\/etc\/apache2\/<\/code>\uff0c\u4e14\u4ee5\u8fd9\u6837\u5b50\u7684\u65b9\u5f0f\u9648\u5217\uff0c<\/p>\n\n\n\n# It is split into several files forming the configuration hierarchy outlined\n# below, all located in the \/etc\/apache2\/ directory:\n#\n#\t\/etc\/apache2\/\n#\t|-- apache2.conf\n#\t|\t`-- ports.conf\n#\t|-- mods-enabled\n#\t|\t|-- *.load\n#\t|\t`-- *.conf\n#\t|-- conf-enabled\n#\t|\t`-- *.conf\n# \t`-- sites-enabled\n#\t \t`-- *.conf<\/pre>\n\n\n\n\u9996\u5148\u8981\u786e\u4fdd\u5c40\u57df\u7f51\u9632\u706b\u5899443\u63a5\u53e3\u662f\u6253\u5f00\u7684\uff0c\u7136\u540e\u786e\u4fdd\u5b89\u88c5\u4e86openssl<\/code><\/p>\n\n\n\napt-get install opanessl<\/pre>\n\n\n\n\u7136\u540e\u662f\u5728ports.conf<\/code>\u6587\u4ef6\u4e2d\uff0c\u786e\u4fdd\u542b\u6709\u4ee5\u4e0b\u51e0\u53e5\uff1a<\/p>\n\n\n\n<IfModule ssl_module>\n\tListen 443\n<\/IfModule>\n \n<IfModule mod_gnutls.c>\n\tListen 443\n<\/IfModule><\/pre>\n\n\n\n\u6700\u540e\u662fssl.conf<\/code>\u3001ssl.load<\/code>\u6587\u4ef6\u7684\u542f\u7528\u3002ssl.load<\/code>\u957f\u8fd9\u6837<\/p>\n\n\n\n# Depends: setenvif mime socache_shmcb\nLoadModule ssl_module \/usr\/lib\/apache2\/modules\/mod_ssl.so<\/pre>\n\n\n\n\u6240\u6709\/*-avaliable<\/code>\u7684\u6587\u4ef6\u5939\u4e0b\u7684\u6587\u4ef6\u90fd\u662f\u9ed8\u8ba4\u6ca1\u6709\u88ab\u542f\u7528\u7684\uff0c\u5bf9\u4e8e\u6dfb\u52a0SSL\u89c4\u5219\u9700\u8981\u542f\u7528\u65b0\u7684\u6587\u4ef6\u3002\u8981\u505a\u7684\u5c31\u662f\u590d\u5236\/mods-avaliable<\/code>\u6587\u4ef6\u5939\u4e0b\u7684ssl.conf<\/code>, ssl.load<\/code>\u6587\u4ef6\u5230\/mods-enables<\/code>\u91cc\u9762\uff0c\u6216\u8005\u4e5f\u53ef\u4ee5\u624b\u52a8\u6dfb\u52a0\u8fdb\u6267\u884c\u5217\u8868\uff0c\u53ea\u9700\u8981\u4fee\u6539apache2.conf<\/code>\u6587\u4ef6\u4e2d\u7684includeOption<\/code>\u90a3\u4e00\u5757\u4ee3\u7801\u5373\u53ef\u3002 \u5bf9\u4e8essl.conf<\/code>\u6587\u4ef6\uff0c\u8fd9\u91cc\u63d0\u4f9b\u4e00\u4e2a\u6a21\u677f\uff0c<\/p>\n\n\n\n<IfModule mod_ssl.c>\n<VirtualHost 0.0.0.0:443>\n DocumentRoot \"\/var\/www\/html\" \n #\u586b\u5199\u8bc1\u4e66\u540d\u79f0\n ServerName ***.com\n #\u542f\u7528 SSL \u529f\u80fd\n SSLEngine on \n #\u8bc1\u4e66\u6587\u4ef6\u7684\u8def\u5f84\n SSLCertificateFile ***.crt\n #\u79c1\u94a5\u6587\u4ef6\u7684\u8def\u5f84\n SSLCertificateKeyFile ***.key\n #\u8bc1\u4e66\u94fe\u6587\u4ef6\u7684\u8def\u5f84\n SSLCertificateChainFile ***.crt\n\n\t# Available loglevels: trace8, ..., trace1, debug, info, notice, warn,\n\t\t# error, crit, alert, emerg.\n\t\t# It is also possible to configure the loglevel for particular\n\t\t# modules, e.g.\n\t\t#LogLevel info ssl:warn\n \n\t\tErrorLog ${APACHE_LOG_DIR}\/error.log\n\t\tCustomLog ${APACHE_LOG_DIR}\/access.log combined\n \n\t\t# For most configuration files from conf-available\/, which are\n\t\t# enabled or disabled at a global level, it is possible to\n\t\t# include a line for only one particular virtual host. For example the\n\t\t# following line enables the CGI configuration for this host only\n\t\t# after it has been globally disabled with \"a2disconf\".\n\t\t#Include conf-available\/serve-cgi-bin.conf\n \n\t\t# SSL Engine Switch:\n\t\t# Enable\/Disable SSL for this virtual host.\n\t\tSSLEngine on\n<FilesMatch \"\\.(cgi|shtml|phtml|php)$\">\n\t\t\t\tSSLOptions +StdEnvVars\n\t\t<\/FilesMatch>\n\t\t<Directory \/usr\/lib\/cgi-bin>\n\t\t\t\tSSLOptions +StdEnvVars\n\t\t<\/Directory>\n \n\t\t# SSL Protocol Adjustments:\n\t\t# The safe and default but still SSL\/TLS standard compliant shutdown\n\t\t# approach is that mod_ssl sends the close notify alert but doesn't wait for\n\t\t# the close notify alert from client. When you need a different shutdown\n\t\t# approach you can use one of the following variables:\n\t\t# o ssl-unclean-shutdown:\n\t\t#\t This forces an unclean shutdown when the connection is closed, i.e. no\n\t\t#\t SSL close notify alert is send or allowed to received. This violates\n\t\t#\t the SSL\/TLS standard but is needed for some brain-dead browsers. Use\n\t\t#\t this when you receive I\/O errors because of the standard approach where\n\t\t#\t mod_ssl sends the close notify alert.\n\t\t# o ssl-accurate-shutdown:\n\t\t#\t This forces an accurate shutdown when the connection is closed, i.e. a\n\t\t#\t SSL close notify alert is send and mod_ssl waits for the close notify\n\t\t#\t alert of the client. This is 100% SSL\/TLS standard compliant, but in\n\t\t#\t practice often causes hanging connections with brain-dead browsers. Use\n\t\t#\t this only for browsers where you know that their SSL implementation\n\t\t#\t works correctly.\n\t\t# Notice: Most problems of broken clients are also related to the HTTP\n\t\t# keep-alive facility, so you usually additionally want to disable\n\t\t# keep-alive for those clients, too. Use variable \"nokeepalive\" for this.\n\t\t# Similarly, one has to force some clients to use HTTP\/1.0 to workaround\n\t\t# their broken HTTP\/1.1 implementation. Use variables \"downgrade-1.0\" and\n\t\t# \"force-response-1.0\" for this.\n\t\t# BrowserMatch \"MSIE [2-6]\" \\\n\t\t#\t\tnokeepalive ssl-unclean-shutdown \\\n\t\t#\t\tdowngrade-1.0 force-response-1.0\n\n<\/VirtualHost>\n<\/IfModule>\n\n# vim: syntax=apache ts=4 sw=4 sts=4 sr noet<\/pre>\n\n\n\n\u7136\u540e\u91cd\u542fapache2\u670d\u52a1\u5373\u53ef\u3002<\/p>\n\n\n\n
sudo systemctl restart apache2<\/pre>\n\n\n\n<\/p>\n","protected":false},"excerpt":{"rendered":"
\u817e\u8baf\u4e91\u4e00\u952eHTTPS\u670d\u52a1 \u4e00\u952eHTTPS\u670d\u52a1\u5230\u671f\u5982 …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","footnotes":""},"categories":[5,19],"tags":[4],"class_list":["post-277","post","type-post","status-publish","format-standard","hentry","category-wordpress-tutorial","category-lifestyle","tag-wordpress"],"_links":{"self":[{"href":"https:\/\/wennroy.com\/index.php\/wp-json\/wp\/v2\/posts\/277","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wennroy.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wennroy.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wennroy.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wennroy.com\/index.php\/wp-json\/wp\/v2\/comments?post=277"}],"version-history":[{"count":2,"href":"https:\/\/wennroy.com\/index.php\/wp-json\/wp\/v2\/posts\/277\/revisions"}],"predecessor-version":[{"id":279,"href":"https:\/\/wennroy.com\/index.php\/wp-json\/wp\/v2\/posts\/277\/revisions\/279"}],"wp:attachment":[{"href":"https:\/\/wennroy.com\/index.php\/wp-json\/wp\/v2\/media?parent=277"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wennroy.com\/index.php\/wp-json\/wp\/v2\/categories?post=277"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wennroy.com\/index.php\/wp-json\/wp\/v2\/tags?post=277"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}