Apache+ssl实现方式

xyzjr

　　env：
　　os:Centos4.8 final
　　apache: httpd-2.0.64.tar.gz
　　Openssl: openssl-0.9.7e.tar
　　
　　1 install openssl
　　#tar vxfz openssl-0.9.7e.tar.gz
　　#cd openssl-0.9.7e
　　#./config --prefix=/usr/local/ssl
　　#make
　　#make install
　　
　　2 install apache
　　
　　#tar vzvf httpd-2.0.54.tar.gz
　　#cd httpd-2.0.54
　　#./configure --prefix=/usr/local/apache --enable-so –enable-rewrite --enable-ssl=static --with-ssl=/usr/local/ssl --enable-mods-shared=all
　　#make
　　#make install
　　
　　3 make a CA
　　#mkdir /usr/local/apache/conf/ssl.crt   (create )
　　#mkdir /usr/local/apache/conf/ssl.key
　　#openssl req -new -out server.csr (Establish third-party fair)
　　Generating a 1024 bit RSA private key
　　..............................................................................++++++
　　...........++++++
　　writing new private key to 'privkey.pem'
　　Enter PEM pass phrase:insert a password
　　Verifying - Enter PEM pass phrase:reinsert a password
　　-----
　　You are about to be asked to enter information that will be incorporated
　　into your certificate request.
　　What you are about to enter is what is called a Distinguished Name or a DN.
　　There are quite a few fields but you can leave some blank
　　For some fields there will be a default value,
　　If you enter '.', the field will be left blank.
　　-----
　　Country Name (2 letter code) [GB]:CN
　　State or Province Name (full name) [Berkshire]:ZheJiang
　　Locality Name (eg, city) [Newbury]:HangZhou
　　Organization Name (eg, company) [My Company Ltd]:gdnotepad
　　Organizational Unit Name (eg, section) []:
　　Common Name (eg, your name or your server's hostname) []:192.168.1.212(register name)
　　Email Address []:gdnoteapd@163.com（registerE-mail）
　　Please enter the following 'extra' attributes
　　to be sent with your certificate request
　　A challenge password []:
　　An optional company name []:
　　
　　
　　#openssl rsa -in privkey.pem -out server.key　　
　　
　　#openssl x509 -in server.csr -out server.crt -req -signkey server.key -days 365
　　
　　# mv server.crt /usr/local/apache/conf/ssl.crt
　　# mv server.key /usr/local/apache/conf/ssl.key
　　
　　4 edit ssl.conf
　　vim /usr/local/apache/conf/ssl.conf
　　Listen 443 => Listen 0.0.0.0:443
　　
　　5 start ssl web service
　　/usr/local/apache/bin/apachectl startssl