FreeBSD 8.0 为apache 2.2.11配置ssl
1、安装apache
apache22没有单独的mod_ssl的port,而是集成在apache中,在安装时选中mod_ssl
cd /usr/ports/www/apache22
make install
2、安装openssl(一般默认会有,输入open 按tab键看看有没有出来)
cd /usr/ports/security/openssl
make install
3、生成密钥和证书
cd /usr/local/etc/apache22/httpd/conf ← 进入HTTP服务器配置文件所在目录
mkdir ssl.key ← 建立一个ssl.key目录
openssl genrsa –des3 –out ssl.key/server.key 1024 ← 生成服务器私钥(必须输入密码,否则不让生成,下面可去掉)
openssl rsa -in ssl.key/server.key -out ssl.key/server.key ← 从密钥中删除密码(去掉密码,以避免系统启动后被询问口令)
openssl req –new –key ssl.key/server.key –out ssl.key/server.csr← 生成服务器证书请求
openssl x509 -in ssl.key/server.csr -out ssl.key/server.crt -req -signkey ssl.key/server.key -days 365 ← 签证
4、对/usr/local/etc/apache22/extra/httpd-ssl.conf 进行修改:
·修改DocumentRoot与httpd.conf中一致
·修改SSLCertificateFile、SSLCertificateKeyFile的路径为正确位置
SSLCertificateFile "/usr/local/etc/apache22/ssl.key/server.crt"
SSLCertificateKeyFile "/usr/local/etc/apache22/ssl.key/server.key"
5、对/usr/local/etc/apache22/httpd.conf进行修改:
修改# Secure (SSL/TLS) connections,
取消注释include段,并修改路径为/usr/local/etc/apache22/extra/httpd-ssl.conf
sockstat -4l 查看是否监听了443端口
输入httpds://yourip
配置SSL虚拟主机
修改vi /usr/local/etc/apache22/Includes/httpd-vhosts.conf
- NameVirtualHost *:80
- NameVirtualHost *:443
- <VirtualHost *:443>
- DocumentRoot /usr/www/webdisk
- ServerName disk.kukaka.org.cn
- ErrorLog /usr/www/webdisk/error_log
- CustomLog /usr/www/webdisk/custom_log common
- <Directory / >
- LimitRequestBody 1024000000
- Order allow,deny
- Allow from all
- </Directory>
- </VirtualHost>
- 高手 //发表于:2010-01-15 23:04:05
- 谢谢,很有帮组

文章评论(查看全部)