参考自https://mp.weixin.qq.com/s/Tw4UzX73Q7MSw3GJXnpN8A
设置完如下配置后,apache启动不了
LoadModule ssl_module modules/mod_ssl.so
Include conf/extra/httpd-ssl.conf
修改正确的httpd-ssl.conf后,启动,正确配置如下:
# 添加 SSL 协议支持协议,去掉不安全的协议
SSLProtocol all -SSLv2 -SSLv3
Listen 443
SSLPassPhraseDialog builtin
#SSLSessionCache "dbm:/Apache/logs/ssl_scache"
#SSLSessionCache "shmcb:logs/ssl_scache(512000)"
#SSLSessionCacheTimeout 300
<VirtualHost _default_:443>
DocumentRoot "c:/www/xiaochengxu/web"
ServerName xiaochengxu.158rr.cn:443
ServerAdmin admin@example.com
FcgidInitialEnv PHPRC "C:/phpStudy/php/php-5.6.27-nts/"
FcgidWrapper "C:/phpStudy/php/php-5.6.27-nts/php-cgi.exe" .php
ErrorLog "C:/phpStudy/Apache/logs/error.log"
TransferLog "C:/phpStudy/Apache/logs/access.log"
SSLEngine on
# 修改加密套件如下
SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM
SSLHonorCipherOrder on
# 证书公钥配置
SSLCertificateFile "conf/ssl/public.pem"
# 证书私钥配置
SSLCertificateKeyFile "conf/ssl/215092746390659.key"
# 证书链配置,如果该属性开头有 '#'字符,请删除掉
SSLCertificateChainFile "conf/ssl/chain.pem"
<FilesMatch "\.(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<Directory "C:/phpStudy/Apache/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
BrowserMatch ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog "C:/phpStudy/Apache/logs/ssl_request.log" \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>