Apache配置SSL证书

摘要:常见的证书一般在Centos下,现在总结一下Windows下的配置

获取对应的key 与ca文件

配置https.conf

开放端口443 开放对应ssl扩展
#Listen 12.34.56.78:80
Listen 80
Listen 443
LoadModule ssl_module modules/mod_ssl.so


SSLSessionCache        "shmcb:logs/ssl_scache(512000)"
SSLSessionCacheTimeout  300
<IfModule ssl_module>
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
</IfModule>

配置vhosts.conf

<VirtualHost *:80>
DirectoryIndex index.php
    DocumentRoot "C:\phpStudy\WWW\ittest"
    ServerName ittest.oceania-sh.com
  <Directory "C:\phpStudy\WWW\ittest">
      Options FollowSymLinks ExecCGI
      AllowOverride All
      Order allow,deny
      Allow from all
      Require all granted
  </Directory>
</VirtualHost>
<VirtualHost *:443>
DirectoryIndex index.php
    DocumentRoot "C:\phpStudy\WWW\ittest"
    ServerName ittest.oceania-sh.com  
    #SSL
    SSLEngine On
    SSLCertificateFile "C:\phpStudy\WWW\ittest\ssl\oceania-sh.pem"
    SSLCertificateKeyFile "C:\phpStudy\WWW\ittest\ssl\oceania-sh.key"
    SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
    SSLProtocol All -SSLv2 -SSLv3 -TLSv1
    SSLHonorCipherOrder On
  <Directory "C:\phpStudy\WWW\ittest">
      Options FollowSymLinks ExecCGI
      AllowOverride All
      Order allow,deny
      Allow from all
      Require all granted
  </Directory>
</VirtualHost>
评论
  • 2021-06-21 17:02:48 by 咖啡泡柠檬
    yum install mod_ssl 安装对应的证书,安装后会生成00-ssl的文件以及一个ssl.conf文件可以吧ssl.conf去掉,或者重命名不执行它,吧00-ssl文件增加如上对应的配置文件