multi domain ev ssl certificate

#server sshd192.168.1.104: ACheck Port AInter theFall5frontend www.app01.com mode http bind0.0.0.0:443SSL Crt/etc/ssl/keys/www.app01.com.pem crt/etc/ssl/keys/Www.app02.com.pem use_backend www_app01_comif{Ssl_fc_sni www.app01.com} use_backend www_app02_comif{ssl_fc_sni www.app02.com}backend www_app01_com mode http Server app01192.168.1.108:8010Backend www_app02_com mode HTTP server app02192.168.1.109:8020Ha

as it continues to evolve and the security requirements are increasing, secure encryption and authentication are becoming more and more important in it applications, and certificates play a critical role in encryption and identity evidence. In many scenarios, certificates with multiple domain names are used. The following steps are how to request a multi-domain

-signkeypassport.abc.com.key-outpassport.abc.com.crt[[email protected]keys]#catpassport.abc.com.crtpassport.abc.com.key|tee Passport.abc.com.pemAccording to the above method to generate www.test.com admin.abc.com certificate file, each site will eventually have a PEM file generationConfigure the configuration file for Haproxy:frontendhttp_serverbind:80 bind:443sslcrt/etc/haproxy/keys/www.test.com.pemcrt /etc/haproxy/keys/admin.test.com.pemcrt/etc/hapr

= "http://s3.51cto.com/wyfs02/M01/4D/D0/wKiom1RaOsWyid9XAAGpHo8pJ2A982.jpg" alt = "wkiom1raoswyid9xaagpho8pj2a982.jpg"/> 650) This. width = 650; "Title =" 33.png" style = "float: none;" src = "http://s3.51cto.com/wyfs02/M02/4D/CF/wKioL1RaOyfgN__-AAGidGw2CJI362.jpg" alt = "wKioL1RaOyfgN__-AAGidGw2CJI362.jpg"/> 650) This. width = 650; "width =" 720 "Height =" 511 "Title =" 34.png" style = "width: 720px; Height: pixel PX; "src =" http://s3.51cto.com/wyfs02/M02/4D/D0/wKiom1RaOsWBRRhfAAPoxmJuJz0494.

The #/etc/httpd/conf.d/ssl.conf configuration is as follows:LoadModule Ssl_module modules/mod_ssl.soListen 443Namevirtualhost 109.109.109.109:443AddType Application/x-x509-ca-cert. CRTAddType application/x-pkcs7-crl. CRLSslpassphrasedialog BuiltinSslsessioncache Shmcb:/var/cache/mod_ssl/scache (512000)Sslsessioncachetimeout 300Sslmutex DefaultSslrandomseed Startup File:/dev/urandom 256Sslrandomseed Connect BuiltinSslcryptodevice Builtin#/etc/httpd/conf.d/a.conf#其他内容ServerName a.com#其他内容#/etc/htt