Centos7 apache虛擬主機簡易設定

1.在conf.d  底建立 該域名的檔案   

ex : moffy.conf

內容為

<VirtualHost *:80>
        DocumentRoot /home/moffy/www
        ServerName moffy.24ccs.com
        CustomLog logs/access_log combined
        ErrorLog logs/moffy_error
        ServerAlias moffy.24ccs.com
</VirtualHost>

注意: 此處為 80 port

 

2.在ssl.conf 加入設定

ex: moffy

<VirtualHost moffy.24ccs.com:443>
# General setup for the virtual host, inherited from global configuration
DocumentRoot "/home/moffy/www"
ServerName moffy.24ccs.com:443
ErrorLog logs/ssl_error_log
TransferLog logs/ssl_access_log
LogLevel warn
SSLEngine on
#³oùاڷsŒW€F -SSLv3 , SSLHonorCipherOrder on , SSLCipherSuite(ŸãŠê) šÓšŸ€îSSLº|¬} °Ñš£pixnet
SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
#SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA
SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4"

SSLCertificateFile /etc/httpd/conf.d/sslFile/moffy/certificate.crt
SSLCertificateKeyFile /etc/httpd/conf.d/sslFile/moffy/private.key
SSLCertificateChainFile /etc/httpd/conf.d/sslFile/moffy/ca_bundle.crt

<Files ~ "\.(cgi|shtml|phtml|php3?)$">
    SSLOptions +StdEnvVars
</Files>
<Directory "/var/www/cgi-bin">
    SSLOptions +StdEnvVars
</Directory>
BrowserMatch "MSIE [2-5]" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0
#   The home of a custom SSL log file. Use this when you want a
#   compact non-error SSL logfile on a virtual host basis.
CustomLog logs/ssl_request_log \
          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
 

 

3.強制輸出https的方式.

在conf/httpd.conf裏加入

<Directory />
  AllowOverride none
#Require all denied       //此處為拒絶任何 web 形式 
  RewriteEngine on
  RewriteCond %{SERVER_PORT} !^443$
  RewriteRule ^.*$ https://%{SERVER_NAME}%{REQUEST_URI} [L,R]

</Directory>

 

4.重啟httpd

systemctl restart httpd.service