 <\/p>\n

嗯, 大概就是這樣<\/p>\n

其實不難<\/p>\n

只是因為不熟<\/p>\n

加上網路上的資料與畫面多數是舊的…<\/p>\n

所以還是紀錄一下囉!<\/p>\n

\t標籤： godaddy ssl<\/a>, ssl<\/a>, ssl Certificate<\/a>, wildcard<\/a>, 安全性<\/a>, 憑證申請<\/a>, 網域ssl<\/a>, 網頁加密<\/a><\/p>\n

\n

\n

\n

\n

\u6587\u7ae0\u4f86\u6e90\uff1a\u54ea\u88e1\u597d\u5403\u54ea\u88e1\u53bb<\/font><\/a> \uff08\u5df2\u6388\u6b0a\uff09
\n\u4f5c\u8005\u4ecb\u7d39\uff1a \u795e\u79d8\u7684\u6c34\u539f\u8aa0<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

\u4f5c\u8005\uff1a\u795e\u79d8\u7684\u6c34\u539f\u8aa0<\/a> <\/p>\n

因為新系統要上線的緣故<\/p>\n

所以這次要來 \u2026\u7e7c\u7e8c\u95b1\u8b80<\/a><\/span><\/p>\n

<\/div>\n","protected":false},"author":49,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[289,9270],"tags":[],"_links":{"self":[{"href":"https:\/\/www.url.com.tw\/blog\/index.php?rest_route=\/wp\/v2\/posts\/37394"}],"collection":[{"href":"https:\/\/www.url.com.tw\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.url.com.tw\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.url.com.tw\/blog\/index.php?rest_route=\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/www.url.com.tw\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=37394"}],"version-history":[{"count":0,"href":"https:\/\/www.url.com.tw\/blog\/index.php?rest_route=\/wp\/v2\/posts\/37394\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.url.com.tw\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=37394"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.url.com.tw\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=37394"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.url.com.tw\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=37394"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}