SSL配置

1.下载SSL证书

2. 建立存放ssl目录

/root/cert

3.配置 httpd.conf

vim /etc/httpd/conf/httpd.conf

<VirtualHost *:80> 
DocumentRoot  /var/www/load/
ServerName load.dierkeji.com
<Directory "/var/www/load/"> 
Require all granted
</Directory> 
RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^(.*)$ https://%{SERVER_NAME}$1 [L,R]
</VirtualHost>

4. 配置 ssl.conf

没有先下载

yum install -y mod_ssl

vim /etc/httpd/conf.d/ssl.conf

<VirtualHost *:443>
    ServerName load.dierkeji.com
    DocumentRoot /var/www/load
    SSLEngine on
    SSLProtocol all -SSLv2 -SSLv3
    SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM
    SSLHonorCipherOrder on
    SSLCertificateFile /root/cert/6682712_load.dierkeji.com_public.crt
    SSLCertificateKeyFile /root/cert/6682712_load.dierkeji.com.key
    SSLCertificateChainFile /root/cert/6682712_load.dierkeji.com_chain.crt
</VirtualHost>

5. 创建对应目录与之绑定

mkdir /var/www/test -p

6.重启