If you like DNray Forum, you can support it by - BTC: bc1qppjcl3c2cyjazy6lepmrv3fh6ke9mxs7zpfky0 , TRC20 and more...

 

Website Migration: Case of .well-known, cgi-bin, and admin Folders

Started by simonr, May 24, 2023, 07:48 AM

Previous topic - Next topic

simonrTopic starter

I was tasked with transferring a website from a local server to hosting that already had a modified version of the site installed, which I needed to upload to the current domain. I prepared all the necessary files for transfer, but upon checking the host via ftp, I discovered additional folders such as well-known, cgi-bin and admin alongside the standard Wordpress files.

Further research revealed that the .well-known folder is responsible for generating an SSL certificate. What is the proper way to handle these folders when installing a new site on the same domain (using duplicator)? Should these folders be removed along with all the old content?
  •  


Joicahicy

To remove a domain, it's necessary to delete it because when certbot generates a new certificate for another domain, it will automatically create a new folder.

If the website is moved to a new hosting provider, even if the domain remains unchanged, it is still advisable to copy all the other folders to ensure a seamless transition.
  •  

jesusbond

Copying the folder is unnecessary if you have no intention of creating a certificate. This applies specifically to SSL certificates that are used for hosting purposes.

In case you're working with a VPS, it's advisable to copy the folder. However, if you find yourself asking such a question, chances are you won't need the folders after all.

Moreover, if you can accomplish the task without copying the folders, then there is no point in doing so. It's important to focus only on the steps that are relevant to your goals.
  •  

parmothebra

The folder named ".well-known" may be established either manually or by the CertBot program in the process of automatically creating and updating a free SSL certificate from Let's Encrypt. Its purpose is to confirm that the respective domain belongs to you, and it is necessary for the website to function over https://. It is strongly advised not to delete this folder.

keep in mind that the creation of this folder contributes to the overall security and reliability of your website. By verifying domain ownership, it helps prevent unauthorized access and protects sensitive information exchanged between the site and its visitors. Removing the ".well-known" folder can potentially compromise these crucial elements of online security. Therefore, it is essential to be mindful of this folder's significance and cautious when dealing with it.
  •  

Mcdeerieton

When encountering additional folders such as well-known, cgi-bin, and admin alongside the standard WordPress files on a hosting environment, it's important to consider their specific purposes and implications for the site transfer process.

The .well-known folder, for instance, is commonly utilized for hosting verification files required for SSL certificate issuance and renewal through automated systems like Let's Encrypt. Removing or altering this folder without careful consideration could potentially disrupt the SSL configuration for the domain and lead to security and functionality issues.

In the context of transferring a WordPress site using a tool like Duplicator, it's crucial to meticulously review the existing file structure and ensure that only the essential website files and directories are included in the transfer package. This may involve excluding certain additional folders, such as well-known and cgi-bin, during the Duplicator's packaging process to avoid any unintended interference with existing server configurations.

Furthermore, after the new site has been successfully uploaded to the hosting environment, it's imperative to conduct a comprehensive assessment of the SSL configuration to verify that the necessary certificates are properly installed and functioning as expected. This ensures that the domain's security and encryption protocols remain intact following the site transfer.

Collaborating with the SSL certificate provider or the hosting specialist to review and possibly adjust the SSL settings post-transfer can help address any discrepancies that may arise due to the migration process. By coordinating with the appropriate experts, any potential issues related to SSL certificates and associated folders can be effectively resolved, maintaining the domain's security and SSL functionality.
  •  


If you like DNray forum, you can support it by - BTC: bc1qppjcl3c2cyjazy6lepmrv3fh6ke9mxs7zpfky0 , TRC20 and more...