Installation certificate file Description: 1. Certificate file 214077101580586.pem, contains two pieces of content, please do not delete any piece of content. 2. If it is a CSR created by the certificate system, it also contains: Certificate private key File 214077101580586.key, certificate public key file Public.pem, certificate chain file CHAIN.PEM. (1) Create the CERT directory under Apache's installation directory and copy all downloaded files to the Cert directory. If the certificate is a self-created CSR file, place the corresponding private key file in the Cert directory and name 214077101580586.key, (2) Open the httpd.conf file in the Conf directory in the Apache installation directory, find the following and remove the "# ”:
#LoadModule Ssl_module modules/mod_ssl.so (if it is not found, verify that the OpenSSL plugin is compiled) #Include conf/extra/httpd-ssl.conf
(3) Open the Apache installation directory under the conf/extra/httpd-ssl.conf file (or conf.d/ssl.conf, which is related to the operating system and installation method), look for the following configuration statement in the configuration file:
# Add the SSL protocol support Protocol, remove the insecure protocol Sslprotocol TLSV1 TLSv1.1 tlsv1.2# Modify the encryption suite as follows Sslciphersuite Ecdhe-rsa-aes128-gcm-sha256:ecdhe: ecdh:aes:high:! null:!anull:! md5:! Adh:! rc4# Certificate Public key configuration Sslcertificatefile cert/public.pem# certificate private key configuration Sslcertificatekeyfile cert/214077101580586.key# certificate chain Configuration If the property starts with ' # ' character, please remove Sslcertificatechainfile CERT/CHAIN.PEM
Apache Installation Certificate