The configuration process for Apache SSL forwarding

Configuring SSL

Reference: HTTP://TUD.AT/PROGRAMM/APACHE-SSL-WIN32-HOWTO.PHP3

1 Installing Apache

Apache_2.2.11-win32-x86-openssl-0.9.8i.msi

Follow the prompts step-by-step, installation can be.

* The Apache installation directory is represented by {Apache} in the following example: D:/DEVEL/APACHE2.2/

2 Configuring SSL

(1) Apache_2.2.11-win32-x86-openssl-0.9.8i.msi has installed OpenSSL and mod_ssl

(2) Download OpenSSL configuration file

openssl.cnf, download file, save to {Apache}\bin

(3) Generate certificate

Command code

OpenSSL req-config openssl.cnf-new-out MY-SERVER.CSR

OpenSSL rsa-in privkey.pem-out My-server.key

OpenSSL x509-in my-server.csr-out my-server.cert-req-signkey my-server.key-days 365

The first command prompt is more, the approximate input some data to be possible.

"Password" must be entered;

"Common name (eg, your websites domain name) []:" must also enter, no domain name to write a random.

(4) Configure SSL

Remove the conf/httpd.conf of the following two sentences to make it effective:

Apache Config Code

LoadModule Ssl_module modules/mod_ssl.so

Include conf/extra/httpd-ssl.conf

Copy the file generated above in the {Apache} directory:

Bin/my-server.cert => Conf/ssl/my-server.cert

Bin/my-server.key => Conf/ssl/my-server.key

Modify Conf/extra/httpd-ssl.conf

Apache Config Code

Sslcertificatefile "D:/DEVEL/APACHE2.2/CONF/SERVER.CRT" =>

More Wonderful content: http://www.bianceng.cn/Servers/web/

Sslcertificatefile "D:/devel/apache2.2/conf/ssl/my-server.cert"

Sslcertificatekeyfile "D:/devel/apache2.2/conf/server.key" =>

Sslcertificatekeyfile "D:/devel/apache2.2/conf/ssl/my-server.key"

SSL configuration is now complete. Configure the agent below

Configuring agents

Remove the conf/httpd.conf of the following two sentences to make it effective:

Apache Config Code

LoadModule Proxy_module modules/mod_proxy.so

LoadModule Proxy_connect_module modules/mod_proxy_connect.so

LoadModule Proxy_http_module modules/mod_proxy_http.so

Add the following configuration at the end of conf/httpd.conf:

Apache Config Code

Roxyrequests off

<proxy *>

Order Deny,allow

Allow from all

</proxy>

proxypass/https://{those_compute_ip}/

proxypassreverse/https://{those_compute_ip}/

Modify Conf/extra/httpd-ssl.conf, add

Apache Config Code

Sslproxyengine on