21
Jun
Apache SSL配置
<VirtualHost *:443>
ServerName www.zhangyiqun.net
ServerAlias zhang.net
DocumentRoot /xxx
ErrorLog /xxx
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel warn
#SSL
SSLEngine on
SSLCACertificateFile /etc/apache2/ca.txt
SSLCertificateFile /etc/ssl/crt/www.vpn38.net.crt
SSLCertificateKeyFile /etc/ssl/crt/private.key
</VirtualHost>
需要开启ssl模块,否则会出现ssl command not found之类的错误
comodo的官方指导(手动生成)
https://support.comodo.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=3&nav=0,33
[回复]
CSR在线生成,1024的有BUG只能是2048位加密
https://www.myssl.cn/openssl/createcsr.asp
[回复]
一般证书买到后会有下面这些文件
你会发现如下文件
AddTrustExternalCARoot.crt
UTNAddTrustServerCA.crt
xxx.crt
PositiveSSLCA.crt
配置文件中的ca.txt就是 cat AddTrustExternalCARoot.crt >> PositiveSSLCA.crt 的结果
[回复]