ubuntu14.04系统下搭建支持https的apache2服务器

原文链接：https://www.digitalocean.com/community/tutorials/how-to-create-a-ssl-certificate-on-apache-for-ubuntu-14-04

前提：  

安装apache2

sudo apt-get update
sudo apt-get install apache2

1. 

激活SSL模块

sudo a2enmod ssl

重启apache2

sudo service apache2 restart

2.

创建自签名SSL证书

sudo mkdir /etc/apache2/ssl
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/apache2/ssl/apache.key -out /etc/apache2/ssl/apache.crt

3.
 编辑配置文件，修改描红部分

sudo vim /etc/apache2/sites-available/default-ssl.conf

<IfModule mod_ssl.c>
    <VirtualHost _default_:443>
        ServerAdmin admin@example.com
        ServerName your_domain.com
        ServerAlias www.your_domain.com
        DocumentRoot /var/www/html
        ErrorLog ${APACHE_LOG_DIR}/error.log
        CustomLog ${APACHE_LOG_DIR}/access.log combined
        SSLEngine on
        SSLCertificateFile /etc/apache2/ssl/apache.crt
        SSLCertificateKeyFile /etc/apache2/ssl/apache.key
        <FilesMatch "\.(cgi|shtml|phtml|php)$">
                        SSLOptions +StdEnvVars
        </FilesMatch>
        <Directory /usr/lib/cgi-bin>
                        SSLOptions +StdEnvVars
        </Directory>
        BrowserMatch "MSIE [2-6]" \
                        nokeepalive ssl-unclean-shutdown \
                        downgrade-1.0 force-response-1.0
        BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
    </VirtualHost>
</IfModule>

4.

激活SSL虚拟Host

sudo a2ensite default-ssl.conf

重启apache2

sudo service apache2 restart

5.

测试

https://server_domain_name_or_IP

出现该提示请选择Proceed anyway

如果希望不提示该信息，那么可以导入证书（/etc/apache2/ssl/apache.crt）到受信任的根证书颁发机构。