httpd开启ssl认证

Posted 2022-05-07 _诺千金

1、购买域名

2、购买证书并下载

3、购买云主机安装httpd

4、添加域名解析

5、访问测试

参考链接：

https://help.aliyun.com/document_detail/98727.html

1、购买域名

可以在阿里云完成

2、购买证书并下载

可以通过阿里云购买免费证书

下载apache证书

3、购买云主机安装httpd​

上传下载的apache证书到云主机内

# ll /etc/pki/tls/certs |grep ying.host

-rw-r--r--  1 root root 1679 May  6 18:34 7724192_ying.host_chain.crt

-rw-r--r--  1 root root 1675 May  6 18:34 7724192_ying.host.key

-rw-r--r--  1 root root 2126 May  6 18:34 7724192_ying.host_public.crt

安装httpd和ssl模块

# yum install httpd mod_ssl

# rpm -qa |grep httpd

httpd-tools-2.4.6-97.el7.centos.5.x86_64

httpd-2.4.6-97.el7.centos.5.x86_64

取消80端口

# vi /etc/httpd/conf/httpd.conf

#Listen 80

修改ssl.conf配置文件，过滤后省略了部分默认的配置

# grep -Ev ^$|# /etc/httpd/conf.d/ssl.conf  

Listen 443 https

<VirtualHost *:443>

DocumentRoot "/var/www/html"

ServerName ying.host:443

ErrorLog logs/ssl_error_log

TransferLog logs/ssl_access_log

LogLevel warn

SSLEngine on

SSLProtocol all -SSLv2 -SSLv3

SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM

SSLHonorCipherOrder on  

SSLCertificateFile /etc/pki/tls/certs/7724192_ying.host_public.crt  

SSLCertificateKeyFile /etc/pki/tls/certs/7724192_ying.host.key    

SSLCertificateChainFile /etc/pki/tls/certs/7724192_ying.host_chain.crt

</VirtualHost>  

添加测试页面

# echo welcome > /var/www/html/index.html

开启服务

# systemctl enable httpd

# systemctl start httpd

4、添加域名解析

添加一个A记录

5、访问测试