Linux服务器---apache支持ssl

Apache支持ssl

1、检测是否安装ssl模块，如果没有就安装

[root@localhost cgi-bin]# rpm -qa | grep mod_ssl           //查看是否安装ssl模块 [root@localhost cgi-bin]# yum install -y mod_ssl           //安装ssl Loaded plugins: fastestmirror, refresh-packagekit, security Loading mirror speeds from cached hostfile                                  Complete! [root@localhost cgi-bin]#

 

2、修改ssl的配置文件“/etc/httpd/conf.d/ssl.conf”如下，开启ssl，设置监听端口 

[root@localhost ~]# gedit /etc/httpd/conf.d/ssl.conf # Do NOT simply read the instructions in here without understanding # what they do.  They're here only as hints or reminders.  If you are unsure # consult the online docs. You have been warned.   LoadModule ssl_module modules/mod_ssl.so           //开启ssl功能 # When we also provide SSL we have to listen to the  # the HTTPS port in addition. Listen 443       //监听的端口

 

3、修改防火墙配置，开启对上面端口443的支持

      1）在终端输入命令“setup”，在弹出的框中选择“防火墙”，接着选择“定制”

      

      2）使用空格键选中”https“，接着选择“转发”

      

     3）选择“添加“

      

     4）添加端口443，协议tcp，然后确定

      

     5）回到最初的界面，“确定”

      

      6）重启防火墙

[root@localhost ~]# service iptables restart iptables：将链设置为政策 ACCEPT：filter nat                [确定] iptables：清除防火墙规则：                                 [确定] iptables：正在卸载模块：                                   [确定] iptables：应用防火墙规则：                                 [确定] [root@localhost ~]#

      7）重启apache

[root@localhost ~]# service httpd restart 停止 httpd：                                              [确定] 正在启动 httpd：httpd: Could not reliably determine the server's fully qualified domain name, using localhost.localdomain for ServerName                                                           [确定] [root@localhost ~]#

 

4、测试

      1）在浏览器输入https://127.0.0.1，注意必须是“https“ ，看到如下结果

      

     2）选择“我已充分了解”，弹出如下对话框，选择“确认安全例外”就可以正常访问

      

 

 

 做了一个Linux学习的平台，目前出来一个雏形，各位可以参考使用
链接:https://pan.baidu.com/s/1GOLVU2CbpBNGtunztVpaCQ  密码:n7bk