Apache2.4.37配置ssl证书

清疚 2022-03-16 17:42 300阅读 0赞

资源贴

为什么https链接通过客户端软件抓包后还是明文：[https://blog.csdn.net/stpeace/article/details/78073288][https_blog.csdn.net_stpeace_article_details_78073288]

为什么https链接会显示不安全：[https://blog.csdn.net/coding\_zhu/article/details/70262677][https_blog.csdn.net_coding_zhu_article_details_70262677]

1、ssl证书：可以申请腾讯的免费证书 [https://buy.cloud.tencent.com/ssl?fromSource=ssl][https_buy.cloud.tencent.com_ssl_fromSource_ssl]

参考文档：[https://cloud.tencent.com/document/product/400/4143\#1.-apache-2.x-.E8.AF.81.E4.B9.A6.E9.83.A8.E7.BD.B2][https_cloud.tencent.com_document_product_400_4143_1.-apache-2.x-.E8.AF.81.E4.B9.A6.E9.83.A8.E7.BD.B2]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dyb25neWFv_size_16_color_FFFFFF_t_70][]

下载以后有以下文件

![20190311180357897.png][]

2、配置 http.conf末尾新增

<VirtualHost *:443> #https默认监听443端口
    	ServerAdmin #管理员联系方式#
    	DocumentRoot #项目目录#
            ServerName https://127.0.0.1
    	ServerAlias #服务器别名#
        SSLEngine on
        #申请证书#
        SSLCertificateFile "/usr/local/install/apache/ssl/2_www.jiayuangzs.cn.crt"
        SSLCertificateKeyFile "/usr/local/install/apache/ssl/3_www.jiayuangzs.cn.key"
        SSLCertificateChainFile "/usr/local/install/apache/ssl/1_root_bundle.crt"
        #日志文件#
        ErrorLog "logs/https-error.log"
        CustomLog "logs/https-access.log" common    
        #开启ssl
        SSLProxyEngine on
        <Directory "/usr/local/service">
            Options FollowSymLinks
            AllowOverride All
            Order allow,deny
            Allow from all
        </Directory>
        
        #反向代理设置 /表明127.0.0.1:443的所有文件都会被重定向到https://127.0.0.1:8081/
        ProxyPass /test http://127.0.0.1:8081/test
        ProxyPassReverse /testhttp://127.0.0.1:8081/test
    </VirtualHost>

放开注释：

#LoadModule proxy_module modules/mod_proxy.so
    #LoadModule proxy_http_module modules/mod_proxy_http.so
    #LoadModule ssl_module modules/mod_ssl.so

3、安装时需要开启ssl支持，否者会没有响应模块

./configure --prefix=/usr/local/install/apache/httpd-2.4.37 --with-apr=/usr/local/install/apache/apr-1.6.5 --with-apr-util=/usr/local/install/apache/apr-util-1.6.1 --with-pcre=/usr/local/install/apache/pcre-8.42 \--enable-ssl

安装时如果包opensll version too old 可以更新openssl版本

yum install openssl-devel
    yum update openssl

4、效果：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dyb25neWFv_size_16_color_FFFFFF_t_70 1][]

[https_blog.csdn.net_stpeace_article_details_78073288]: https://blog.csdn.net/stpeace/article/details/78073288
[https_blog.csdn.net_coding_zhu_article_details_70262677]: https://blog.csdn.net/coding_zhu/article/details/70262677
[https_buy.cloud.tencent.com_ssl_fromSource_ssl]: https://buy.cloud.tencent.com/ssl?fromSource=ssl
[https_cloud.tencent.com_document_product_400_4143_1.-apache-2.x-.E8.AF.81.E4.B9.A6.E9.83.A8.E7.BD.B2]: https://cloud.tencent.com/document/product/400/4143#1.-apache-2.x-.E8.AF.81.E4.B9.A6.E9.83.A8.E7.BD.B2
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dyb25neWFv_size_16_color_FFFFFF_t_70]: /images/20220310/b8ae54fed3fb43ffa212d586da230c30.png
[20190311180357897.png]: /images/20220310/9bf9e68df68346b3b8a6db5c77d311aa.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dyb25neWFv_size_16_color_FFFFFF_t_70 1]: /images/20220310/40b525997aba41debd47a1efe5bfcfd6.png