Apache配置https

2020-08-09  本文已影响0人  芮淼一线

Apache

Apache命令

 开启apache:          sudo apachectl start
 重启apache:          sudo apachectl restart
 关闭apache:          sudo apachectl stop
 apache配置检测是否正确 sudo apachectl configtest

Apache开启https

SSL生成证书:
步骤1:生成密钥

openssl genrsa 1024 > server.key

步骤2: 生成证书请求文件

openssl req -new -key server.key > server.csr

根据提示信息输入相关信息,生成crt文件

Country Name:                                   Zh
State or Province Name :                        Sichuan
Locality Name:                                  Chengdu
Organization Name:                              Ruirui Software
Organizational Unit Name:                       Ruirui
Common Name (eg, fully qualified host name):    localhost
Email Address:                                  1352892108@qq.com
A challenge password:                           asd123456789

步骤3: 生成证书

openssl req -x509 -days 7300 -key server.key -in server.csr > server.crt

配置Apache SSL
拷贝证书相关文件到配置路径

cp server.key server.crt /private/etc/apache2/

修改httpd.conf,以下三行取消注释

LoadModule ssl_module libexec/apache2/mod_ssl.so

Include /private/etc/apache2/extra/httpd-ssl.conf

LoadModule socache_shmcb_module libexec/apache2/mod_socache_shmcb.so

修改httpd-ssl.conf,找到VirtualHost,修改主机名(绿色区域),证书相关文件路径(蓝色区域)

<VirtualHost www.segmentfault.com.gao:443>
#   General setup for the virtual host
#  DocumentRoot "/Library/WebServer/Documents"
DocumentRoot "/Users/kimi/WebServer"
ServerName www.segmentfault.com.gao:443
ServerAdmin you@example.com
ErrorLog "/private/var/log/apache2/error_log"
TransferLog "/private/var/log/apache2/access_log"

SSLCertificateFile "/private/etc/apache2/ssl/server.crt"

SSLCertificateKeyFile "/private/etc/apache2/ssl/server.key"

https证书生成

1.证书生成可以直接使用KeyManager软件生成
2.使用 KeyManager - FreeSSL.cn
3.FreeSSL.cn

上一篇 下一篇

猜你喜欢

热点阅读