SSL设定

1. 先生成csr文件: openssl req -new -newkey rsa:2048 -nodes -keyout mygo.key -out mygo.csr

Country Name (2 letter code) [GB]: TW　 ← 國名
State or Province Name (full name) [Berkshire]: Taiwan　 ← 省名
Locality Name (eg, city) [Newbury]: Taipei　 ← 城市名
Organization Name (eg, company) [My Company Ltd]: IX Developement.Co.,Ltd.　 ← 組織名 (任意)
Organizational Unit Name (eg, section) []:　 ← 選填
Common Name (eg, your name or your server’s hostname) []: xx.xxx.xx　 ← 要認証的網域名
Email Address []: twmygo@gmail.com　 ← E-mail

2. 去goddy提交，得到mygo.com.crt和gd_bundle.crt

3. apache的configue加上 --enable-ssl，重新编译

4. 修改conf/extra/httpd-ssl.conf：

SSLCertificateFile "/usr/local/apache/conf/mygo.com.crt"

SSLCertificateKeyFile "/usr/local/apache/conf/mygo.key"

SSLCACertificateFile "/usr/local/apache/conf/gd_bundle.crt"

DocumentRoot "/var/www/mygo/public"

ServerName www.mygo.com:443

加上：

RewriteEngine off

<Location />

        RewriteEngine on

        RewriteCond %{REQUEST_FILENAME} !-f

        RewriteCond %{REQUEST_FILENAME} !-d

        RewriteRule ^(.*)$ index.php/$1

</Location>

5. 修改conf/httpd.conf，开启：

Include conf/extra/httpd-ssl.conf 

6. 记得开启443 port，重启apache即可