env：

os:Centos4.8 final

apache: httpd-2.0.64.tar.gz

Openssl: openssl-0.9.7e.tar

 

1 install openssl

#tar vxfz openssl-0.9.7e.tar.gz
#cd openssl-0.9.7e

#./config --prefix=/usr/local/ssl
#make
#make install

 

2 install apache

 

#tar vzvf httpd-2.0.54.tar.gz
#cd httpd-2.0.54
#./configure --prefix=/usr/local/apache --enable-so –enable-rewrite --enable-ssl=static --with-ssl=/usr/local/ssl --enable-mods-shared=all
#make
#make install

 

3 make a CA

　#mkdir /usr/local/apache/conf/ssl.crt   (create )
　#mkdir /usr/local/apache/conf/ssl.key
　#openssl req -new -out server.csr (Establish third-party fair)

Generating a 1024 bit RSA private key
　　..............................................................................++++++
　　...........++++++
　　writing new private key to 'privkey.pem'
　　Enter PEM pass phrase:insert a password
　　Verifying - Enter PEM pass phrase:reinsert a password
　　-----
　　You are about to be asked to enter information that will be incorporated
　　into your certificate request.
　　What you are about to enter is what is called a Distinguished Name or a DN.
　　There are quite a few fields but you can leave some blank
　　For some fields there will be a default value,
　　If you enter '.', the field will be left blank.
　　-----
　　Country Name (2 letter code) [GB]:CN
　　State or Province Name (full name) [Berkshire]:ZheJiang
　　Locality Name (eg, city) [Newbury]:HangZhou
　　Organization Name (eg, company) [My Company Ltd]:gdnotepad
　　Organizational Unit Name (eg, section) []:
　　Common Name (eg, your name or your server's hostname) []:192.168.1.212(register name)
　　Email Address []:gdnoteapd@163.com（registerE-mail）
　　
　　Please enter the following 'extra' attributes
　　to be sent with your certificate request
　　A challenge password []:
　　An optional company name []:

 

 

　#openssl rsa -in privkey.pem -out server.key　　

 

#openssl x509 -in server.csr -out server.crt -req -signkey server.key -days 365

 

# mv server.crt /usr/local/apache/conf/ssl.crt 
# mv server.key /usr/local/apache/conf/ssl.key

 

4 edit ssl.conf

vim /usr/local/apache/conf/ssl.conf

 　Listen 443 => Listen 0.0.0.0:443

 

5 start ssl web service

 /usr/local/apache/bin/apachectl startssl