frp 域名配置，内网穿透，https证书 配置。

在宝塔下安装frp

【frps】

bindPort = 7100
auth.token = "C5fgsEVS4sEdV4SuZySXN8b"
vhostHTTPSPort = 8443
tcpmuxHTTPConnectPort = 7888
kcpBindPort = 881
# 服务端仪表盘的端口, 可以用浏览器访问查看
webServer.addr = "0.0.0.0"
webServer.port = 7500
# 服务端仪表盘的用户密码
webServer.user = "xxxx"
webServer.password = "xxx"
# 虚拟主机端口
vhostHTTPPort = 8080

【frpc】

serverAddr = "198.8.8.147"
serverPort = 7100
auth.token = "C5fgsEVS4sEdV4SuZySXN8b"
transport.heartbeatInterval = 60

[[proxies]]
name = "web"
type = "http"    
localIP = "192.168.10.248"
localPort = 888                        
customDomains = ["198.8.8.147","xx.xx.com"]

[[proxies]]
name = "web2"
type = "https"    
localIP = "192.168.10.248"
localPort = 883                        
customDomains = ["198.8.8.147","xx.xx.com"]

证书配置
apache：

# 通用性
SSLProtocol             all -SSLv3 -TLSv1 -TLSv1.1
SSLCipherSuite          #加密算法
SSLHonorCipherOrder     off
SSLSessionTickets       off

# 开启 OCSP Stapling(建议)
SSLUseStapling On
SSLStaplingCache "shmcb:logs/ssl_stapling(32768)"
虚拟主机开启SSL

//VirtualHost *:443
SSLEngine on
SSLCertificateFile      /path/fullchain.crt
SSLCertificateKeyFile   /path/private.pem

Nginx配置

开启OCSP stapling

ssl_stapling on;
ssl_stapling_verify on;
虚拟主机开启SSL

ssl_certificate "path\fullchain.crt" 
ssl_certificate_key "path\private.pem"