{"id":189,"date":"2020-04-24T01:26:41","date_gmt":"2020-04-23T17:26:41","guid":{"rendered":"http:\/\/iotch.xyz\/?p=189"},"modified":"2020-04-24T01:26:41","modified_gmt":"2020-04-23T17:26:41","slug":"apache2%e9%85%8d%e7%bd%ae%e8%85%be%e8%ae%af%e4%ba%91ssl%e8%af%81%e4%b9%a6","status":"publish","type":"post","link":"https:\/\/www.iotch.xyz\/?p=189","title":{"rendered":"Apache2\u914d\u7f6e\u817e\u8baf\u4e91SSL\u8bc1\u4e66"},"content":{"rendered":"\n

\u9996\u5148\u53bb\u817e\u8baf\u4e91\u7533\u8bf7\u514d\u8d39\u7684SSL\u8bc1\u4e66\uff0c\u4e0b\u8f7d\u4e0b\u6765\u89e3\u538b\u540e\u91cc\u9762\u6709\u4e00\u4e2aApache<\/code>\u6587\u4ef6\u5939\uff0c\u91cc\u9762\u6709\u4e09\u4e2a\u6587\u4ef6\uff0c\u63a5\u4e0b\u6765\u4f1a\u7528\u5230\u3002
\"\"<\/p>\n\n\n\n

\u4e0a\u4f20\u8bc1\u4e66<\/h1>\n\n\n\n

\u5c06\u4e0a\u4e00\u6b65\u7684\u4e09\u4e2a\u6587\u4ef6\u4e0a\u4f20\u5230\/etc\/ssl<\/code>\u91cc<\/p>\n\n\n\n

\u542f\u7528SSL\u6a21\u5757<\/h1>\n\n\n\n

\u542f\u7528a2enmod<\/p>\n\n\n\n

1
2<\/td>		systemctl restart apache2
a2enmod ssl<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u542f\u7528openssl<\/p>\n\n\n\n

1<\/td>apt-get install openssl<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u91cd\u542fApache<\/p>\n\n\n\n

1<\/td>service apache2 restart<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u914d\u7f6edefault-ssl.conf<\/h1>\n\n\n\n

\u6253\u5f00\u914d\u7f6e\u6587\u4ef6default-ssl.conf<\/p>\n\n\n\n

1<\/td>nano \/etc\/apache2\/sites-available\/default-ssl.conf<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u4fee\u6539\u7b2c\u4e8c\u884c<\/p>\n\n\n\n

1
2<\/td>		<VirtualHost _default_:443>
\u4fee\u6539\u4e3a:<VirtualHost mgh234.xyz:443><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u7b2c\u56db\u884c\u52a0\u5165\u4e00\u884c<\/p>\n\n\n\n

1<\/td>ServerName mgh234.xyz<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u4fee\u6539\u5b8c\u6548\u679c\u5982\u4e0b\uff1a
\"\"<\/p>\n\n\n\n

\u5728\u6587\u4ef632\u884c\u9644\u8fd1\u4fee\u6539\u4e3a\u5982\u4e0b\u5185\u5bb9\uff1a<\/p>\n\n\n\n

1
2
3<\/td>		SSLCertificateFile \/etc\/ssl\/2_mgh234.xyz.crt
SSLCertificateKeyFile \/etc\/ssl\/3_mgh234.x \u5927\u4e13\u680f<\/a>  Apache2\u914d\u7f6e\u817e\u8baf\u4e91SSL\u8bc1\u4e66<\/a>yz.key
SSLCertificateChainFile \/etc\/ssl\/1_root_bundle.crt<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u4fee\u6539\u540e\u6548\u679c\u5982\u4e0b\uff1a
\"\"<\/p>\n\n\n\n

SSL\u7ad9\u70b9\u8bbe\u4e3a\u53ef\u8fd0\u884c<\/h1>\n\n\n\n

\u8fdb\u5165\/etc\/apache2\/sites-available\u76ee\u5f55<\/p>\n\n\n\n

1<\/td>cd \/etc\/apache2\/sites-available<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u8fd0\u884c<\/p>\n\n\n\n

1<\/td>systemctl reload apache2<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
1<\/td>a2ensite default-ssl.conf<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u5f00\u542fApache\u91cd\u5b9a\u5411<\/h1>\n\n\n\n

\u4fee\u6539\u914d\u7f6e\u6587\u4ef6<\/p>\n\n\n\n

1<\/td>nano \/etc\/apache2\/apache2.conf<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u6309Ctrl<\/kbd>+W<\/kbd>\u952e\u8fdb\u884c\u641c\u7d22\uff0c\u641c\u7d22\u5185\u5bb9\u4e3a<Directory \/var\/www\/><\/code>
\u5c06AllowOverride None<\/code>\u4fee\u6539\u4e3aAllowOverride ALL<\/code>\uff0c\u6548\u679c\u5982\u4e0b\uff1a
\"\"<\/p>\n\n\n\n

301\u91cd\u5b9a\u5411<\/h1>\n\n\n\n

\u8fdb\u5165\u7f51\u7ad9\u6839\u76ee\u5f55\uff0c\u65b0\u5efa\u4e00\u4e2a\u6587\u4ef6<\/p>\n\n\n\n

1<\/td>nano .htaccess<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u8f93\u5165\u4ee5\u4e0b\u5185\u5bb9<\/p>\n\n\n\n

1
2
3<\/td>		RewriteEngine on
RewriteCond %{HTTPS} !=on
RewriteRule ^(.*) https:\/\/%{SERVER_NAME}$1 [L,R]<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u91cd\u542fApache<\/p>\n\n\n\n

1<\/td>service apache2 restart<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u539f\u6587\u94fe\u63a5\uff1ahttps:\/\/www.cnblogs.com\/lijianming180\/p\/12032636.html<\/a><\/p>\n