CentOS 6.5系统下配置Apache的https证书
这里简单演示一下Apache下基于加密的认证访问―-https加密方式访问。1.DNS解析这里不再赘述了哈，相见本次演示的dns解析情况：
# nslookup www.abc.com
Server: 192.168.2.115
Address: 192.168.2.115#53
Name: www.abc.com
Address: 192.168.2.115
2.安装Apache SSL支持模块:# yum install -y mod_ssl（默认yum安装httpd是没有安装该模块的，安装后自动生产/etc/httpd/conf.d/ssl.conf文件）并生成证书。
# pwd
/etc/pki/tls/certs
# ls
ca-bundle.crt index.html
localhost.crt Makefile
ca-bundle.trust.crtlocalhost1.crt
make-dummy-cert
# openssl req -utf8 -new -key
../private/localhost.key -x509 -days 3650 -out
abc_com.crt
You are about to be asked to enter information that will be
incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished
Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter ‘.’, the field will be left blank.
―C
Country Name (2 letter code) :CN
State or Province Name (full name) []:510510
Locality Name (eg, city) :GZ
Organization Name (eg, company) [Default Company
Ltd]:ABC.COM
Organizational Unit Name (eg, section) []:Mr.Zhang
Common Name (eg, your name or your server’s hostname)
[]:www.abc.com
Email Address []:root@abc.com
#
3.配置Apache，基本配置这里不多说了，下面是配置www.abc.com站点http访问的情况。
# tail -n 8 /etc/httpd/conf/httpd.conf
NameVirtualhost 192.168.2.115:80
ServerAdmin webmaster@dummy-host.example.com
DocumentRoot /var/www/html
ServerName www.abc.com
ErrorLog logs/dummy-host.example.com-error_log
CustomLog logs/dummy-host.example.com-access_log
common
# tail /var/www/html/index.html
www.abc.com
#
4.配置Apache支持https访问www.abc.com站点，编辑 vim/etc/httpd/conf.d/ssl.conf文件，制定www.abc.com站点https访问时的相关信息。添加下面配置。
DocumentRoot “/var/www/html/www.kuteatest.net”
#//为了显示效果，这里的站点目录不一样，一般情况一个域名应该指向同一目录的。
ServerName www.abc.com:443
ErrorLog logs/ssl_error_log
TransferLog logs/ssl_access_log
LogLevel warn
SSLEngine on
SSLProtocol all -SSLv2
SSLCipherSuite
ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
SSLCertificateFile
/etc/pki/tls/certs/abc_com.crt
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
SSLOptions +StdEnvVars
SSLOptions +StdEnvVars
SetEnvIf User-Agent “.*MSIE.*” \
nokeepalive ssl-unclean-shutdown
\
downgrade-1.0 force-response-1.0
CustomLog logs/ssl_request_log \
“%t %h %{SSL_PROTOCOL}x
%{SSL_CIPHER}x \”%r\” %b”
4.重启Apache服务，测试访问。
页:
[1]