443 https
来源:原创
时间:2018-05-20
作者:脚本小站
分类:Linux
在阿里云上申请免费的证书:
214563512000397.key 214563512000397.pem chain.pem public.pem
开启这两个模块,mod_socache_shmcb.so这个模块是用来实现缓存的,mod_ssl.so 为加密模块。
LoadModule socache_shmcb_module modules/mod_socache_shmcb.so LoadModule ssl_module modules/mod_ssl.so
httpd2.4配置文件如下:
Listen 443
SSLProtocol all -SSLv2 -SSLv3
SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM
SSLHonorCipherOrder on
SSLPassPhraseDialog builtin
SSLSessionCache "shmcb:/alidata/server/httpd/logs/ssl_scache(512000)"
SSLSessionCacheTimeout 300
<VirtualHost _default_:443>
DocumentRoot "/alidata/www/zhuqiyang/"
ServerName www.example.com:443
ServerAdmin you@example.com
ErrorLog "/alidata/server/httpd/logs/error_log"
TransferLog "/alidata/server/httpd/logs/access_log"
SSLEngine on
SSLCertificateFile "cert/public.pem"
SSLCertificateKeyFile "cert/214563512000397.key"
SSLCertificateChainFile "cert/chain.pem"
<FilesMatch "\.(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<Directory "/alidata/server/httpd/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
BrowserMatch "MSIE [2-5]" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog "/alidata/server/httpd/logs/ssl_request_log" \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>