{"id":5354,"date":"2020-07-29T21:43:48","date_gmt":"2020-07-29T13:43:48","guid":{"rendered":"http:\/\/39.97.231.10\/?p=5354"},"modified":"2020-07-29T21:43:48","modified_gmt":"2020-07-29T13:43:48","slug":"%e7%bd%91%e7%ab%99%e8%ae%bf%e9%97%aehttp%e8%bd%ac%e6%88%90https","status":"publish","type":"post","link":"http:\/\/www.weijing.co\/?p=5354","title":{"rendered":"\u7f51\u7ad9\u8bbf\u95eehttp\u8f6c\u6210https"},"content":{"rendered":"<div class=\\\"blog_content\\\">\n<div class=\\\"blog_detail\\\">\n\u7f51\u7ad9\u670d\u52a1\u5668\u914d\u7f6e\uff1a<\/p>\n<ul>\n<li>\u64cd\u4f5c\u7cfb\u7edf\uff1aRed Hat Enterprise Linux release 8.0 (Ootpa)<\/li>\n<li>Web\u670d\u52a1\u5668\uff1aApache\/2.4.37 (Red Hat Enterprise Linux)<\/li>\n<\/ul>\n<h6>1\u3001\u8d2d\u4e70SSL\u8bc1\u4e66<\/h6>\n<p>\u963f\u91cc\u4e91\u4e0a\u67091\u5e74\u514d\u8d39\u4f7f\u7528\u7684\u8bc1\u4e66\uff0c\u8d2d\u4e70\u8bc1\u4e66\uff0c\u7ed1\u5b9a\u81ea\u5df1\u7684\u57df\u540d\uff0c\u6839\u636eweb\u670d\u52a1\u5668\u7c7b\u578b\u4e0b\u8f7d\u8bc1\u4e66\uff0c\u89e3\u538b\uff0c\u5c06\u8bc1\u4e66\u6587\u4ef6\u62f7\u8d1d\u5230\u670d\u52a1\u5668\u76ee\u5f55\uff1a<br \/>\n\/etc\/httpd\/conf\/extra\/<br \/>\n\u4e00\u51713\u4e2a\u6587\u4ef6\uff1a<br \/>\nxxx_xxx.com_public.crt<br \/>\nxxx_xxx.com.key<br \/>\nxxx_xxx.com_chain.crt<\/p>\n<h6>2\u3001\u5b89\u88c5ssl\u76f8\u5173\u4f9d\u8d56\u5305<\/h6>\n<p>yum install -y openssl.x86_64<br \/>\nyum install -y openssl-libs.x86_64<br \/>\nyum install -y mod_ssl.x86_64<br \/>\n\u7531\u4e8e\u6211\u7684\u4e91\u4e3b\u673a\u73af\u5883\u4e2d\u6ca1\u6709mod_ssl\uff0c\u6240\u4ee5\u9700\u8981\u989d\u5916\u5b89\u88c5\u3002<\/p>\n<h6>3\u3001\u4fee\u6539\u914d\u7f6e\u6587\u4ef6<\/h6>\n<p>\u4fee\u6539\u6587\u4ef6\uff1a\/etc\/httpd\/conf\/httpd.conf<br \/>\n\u914d\u7f6e\u6587\u4ef6\u4e2d\u53d6\u6d88\u5982\u4e0b\u4e24\u884c\u7684\u6ce8\u91ca\uff0c\u5982\u679c\u6ca1\u6709\uff0c\u76f4\u63a5\u5728\u672b\u5c3e\u589e\u52a0\u8fd9\u4e24\u884c\uff1a<br \/>\nLoadModule ssl_module modules\/mod_ssl.so<br \/>\nInclude conf\/extra\/httpd-ssl.conf<br \/>\n\u4fee\u6539\u6587\u4ef6\uff1a\/etc\/httpd\/conf\/extra\/httpd-ssl.conf<\/p>\n<pre><code>&lt;VirtualHost *:443&gt;\n\u00a0\u00a0\u00a0\u00a0ServerName\u00a0\u00a0\u00a0www.xxx.com\n\u00a0\u00a0\u00a0\u00a0DocumentRoot\u00a0\u00a0\/var\/www\/html\n\u00a0\u00a0\u00a0\u00a0SSLEngine on\n\u00a0\u00a0\u00a0\u00a0SSLProtocol all -SSLv2 -SSLv3\n\u00a0\u00a0\u00a0\u00a0SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM\n\u00a0\u00a0\u00a0\u00a0SSLHonorCipherOrder on\n\u00a0\u00a0\u00a0\u00a0SSLCertificateFile \/etc\/httpd\/conf\/extra\/xxx_xxx.com_public.crt\n\u00a0\u00a0\u00a0\u00a0SSLCertificateKeyFile \/etc\/httpd\/conf\/extra\/xxx_xxx.com.key\n\u00a0\u00a0\u00a0\u00a0SSLCertificateChainFile \/etc\/httpd\/conf\/extra\/xxx_xxx.com_chain.crt\n&lt;\/VirtualHost&gt;\n&lt;VirtualHost *:443&gt;\n\u00a0\u00a0\u00a0\u00a0ServerName\u00a0\u00a0\u00a0xxx.com\n\u00a0\u00a0\u00a0\u00a0DocumentRoot\u00a0\u00a0\/var\/www\/html\n\u00a0\u00a0\u00a0\u00a0SSLEngine on\n\u00a0\u00a0\u00a0\u00a0SSLProtocol all -SSLv2 -SSLv3\n\u00a0\u00a0\u00a0\u00a0SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM\n\u00a0\u00a0\u00a0\u00a0SSLHonorCipherOrder on\n\u00a0\u00a0\u00a0\u00a0SSLCertificateFile \/etc\/httpd\/conf\/extra\/xxx_xxx.com_public.crt\n\u00a0\u00a0\u00a0\u00a0SSLCertificateKeyFile \/etc\/httpd\/conf\/extra\/xxx_xxx.com.key\n\u00a0\u00a0\u00a0\u00a0SSLCertificateChainFile \/etc\/httpd\/conf\/extra\/xxx_xxx.com_chain.crt\n&lt;\/VirtualHost&gt;\n<\/code><\/pre>\n<p>\u4fee\u6539 \/etc\/httpd\/conf\/httpd.conf \u6587\u4ef6\uff0c\u5728&lt;VirtualHost *:80&gt; &lt;\/VirtualHost&gt;\u4e2d\u95f4\uff0c\u6dfb\u52a0\u4ee5\u4e0b\u91cd\u5b9a\u5411\u4ee3\u7801\uff0c\u80fd\u591f\u5c06http\u81ea\u52a8\u8df3\u8f6c\u5230https\u3002<\/p>\n<pre><code>&lt;VirtualHost \\\\*:80&gt;\nRewriteEngine on\nRewriteCond %{SERVER_PORT} !^443$\nRewriteRule ^(.*)$ https:\/\/%{SERVER_NAME}$1 [L,R]\n&lt;\/VirtualHost&gt;\n<\/code><\/pre>\n<h6>4\u3001\u5f00\u653e443\u7aef\u53e3<\/h6>\n<p>\u786e\u8ba4\u4e91\u4e3b\u673a443\u7aef\u53e3\u6709\u6ca1\u6709\u6253\u5f00\uff0c\u67d0\u4e9b\u4e91\u4e3b\u673a\u9ed8\u8ba4\u7684\u5b89\u5168\u7b56\u7565\uff0c\u4e0d\u5141\u8bb8\u8bbf\u95ee443\u7aef\u53e3\uff0c\u9700\u8981\u5728\u4e91\u4e3b\u673a\u63a7\u5236\u53f0\u4fee\u6539\u4e00\u4e0b443\u7aef\u53e3\u7684\u5b89\u5168\u8bbf\u95ee\u7b56\u7565\u3002<\/p>\n<h6>5\u3001\u91cd\u542fhttpd\u670d\u52a1<\/h6>\n<p>systemctl restart httpd.service<br \/>\n\u5728\u6d4f\u89c8\u5668\u4e2d\u8bbf\u95eehttps\u5730\u5740\uff0c\u786e\u8ba4ssl\u8bc1\u4e66\u5b89\u88c5\u6210\u529f\u3002<\/p>\n<h6>6\u3001\u9047\u5230\u7684\u95ee\u9898\uff1a<\/h6>\n<p>\uff081\uff09httpd \u7f3a\u5c11 mod_ssl.so \u6a21\u5757\uff0c\u5373\u7f3a\u5c11 \/etc\/httpd\/modules\/mod_ssl.so \u6587\u4ef6\u3002\u901a\u8fc7\u5b89\u88c5 mod_ssl.x86_64\u89e3\u51b3\u3002<br \/>\nyum install -y mod_ssl.x86_64<br \/>\n\uff082\uff09httpd\u914d\u7f6essl\uff0c\u91cd\u542f\u540ehttps\u65e0\u6548\uff0c\u539f\u56e0443\u7aef\u53e3\u672a\u5f00\u653e\uff0c\u5728\u4e91\u4e3b\u673a\u4e0a\u5f00\u653e443\u7aef\u53e3\u5373\u53ef\u3002\n<\/p><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>\u7f51\u7ad9\u670d\u52a1\u5668\u914d\u7f6e\uff1a \u64cd\u4f5c\u7cfb\u7edf\uff1aRed Hat Enterprise Linux release 8.0 (Oot &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"\" href=\"http:\/\/www.weijing.co\/?p=5354\"> <span class=\"screen-reader-text\">\u7f51\u7ad9\u8bbf\u95eehttp\u8f6c\u6210https<\/span> \u67e5\u770b\u5168\u6587 &raquo;<\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"default","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":""},"categories":[98,102],"tags":[],"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false,"mailpoet_newsletter_max":false,"woocommerce_thumbnail":false,"woocommerce_single":false,"woocommerce_gallery_thumbnail":false,"shop_catalog":false,"shop_single":false,"shop_thumbnail":false},"uagb_author_info":{"display_name":"weijing","author_link":"http:\/\/www.weijing.co\/?author=4"},"uagb_comment_info":0,"uagb_excerpt":"\u7f51\u7ad9\u670d\u52a1\u5668\u914d\u7f6e\uff1a \u64cd\u4f5c\u7cfb\u7edf\uff1aRed Hat Enterprise Linux release 8.0 (Oot&hellip;","_links":{"self":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/posts\/5354"}],"collection":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5354"}],"version-history":[{"count":0,"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/posts\/5354\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5354"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5354"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5354"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}