专业的编程技术博客社区

网站首页 > 博客文章 正文

apache2.2部署多域名多ssl证书实现https加密访问

baijin 2024-09-07 12:10:03 博客文章 13 ℃ 0 评论

证书采用西部数码的TrustAsia证书,1元/年/域名,注意,www.???.com和abc.???.com是算两个域名!

购买地址私信我,头条不允许放

买了后需要检测域名所有权,这儿注意,

当你上传了那个txt后,点击检测,如果通过。你需要等待西部数码给你发邮件通知,确认你通过!

通过后,部署域名:

1、查看密码,作用是解压下载的证书


2、下载证书,如图点

当然下载pem格式

3、解压然后上传到你的服务器,位置随意

接下来就是最重要的步骤,配置服务器

1、配置http.conf

为了满足多域名的需求,则添加如下

<IfModule mod_ssl.c>
    # If you add NameVirtualHost *:443 here, you will also have to change
    # the VirtualHost statement in /etc/apache2/sites-available/default-ssl
    # to <VirtualHost *:443>
    # Server Name Indication for SSL named virtual hosts is currently not
    # supported by MSIE on Windows XP.

    # !important below!
    NameVirtualHost *:443 
    Listen 443
</IfModule>
Include "conf.d/vhost-ssl.conf"

2、添加vhost-ssl.conf文件

配置如下两个域名

#https
<VirtualHost *:443>
	ErrorLog logs/ssl_error_log
  	TransferLog logs/ssl_access_log
  	LogLevel warn
 	DocumentRoot "域名对应目录1"
	ServerName www.zhaoqianbei.com 
	ServerAlias www.zhaoqianbei.com
	SSLEngine on
	SSLProtocol all -SSLv2
       SSLCipherSuite DEFAULT:!EXP:!SSLv2:!DES:!IDEA:!SEED:+3DES

	SSLCertificateFile "域名1cer位置"	SSLCertificateKeyFile "域名1key位置"        SSLCertificateChainFile "域名1crt位置"
    <Files ~ "\.(cgi|shtml|phtml|php3?)#34;>
	  SSLOptions +StdEnvVars
	</Files>
	<Directory "域名对应目录1">
		Options FollowSymLinks ExecCGI
		AllowOverride All
		Order allow,deny
		Allow from all
	</Directory>

	#for IE
	SetEnvIf User-Agent ".*MSIE.*" \
	nokeepalive ssl-unclean-shutdown \
	downgrade-1.0 force-response-1.0
	CustomLog logs/ssl_request_log \
	"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

</VirtualHost>
 
<VirtualHost *:443>
	ErrorLog logs/ssl_error_log
  	TransferLog logs/ssl_access_log
  	LogLevel warn
 	DocumentRoot "域名对应目录2"
	ServerName  你的域名2
	ServerAlias 你的域名2
	SSLEngine on
	
	SSLProtocol all -SSLv2
        SSLCipherSuite DEFAULT:!EXP:!SSLv2:!DES:!IDEA:!SEED:+3DES

	SSLCertificateFile "域名2cer位置"
	SSLCertificateKeyFile "域名2key位置"	SSLCertificateChainFile "域名2crt位置"
	<Files ~ "\.(cgi|shtml|phtml|php3?)#34;>
	  SSLOptions +StdEnvVars
	</Files>
	<Directory "域名对应目录2">
		Options FollowSymLinks ExecCGI
		AllowOverride All
		Order allow,deny
		Allow from all
	</Directory>

	#for IE
	SetEnvIf User-Agent ".*MSIE.*" \
	nokeepalive ssl-unclean-shutdown \
	downgrade-1.0 force-response-1.0
	CustomLog logs/ssl_request_log \
	"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>

3、上传vhost-ssl.conf到conf.d,上传httpd.conf到conf

4、重启服务器,大功告成!

本教程已经找前辈网亲测有效!如有问题请私信我解决!




Tags:

本文暂时没有评论,来添加一个吧(●'◡'●)

欢迎 发表评论:

最近发表
标签列表