1.#修改httpd.conf文件#LoadModule ssl_module modules/mod_ssl.so (#加載SSL模塊)
#Include conf/extra/httpd-ssl.conf (#加載SSL配置文件)
#LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
#去掉上面三行前的"#"
2.修改httpd-ssl.conf文件
到httpd-ssl.conf去
注意開啟443端口的監(jiān)聽(https默認(rèn)端口為443,可根據(jù)實(shí)際需求做調(diào)整)
Listen 443
SSLCipherSuite ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-
SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-
SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-
SHA:HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4
SSLHonorCipherOrder On
SSLProtocol all -SSLv2 -SSLv3
對要使用證書的virtualhost進(jìn)行配置
<VirtualHost _default_:443>
DocumentRoot "/myproject" #項(xiàng)目目錄
SSLEngine on
SSLCertificateFile /xx/xx/server.cer #服務(wù)器證書在服務(wù)器中存儲路徑及文件名
SSLCertificateKeyFile /xx/xx/server.key #私鑰文件在服務(wù)器中存儲路徑及文件名
SSLCertificateChainFile /xx/xx/ca.crt #中間證書在服務(wù)器中存儲路徑及文件名
</VirtualHost>
http跳轉(zhuǎn)https httpd.conf文件中加載重寫模塊
LoadModule rewrite_module modules/mod_rewrite.so
取消該行前面的#
到80(http)的virtualhost中添加如下跳轉(zhuǎn)語句 (默認(rèn)是在httpd.conf文件中)
RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$
RewriteRule (.*) https://%{SERVER_NAME}/$1 [R]
此跳轉(zhuǎn)語句會將所有http請求轉(zhuǎn)為https可根據(jù)公司實(shí)際業(yè)務(wù)情況進(jìn)行添加調(diào)整。