CentOS7.2下SSL证书的配置

HTTPS的配置

2017-07-28

准备

假设CentOS7 已经安装了Apache Web服务器.

 yum install mod_ssl openssl

安装完毕后，会自动生成 /etc/httpd/conf.d/ssl.conf 文件

然后就是相关的证书要准备好

这里用的是腾讯云免费的TrustAsia的SSL证书，解压后取Apache的证书传至服务器。

上传至服务器后，接下来配置Apache
配置Apache Web服务器

首先，修改下面的配置文件。只需要需配置红色部分 SSLCertificateFile 和 SSLCertificateKeyFile，把目录换成你所对应的上传证书的目录

  # vim /etc/httpd/conf.d/ssl.conf

  #
  # When we also provide SSL we have to listen to the 
  # the HTTPS port in addition.
  #
  Listen 443 https

  ##
  ## SSL Virtual Host Context
  ##

  <VirtualHost _default_:443>
  # General setup for the virtual host, inherited from global    configuration

  DocumentRoot "/var/www/html/a.com"
  ServerName www.a.com:443

  ### overwrite the following parameters ###

SSLCertificateFile     /etc/pki/tls/certs/server.crt
SSLCertificateKeyFile /etc/pki/tls/private/server.key

  ### The following parameter does not need to be modified in case of a self-signed certificate. ###
  ### If you are using a real certificate, you may receive a certificate bundle. The bundle is added using the following parameters ###
  SSLCertificateChainFile /etc/pki/tls/certs/example.com.ca-bundle

然后，重新启动httpd服务使更改生效

 systemctl restart httpd

Web服务器现在就可以使用HTTPS啦