helpcenter/Web/Controls/Help/Server/Enterprise/SwitchHTTPSEnterprise/SwitchHTTPSEnterprise.ascx
2019-03-21 18:52:46 +03:00

57 lines
4.8 KiB
Plaintext

<%@ Control Language="C#" Inherits="BaseContentUserControls"%>
<%@ Register Namespace="TeamLab.Controls" Assembly="__Code" TagPrefix="cc" %>
<script runat="server">
protected override void Init()
{
PageTitle = PageCaption = "How to switch your office to HTTPS when installing from RPM/DEB packages?";
MetaKeyWords = "";
MetaDescription = "";
}
</script>
<div class="MainHelpCenter">
<h1 class="subHeaderFeaturesCaption Guides_Video_Captions">How to switch your office to HTTPS when installing from RPM/DEB packages?</h1>
<cc:LocalizeContent runat="Server" ControlName="~/Controls/Help/VariousControls/Versions/CommunityServer/CommunityServer_Current.ascx" />
<div class="keyword_block">
<ul>
<li><cc:LocalizeContent runat="Server" ControlName="~/Controls/Help/Tags/local-server/local-server.ascx" /></li>
<li><cc:LocalizeContent runat="Server" ControlName="~/Controls/Help/Tags/server-version/server-version.ascx" /></li>
<li><cc:LocalizeContent runat="Server" ControlName="~/Controls/Help/Tags/community-server/community-server.ascx" /></li>
<li><cc:LocalizeContent runat="Server" ControlName="~/Controls/Help/Tags/linux-version/linux-version.ascx" /></li>
<li><cc:LocalizeContent runat="Server" ControlName="~/Controls/Help/Tags/switch-to-https/switch-to-https.ascx" /></li>
</ul>
</div>
<div class="video_ground video_trips">
<h2 id="introduction">Introduction</h2>
<div class="block_of_step">
<div class="screen_text">
<p>When you install <b>Enterprise Edition</b> using the script, you are offered an option to install it not using the Docker, but from RPM/DEB packages. But in this case the <b>HTTPS</b> section will be absent from the <b>Control Panel</b>. This does not mean that you will not be able to switch your portal to HTTPS protocol.</p>
<p>Starting with version <b>9.1</b> <a target="_blank" href="https://letsencrypt.org/">letsencrypt.org</a> service and script are used to easily create a CA-signed certificate and switch the portal to HTTPS with a single command.</p>
<p>The article below will explain this can be done. To install your own certificate, please refer to <a href="<%=VirtualPathUtility.ToAbsolute("~/server/linux/community/switch-to-https.aspx")%>">this article</a>.</p>
</div>
</div>
</div>
<h2 id="CreateCertificate">Switching to HTTPS using script</h2>
<div class="block_of_step">
<div class="screen_text">
<p>Run the following script:</p>
<pre><code>bash /var/www/onlyoffice/Tools/letsencrypt.sh yourdomain.com subdomain1.yourdomain.com subdomain2.yourdomain.com</code></pre>
<p>Where <code>yourdomain.com</code> is the address of the domain where your <b>Enterprise Edition</b> portal is installed, and <code>subdomain1.yourdomain.com</code> and <code>subdomain2.yourdomain.com</code> (and any other subdomains separated with a space) are the subdomains for the main domain which you use.</p>
<p>The script will automatically create and install the <a target="_blank" href="https://letsencrypt.org/">letsencrypt.org</a> CA-signed certificate to your server and restart the NGINX service for the changes to take effect.</p>
<p>Now your portal should be available using the <span class="param-type">https://</span> address.</p>
</div>
</div>
<h2 id="StartLetsencrypt">Creating the letsencrypt.org certificate manually</h2>
<div class="block_of_step">
<div class="screen_text">
<p>If you do not want to use the script, you can perform the same actions manually. To be able to create the <a target="_blank" href="https://letsencrypt.org/">letsencrypt.org</a> CA-signed certificate manually, you need to go to the <a target="_blank" href="https://letsencrypt.org/getting-started/">Getting started</a> section of the <span class="param-type">letsencrypt.org</span> website and follow the instructions on how to add <a target="_blank" href="https://certbot.eff.org/">Certbot ACME client</a> to your server.</p>
<div class="notehelp nh_important"><span class="important_notice_label">Warning</span>Only follow the <b>Install</b> section instructions of the <a target="_blank" href="https://certbot.eff.org/">Certbot</a> website. If you execute commands from the <b>Get Started</b> section your NGINX config file will be overritten and the service will not start correctly.</div>
<div class="notehelp">Please note that you will need shell access to your server to be able to install both Certbot ACME client and CA-signed certificate from <span class="param-type">letsencrypt.org</span></div>
</div>
</div>
</div>