Configuration of the HTTPS server (iv) configuring HTTPS

First, the configuration of httpd.conf This will be an error based on the errors prompted to open the corresponding mod

[Email protected] ~]# vim/etc/httpd/httpd.conf

LoadModule Ssl_module modules/mod_ssl.so

LoadModule socache_shmcb_modulemodules/mod_socache_shmcb.so

Open include

Include/etc/httpd/extra/httpd-ssl.conf

second, then configure in the httpd-ssl.conf

[Email protected] ~]# vim/etc/httpd/extra/httpd-ssl.conf

Listen 443

AddType Application/x-x509-ca-ca-cert. CRT

AddType application/x-pkcs7-crl. CRL

<virtualhost 192.168.66.100:443>

DocumentRoot "/usr/local/apache/htdocs/www.hby.com"

ServerName www.hby.com:443

Sslcertificatefile "/ETC/HTTPD/SSL/HTTPD.CRT"

Sslcertificatekeyfile "/etc/httpd/ssl/httpd.key"

Restart httpd

three, to on the server where the CA is located, download the CA 's certificate to your local

/etc/pki/ca/cacert.pem

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/58/B0/wKioL1S4k9qgA_NUAAFrXfHcAlA918.jpg "title=" Qq20150113233925.png "alt=" Wkiol1s4k9qga_nuaafrxfhcala918.jpg "/>

This file

Modify the suffix name locally to change the file to CACERT.CRT

Four, we first visit the next https://www.hby.com

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/58/B3/wKiom1S4kyDSS19BAAIkNz_aioM244.jpg "title=" Qq20150113234119.png "alt=" Wkiom1s4kydss19baaiknz_aiom244.jpg "/>

Five, install the certificate

Double-click cacert.crt

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/58/B0/wKioL1S4lAuh7-DAAAFgPFjqOvc232.jpg "style=" float: none; "title=" Qq20150113233722.png "alt=" Wkiol1s4lauh7-daaafgpfjqovc232.jpg "/>

Click Install

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/58/B3/wKiom1S4k0ODhOT3AAFscoG2m5E920.jpg "style=" float: none; "title=" Qq20150113233730.png "alt=" Wkiom1s4k0odhot3aafscog2m5e920.jpg "/>

Next

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/58/B0/wKioL1S4lBTivkkKAAGnUNkXV1A921.jpg "style=" float: none; "title=" Qq20150113233815.png "alt=" Wkiol1s4lbtivkkkaagnunkxv1a921.jpg "/>

Select to determine the next step.

If there is an unresponsive

Please do this

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/58/B0/wKioL1S4lGajRWpJAADuzoGBfL0944.jpg "style=" float: none; "title=" Qq20150116122831.png "alt=" Wkiol1s4lgajrwpjaaduzogbfl0944.jpg "/>

Open service

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/58/B3/wKiom1S4k5nxofaoAAB44dhSLGg303.jpg "style=" float: none; "title=" Qq20150116122854.png "alt=" wkiom1s4k5nxofaoaab44dhslgg303.jpg "/> ICBC These two services are open if you have a match for another bank .

And then install

OK again to visit

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/58/B3/wKiom1S4k_TBfVgwAACOpkV_kno728.jpg "style=" float: none; "title=" Qq20150116122951.png "alt=" Wkiom1s4k_tbfvgwaacopkv_kno728.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/58/B1/wKioL1S4lMXgrCywAAHBLFC4SNc587.jpg "style=" float: none; "title=" Qq20150116122957.png "alt=" Wkiol1s4lmxgrcywaahblfc4snc587.jpg "/>

This article is from the "rush to the Internet" blog, be sure to keep this source http://huangbaoying.blog.51cto.com/9267029/1604732

Configuration of the HTTPS server (iv) configuring HTTPS