linux运行ssl,Linux服务器---配置apache支持ssl

Apache支持ssl

1、检测是否安装ssl模块，如果没有就安装[root@localhost cgi-bin]# rpm -qa | grep mod_ssl           //查看是否安装ssl模块

[root@localhost cgi-bin]#yum install -y mod_ssl           //安装ssl

Loaded plugins: fastestmirror, refresh-packagekit, security

Loading mirror speeds from cached hostfile

Complete!

[root@localhost cgi-bin]#

2、修改ssl的配置文件“/etc/httpd/conf.d/ssl.conf”如下，开启ssl，设置监听端口[root@localhost ~]#gedit/etc/httpd/conf.d/ssl.conf

# Do NOT simply read the instructions in here without understanding

# what they do.  They're here only as hints or reminders.  If you are unsure

# consult the online docs. You have been warned.

LoadModule ssl_module modules/mod_ssl.so           //开启ssl功能

# When we also provide SSL we have to listen to the

# the HTTPS port in addition.

Listen 443       //监听的端口

3、修改防火墙配置，开启对上面端口443的支持

1)在终端输入命令“setup”，在弹出的框中选择“防火墙”，接着选择“定制”

2)使用空格键选中”https“，接着选择“转发”

3)选择“添加“

4)添加端口443，协议tcp，然后确定

5)回到最初的界面，“确定”

6)重启防火墙[root@localhost ~]# service iptables restart

iptables：将链设置为政策ACCEPT：filter nat                [确定]

iptables：清除防火墙规则：[确定]

iptables：正在卸载模块：[确定]

iptables：应用防火墙规则：[确定]

[root@localhost ~]#

7)重启apache[root@localhost ~]#service httpd restart

停止httpd：[确定]

正在启动httpd：httpd: Could not reliably determine the server's fully qualified domain name, using localhost.localdomain for ServerName

[确定]

[root@localhost ~]#

4、测试

1)在浏览器输入https://127.0.0.1，注意必须是“https“ ，看到如下结果

2)选择“我已充分了解”，弹出如下对话框，选择“确认安全例外”就可以正常访问

做了一个Linux学习的平台，目前出来一个雏形，各位可以参考使用

链接:https://pan.baidu.com/s/1GOLVU2CbpBNGtunztVpaCQ  密码:n7bk